Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
File:                     c964bb16-b590-4c0c-89eb-29a939e70a6d.roa (raw, json)
Hash identifier:          dU7iNlDRfcFMnioEjbyZ7upk2g3Oie8uoXGeXhOD/Ec=
Subject key identifier:   1E:6F:59:41:05:D7:5B:FE:1F:2F:7C:A3:94:9E:D8:24:AF:DF:7A:7E
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       475F53E25B9D8E24CD43FF98ABF56FE7F05BF88A
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa
Signing time:             Mon 31 Mar 2025 16:11:11 +0000
ROA not before:           Mon 31 Mar 2025 16:11:11 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5f:53:e2:5b:9d:8e:24:cd:43:ff:98:ab:f5:6f:e7:f0:5b:f8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Mar 31 16:11:11 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f35eab1e259cd43bb6e9ed22ac49f60328d28df77954c33adce0b229759293d6, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:8d:69:b8:7d:0f:8f:54:06:84:26:0b:d3:
                    5b:5d:be:b3:c5:f4:3f:00:ec:5d:43:91:25:6f:06:
                    8d:6a:06:03:5c:f0:80:14:4f:21:ad:f2:c6:22:d1:
                    7e:75:f5:0c:04:43:88:b6:a9:69:76:2f:11:75:b2:
                    c2:b2:65:5c:09:8c:a4:ff:c3:f8:eb:33:bf:fe:5b:
                    c8:f3:ca:59:0d:c6:90:84:3e:ce:1b:dc:5f:bc:60:
                    0d:3d:43:f8:07:c4:6b:79:fc:0e:2b:84:01:8f:38:
                    45:d0:f7:b9:36:4c:c9:9d:b1:35:de:4d:73:d5:84:
                    2d:c2:ef:68:70:51:59:74:0f:bc:81:68:2c:f6:35:
                    f6:d1:43:e7:5e:fd:fc:8d:e0:1d:52:89:68:84:24:
                    d1:69:d0:78:94:8e:7c:b3:f0:a1:70:6a:77:42:82:
                    18:74:22:6d:71:be:2d:3c:59:27:88:83:cf:83:a9:
                    8f:e4:99:41:0f:f1:6b:05:d9:10:f7:eb:b4:88:33:
                    5c:5a:fb:ad:e3:1f:cb:aa:b4:c9:6e:a9:b0:ac:c5:
                    f5:76:ba:30:4d:7f:3f:9b:b4:07:01:7d:c6:49:54:
                    2f:77:67:52:6b:69:b1:de:97:4d:65:44:99:00:74:
                    76:fb:8d:0a:fd:b6:b6:d8:f6:8f:c0:87:c0:aa:be:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:59:41:05:D7:5B:FE:1F:2F:7C:A3:94:9E:D8:24:AF:DF:7A:7E
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c964bb16-b590-4c0c-89eb-29a939e70a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:b4:f6:70:26:1b:5b:a8:44:33:5a:1f:58:d0:4b:62:b2:
         87:14:f2:8c:25:45:c0:57:ea:e0:49:c9:ec:b0:65:16:e9:49:
         31:63:cf:80:ba:32:82:1d:cb:da:fd:13:ba:89:0f:4f:5f:cb:
         15:b6:a7:07:1e:06:f1:a8:0c:a6:b2:9b:54:08:ef:cd:ed:d1:
         ec:50:a5:af:ad:d6:cb:ce:2c:23:08:52:b5:62:72:87:ef:6b:
         8f:22:c3:1e:81:7f:ec:00:f4:f3:91:dc:4e:e0:d6:f5:fe:01:
         4b:21:a2:93:57:8b:50:c7:20:e7:42:4d:cd:89:c8:be:7f:ea:
         80:36:8d:ae:5a:14:03:45:de:f2:7d:ae:2f:1c:fe:84:63:c1:
         88:1e:70:a9:ba:b6:56:98:8c:3b:d4:b8:df:5e:61:8f:b3:6b:
         5a:cd:d6:e9:fe:8b:da:7f:d5:ae:67:7a:c4:18:59:b1:95:55:
         ee:36:e7:aa:15:d9:66:a3:4e:aa:61:5b:dc:8d:c5:59:3e:e5:
         e2:7c:c6:fd:b1:90:2d:53:bd:7a:f1:de:b1:f2:c7:4b:ed:71:
         a6:77:8c:f4:d8:21:04:0d:c2:76:2f:bb:1d:3b:65:c5:3a:c2:
         b8:62:2e:25:08:a4:d9:c8:e0:79:f9:17:b9:7b:8a:64:33:bf:
         3d:8a:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----