Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa
File:                     ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa (raw, json)
Hash identifier:          VGUBQnZJfRLwwkV8d5W5VauGGuzcfEISRX7eu2V7OPw=
Subject key identifier:   DE:72:98:5F:D1:3E:97:BF:ED:3C:73:A2:84:91:A3:A8:9F:92:96:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       244321AFC8ADFA08D5CC6204AA87B251B282381F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa
Signing time:             Wed 12 Mar 2025 00:11:13 +0000
ROA not before:           Wed 12 Mar 2025 00:11:13 +0000
ROA not after:            Wed 16 Apr 2025 23:59:59 +0000
asID:                     22394
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:43:21:af:c8:ad:fa:08:d5:cc:62:04:aa:87:b2:51:b2:82:38:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 12 00:11:13 2025 GMT
            Not After : Apr 16 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:60:d6:64:bc:1d:7b:07:5e:b4:79:0d:51:
                    7d:b1:1f:07:e1:1b:6d:74:16:f4:d5:3c:51:f4:f6:
                    ca:78:63:60:94:1d:d2:fd:2a:d2:25:62:dc:59:3d:
                    12:ff:f3:31:74:33:f7:fe:a9:a9:da:6a:01:1d:c3:
                    65:15:d9:0d:9d:cd:ca:bf:52:40:62:3b:77:c1:13:
                    15:22:fe:aa:f8:2e:83:e8:a6:44:c4:84:96:35:1e:
                    53:58:68:49:9d:0d:7d:14:13:05:f8:ba:22:b9:07:
                    13:40:14:e0:10:65:7d:b9:73:f0:ab:44:4b:76:54:
                    47:bf:4c:0e:be:12:b2:2c:e3:7d:62:f6:0c:6e:6d:
                    e3:ad:a4:c3:f8:ed:87:d9:0d:2c:28:c8:9b:e0:30:
                    b6:1c:79:de:85:9c:8b:cb:6a:4b:ea:c5:28:e2:20:
                    37:03:15:4e:a1:fe:f2:c1:df:73:89:f3:d9:21:02:
                    4f:a7:08:b5:a6:2f:ba:11:a6:d6:9d:82:dc:75:50:
                    b3:9a:89:af:3e:38:6a:39:da:72:7f:a6:36:9a:86:
                    f4:6f:43:5c:75:35:c5:ff:22:50:19:74:8e:46:a1:
                    c8:01:93:1e:03:06:62:5e:2c:08:cf:f0:e8:0a:16:
                    2b:d4:21:68:22:a8:dc:81:0f:21:de:6f:9c:23:fb:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:98:5F:D1:3E:97:BF:ED:3C:73:A2:84:91:A3:A8:9F:92:96:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0c56bc-4f58-421b-9e6e-8a790a137e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:d0:de:d8:7b:31:0a:9e:5b:7f:17:5a:f0:6f:ba:bb:23:
         42:80:ef:5f:29:61:7a:42:a4:fe:41:25:10:c6:40:d6:1b:00:
         91:6d:df:67:19:93:fc:f4:07:84:6d:19:e7:43:75:4a:b5:5f:
         25:3f:88:0d:1e:0a:7d:25:d3:43:72:df:9b:09:aa:b0:75:25:
         bd:5e:aa:ab:68:73:22:fd:92:6b:a0:d1:19:fe:6a:40:5a:17:
         5e:fe:7f:54:7d:16:0d:be:76:bf:24:58:fa:04:45:cc:83:af:
         14:e5:02:dc:bd:17:f3:95:14:ab:e4:91:9b:b1:31:d9:d0:ea:
         ec:53:81:92:66:34:8a:d9:d7:89:d8:ef:5e:26:bd:6d:93:e4:
         8a:c6:e9:6d:d0:b8:8b:fd:25:3b:e9:e7:43:3b:f9:0b:ae:90:
         9e:f8:8b:47:5b:f5:97:af:50:d5:82:83:78:0f:38:39:c9:92:
         ba:fb:c7:b5:87:d3:d7:07:ec:30:33:bc:0c:96:cd:c7:8a:41:
         7e:a1:b2:90:1f:05:2b:51:b1:91:03:79:12:52:d3:18:bd:5f:
         12:9d:6e:76:d1:68:e8:c4:41:66:f6:ac:c1:6c:73:68:31:71:
         2a:e3:8c:eb:05:40:b5:2e:39:e9:92:39:d6:fd:b3:46:43:95:
         19:39:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----