Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f5ec269-4223-4a97-9c74-2227dc1f1b15.roa
File:                     5f5ec269-4223-4a97-9c74-2227dc1f1b15.roa (raw, json)
Hash identifier:          Pxi0tft/7OOXzSztxGKqadcnSZ0iYdycBHhmRoaET9I=
Subject key identifier:   6B:87:FF:42:95:6F:EC:E6:AF:F1:46:84:C6:A1:E4:4F:4B:CD:F7:E7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22D7D955971D547495D6774276A87F68E34FEC7A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f5ec269-4223-4a97-9c74-2227dc1f1b15.roa
Signing time:             Fri 07 Mar 2025 00:30:30 +0000
ROA not before:           Fri 07 Mar 2025 00:30:30 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.70.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d7:d9:55:97:1d:54:74:95:d6:77:42:76:a8:7f:68:e3:4f:ec:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar  7 00:30:30 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:67:68:b9:e9:99:c9:5b:aa:ea:4a:63:f8:
                    a4:1f:b0:20:c1:ea:10:e4:f9:63:86:75:52:91:49:
                    85:f9:5a:51:48:92:36:3f:5c:63:cb:7c:e1:be:e1:
                    8b:f2:e4:c3:ed:39:4c:bb:99:93:ed:ea:63:2d:b5:
                    5d:04:e6:93:4b:44:e8:11:27:3e:80:d1:01:8a:82:
                    e7:02:3d:9a:f6:c2:1e:7b:38:04:fa:23:8b:5b:b3:
                    a5:a9:a3:fd:91:bf:0c:85:92:98:9c:05:48:c5:3d:
                    7a:33:b9:97:3f:ad:e6:c1:11:4e:c0:d5:bc:a0:6f:
                    d9:05:c0:f6:32:03:a3:79:b1:b6:8e:73:bb:7b:28:
                    26:a9:00:1e:0f:7f:48:f8:c6:3d:7b:4e:8b:1e:1e:
                    eb:b0:10:78:25:8e:1d:84:a6:f7:69:79:0f:b7:4a:
                    08:0c:47:b9:e2:17:bf:53:44:00:85:b9:e4:42:a0:
                    d7:36:ba:b0:60:6a:d9:67:ec:b2:d7:e7:77:cf:1e:
                    03:9b:45:95:33:b8:98:15:d1:0e:cc:29:1a:e6:dc:
                    1d:c0:b0:fe:4e:64:55:8b:06:34:47:35:7d:2c:a2:
                    9f:c7:ae:73:58:a4:bb:f0:69:30:4e:22:eb:04:2e:
                    37:f1:90:e0:10:2e:66:01:d8:76:a3:00:0d:2b:03:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:FF:42:95:6F:EC:E6:AF:F1:46:84:C6:A1:E4:4F:4B:CD:F7:E7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f5ec269-4223-4a97-9c74-2227dc1f1b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:59:8d:80:86:d0:a4:ae:fa:98:86:93:e6:df:b6:4c:c2:
         94:0e:42:f1:a3:8e:61:41:67:f2:fe:e0:40:b2:40:21:d8:b7:
         f6:56:ca:9d:4f:7c:7f:e5:1e:55:87:2a:89:f7:27:dc:5f:98:
         cc:0e:fb:fa:d8:cc:3f:31:17:f8:56:17:5a:b2:a9:7a:37:95:
         f3:32:95:7a:01:24:2e:07:cf:a5:13:79:4d:e1:c5:9b:76:55:
         83:5a:5b:20:b5:8f:9e:78:ea:c1:84:17:16:16:5b:51:67:9b:
         9e:32:d4:16:00:d0:94:68:48:ba:fd:d9:ae:5b:63:44:18:5c:
         75:66:b8:55:f3:fb:c1:ba:6f:91:ea:3e:50:aa:13:71:12:cb:
         83:30:3c:ca:9c:70:c9:98:12:e9:77:27:06:5c:81:b1:2c:08:
         3e:ee:06:7e:54:ff:ac:9c:16:49:8c:51:63:38:92:f7:3e:96:
         07:31:98:8f:f0:b0:05:93:a5:c4:78:cc:72:bc:51:35:69:38:
         ef:c1:5d:84:51:62:2e:58:da:b5:4a:03:be:65:97:16:95:52:
         aa:34:19:ca:76:4f:d9:02:16:cd:4b:4e:74:c7:e7:d2:df:90:
         3f:9e:55:6d:91:5e:32:a9:c8:3f:0a:e9:0b:77:16:4b:9f:46:
         73:03:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----