Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa
File:                     a77b9b01-29c2-4491-a2dd-b8a78231d458.roa (raw, json)
Hash identifier:          ihkRNm9n2e+qakirmfllA7PxzSUbzg+u/IxJ8Q1aVqM=
Subject key identifier:   7F:3A:49:3A:A4:B2:72:73:BC:22:2A:04:D3:B1:B3:8D:8B:44:F1:52
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2804CDAA00E2DE01468FD3189061B387EABA2E2E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa
Signing time:             Mon 25 Nov 2024 00:00:00 +0000
ROA not before:           Mon 25 Nov 2024 00:00:00 +0000
ROA not after:            Mon 30 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        18.224.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:04:cd:aa:00:e2:de:01:46:8f:d3:18:90:61:b3:87:ea:ba:2e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 25 00:00:00 2024 GMT
            Not After : Dec 30 23:59:59 2024 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:46:6f:75:28:49:df:0b:48:fc:f4:38:ff:
                    4a:7c:29:ec:86:c7:ab:66:3f:32:e0:a2:ca:8d:5b:
                    cf:40:dc:33:93:51:0b:bf:14:85:9b:c2:db:86:09:
                    d7:e6:fd:a7:ed:48:00:8c:be:5f:47:50:1d:3a:4b:
                    69:f2:d7:45:3b:4d:60:f0:a6:44:41:3c:f2:09:df:
                    fe:3c:e6:48:90:83:f9:f4:df:81:a5:cb:92:88:8c:
                    85:db:f6:eb:63:ab:60:2b:2e:b2:37:5d:b1:68:82:
                    69:8f:cc:66:ef:65:53:94:97:83:f9:29:de:4e:f8:
                    46:87:c4:2c:f2:38:42:64:da:cb:4b:d3:e6:7f:a9:
                    7f:c0:87:92:31:eb:79:90:73:d0:93:45:9f:6d:88:
                    28:c4:d7:60:91:5c:73:ac:b5:2c:d8:4b:a0:0d:af:
                    42:79:1e:1c:84:24:54:68:99:7c:ec:cd:c9:f8:9a:
                    b8:1d:53:a9:ed:f1:8c:4a:21:e3:77:1c:e4:3f:d1:
                    e3:c1:71:59:a5:aa:05:2f:6a:1f:3c:04:cd:7a:bd:
                    96:44:93:a6:e4:e1:4f:b0:5a:8e:1c:4c:1e:c8:80:
                    f7:f7:31:93:2e:e0:4a:20:6f:68:3f:6e:1c:70:3c:
                    d3:22:98:4b:c3:a2:53:ed:0c:d0:91:e8:45:44:78:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:49:3A:A4:B2:72:73:BC:22:2A:04:D3:B1:B3:8D:8B:44:F1:52
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a77b9b01-29c2-4491-a2dd-b8a78231d458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:b5:15:1e:19:46:37:ac:e8:2f:16:cd:59:44:da:0e:c0:
         f1:67:87:02:5d:2d:e4:c2:3d:c5:2d:10:2e:79:af:67:cb:df:
         b8:a8:f1:95:ea:4a:50:04:37:69:4f:0f:99:24:63:7f:1f:e4:
         08:6a:3c:f4:b6:dc:89:e4:9d:d8:36:df:30:e0:2c:56:f1:c9:
         6e:57:7e:8f:6a:e5:33:9e:69:cf:bf:a8:3b:ca:7e:b2:b2:71:
         4e:d2:88:40:27:2e:b1:94:72:41:47:66:cf:a6:03:53:86:04:
         08:c8:be:5e:81:7e:a3:5c:4f:8d:2c:5b:a5:c7:75:16:1f:ef:
         d8:86:01:49:6c:71:98:0c:7e:64:7c:83:9b:43:2b:72:7e:35:
         6f:51:d8:7c:d9:e3:46:79:89:2f:5e:bd:f0:3f:de:5f:04:ad:
         80:a9:d0:45:57:cf:13:09:d3:e4:36:21:e8:20:03:b6:1a:73:
         72:ef:3c:b8:6d:3d:00:47:61:6a:e7:20:d4:83:cf:a8:08:24:
         2a:dd:fa:1a:2a:e7:a4:6b:96:f1:ce:73:cc:27:73:0a:88:08:
         9c:61:c4:bd:d6:b1:59:1d:3a:95:26:a7:eb:59:6a:3c:29:99:
         99:01:ea:29:44:ca:cd:2a:26:a2:b4:90:cb:bc:c7:ab:9c:4c:
         28:46:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----