Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa
File:                     d6153df2-9363-4807-8c81-35df18551a61.roa (raw, json)
Hash identifier:          4n8CwoG+hppjB3Br3RcaUI7h8vrMRgaBmWNbSqb9wjQ=
Subject key identifier:   9D:68:22:D9:B9:1F:7C:94:23:81:F9:CE:E7:02:02:D5:FB:86:AB:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04C07A3F13ADE7BC4B6AC10439CABF9C14CF511F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa
Signing time:             Mon 31 Mar 2025 15:41:16 +0000
ROA not before:           Mon 31 Mar 2025 15:41:16 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.112.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c0:7a:3f:13:ad:e7:bc:4b:6a:c1:04:39:ca:bf:9c:14:cf:51:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 15:41:16 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=eaf2b371fcf86da6f8c363d4735d06d964c51fa1d89808fbe153b8e1c197ed22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:61:93:69:ed:a2:68:ca:37:0b:87:8e:a2:
                    dd:51:84:46:b2:f5:16:86:87:d4:d0:9d:52:d0:33:
                    b2:3a:32:da:0a:99:33:7e:0d:78:50:59:70:a9:f2:
                    d6:bf:0f:df:62:d6:e3:f4:b8:b9:bc:7a:08:01:6a:
                    74:92:0e:e7:28:32:d2:42:bf:53:a8:05:ab:07:ff:
                    8d:ef:24:d2:3b:3a:36:36:62:ed:76:f6:12:06:f9:
                    0e:53:60:ab:34:90:ff:c4:7b:27:c9:41:e2:df:2f:
                    f9:15:ff:10:7f:55:cd:d5:a6:2a:2f:4d:fa:4c:18:
                    19:bd:b5:3f:60:f5:e3:b0:66:f2:46:8c:99:e7:75:
                    81:cf:6c:ee:7d:9d:b8:60:37:6f:3b:04:94:58:74:
                    5a:bd:7a:21:1b:ff:fd:3a:cc:ba:86:41:63:f0:2d:
                    ef:57:46:5e:f1:c1:e2:79:5a:00:c4:25:4f:5f:08:
                    ef:88:09:32:e1:04:bb:ac:3a:de:70:28:c6:ed:7a:
                    e2:e7:c4:79:70:c7:9a:40:ef:f6:49:6d:eb:2b:5d:
                    2b:98:76:c4:18:66:16:78:8e:64:4f:a0:79:e2:78:
                    be:d2:27:f0:ab:e3:8d:43:21:d8:d0:ab:cc:1e:85:
                    21:95:e8:0b:4a:2f:11:80:22:3e:e3:31:bb:f1:ab:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:22:D9:B9:1F:7C:94:23:81:F9:CE:E7:02:02:D5:FB:86:AB:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:8d:41:28:06:86:e4:aa:c3:99:a9:a4:40:a1:40:7e:ba:
         83:e2:6a:86:02:a0:e9:d2:28:1f:07:75:cc:12:e7:ae:c0:46:
         15:fc:c5:45:2c:ac:02:40:de:c0:bd:c0:1d:67:64:c9:99:6f:
         13:a6:88:f3:75:ab:63:73:b0:11:9c:59:9e:fa:f4:0d:90:ed:
         53:88:1e:c8:4a:57:0f:c1:bc:3f:79:6b:e7:94:a8:a2:28:ce:
         49:cd:9a:d6:0a:0f:f1:db:43:95:4a:80:5e:99:52:36:7b:c7:
         dd:3e:0c:84:57:aa:30:e0:a8:d6:67:0b:24:a5:91:f5:87:f5:
         30:53:ec:27:f2:12:39:e8:fb:d7:a3:38:98:cb:34:1e:76:3d:
         ae:4c:a6:ba:98:f7:11:0e:06:d4:de:11:d1:0c:50:d8:01:a5:
         99:f3:70:ec:fe:54:73:06:ce:35:70:da:9c:8a:f3:92:f1:9c:
         a8:f4:5e:2a:88:01:2a:cd:82:80:65:7f:e6:97:90:9e:be:96:
         74:d4:ac:50:b7:c0:c4:4a:c6:b5:fe:45:c4:b5:bb:f4:15:57:
         9d:8b:5c:33:01:4c:99:62:d2:8f:d8:d7:71:fc:7f:95:60:23:
         fa:c0:86:f6:db:f5:d0:b0:fa:7c:28:5d:3a:ba:46:91:c0:60:
         68:99:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----