Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa
File:                     cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json)
Hash identifier:          0x8KW5qVmM29rfXJS5pulgsA+qj4H96SYR0XH7pVcwY=
Subject key identifier:   8A:D2:C4:16:E9:7C:98:C1:9F:94:B0:DA:D0:9B:38:7D:8E:BC:76:FC
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       61989B2DA82CEE85C3697F2C99F6B263687F869B
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa
Signing time:             Mon 31 Mar 2025 16:11:13 +0000
ROA not before:           Mon 31 Mar 2025 16:11:13 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:9b:2d:a8:2c:ee:85:c3:69:7f:2c:99:f6:b2:63:68:7f:86:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Mar 31 16:11:13 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=4f098c26d8e6a44fa43e36b91def2001e6d5ecd8873ee74349928aa5f215ef9c, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:22:35:dc:72:6c:61:eb:b1:be:0f:20:82:
                    3a:1c:fc:79:38:01:31:41:e2:4d:63:0c:87:f4:40:
                    81:c9:e9:b7:35:f7:ca:16:14:00:c5:68:aa:bd:58:
                    da:26:26:1f:b8:c6:a2:af:f4:f6:81:26:de:1b:c2:
                    9e:8c:d6:55:50:eb:48:27:b3:51:d8:bc:7b:33:b3:
                    7e:3a:1e:53:52:d7:c0:65:0f:05:c8:d3:c0:c9:4f:
                    f6:ef:4f:46:45:a3:9e:0d:0f:e6:bc:89:11:50:d5:
                    59:ab:3c:c6:c5:48:a9:44:5a:81:7d:b1:50:7c:94:
                    ed:9e:36:7d:f4:e5:ae:1d:8e:34:89:f7:a3:5e:13:
                    92:a1:30:0b:33:6e:56:62:99:e4:8b:4e:0f:af:47:
                    33:2f:fd:d4:de:e8:f9:78:9d:2d:a9:51:e3:a2:3a:
                    39:9e:13:72:eb:dd:81:37:f7:47:32:db:22:68:b5:
                    60:bc:34:a2:d8:a0:a2:4b:99:7c:7f:84:20:e6:fe:
                    cc:47:27:5a:b5:5f:64:10:46:cf:ab:ee:25:b5:d0:
                    ab:c9:38:80:4c:0c:1a:b1:86:bb:4b:ef:60:07:63:
                    fc:2b:7a:93:13:a7:b2:3a:31:c0:27:fb:63:6e:97:
                    20:ad:f9:5a:f7:36:06:74:ff:e2:6c:f7:ac:aa:23:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:C4:16:E9:7C:98:C1:9F:94:B0:DA:D0:9B:38:7D:8E:BC:76:FC
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:93:28:ca:55:9a:24:b4:0e:62:15:11:a6:80:91:64:4c:b2:
         0e:80:19:6a:3e:7b:21:fc:38:02:92:62:8a:68:c6:01:8b:15:
         e9:25:ce:42:64:cd:2a:76:7c:50:30:6d:fe:54:cd:a8:52:19:
         89:80:3c:db:f1:2c:00:90:31:75:8c:a8:d9:48:4d:d3:7a:8d:
         f5:de:83:e7:1f:2e:a2:c0:9d:7f:ea:4c:78:44:02:97:bc:ac:
         71:db:f2:76:dc:e7:0e:f0:1b:e1:60:ba:68:31:2c:87:e3:c8:
         7c:09:41:b6:6b:22:c3:24:f4:42:67:52:43:c3:49:96:76:6a:
         70:93:56:88:b8:4f:20:63:27:7e:00:a2:7c:b3:7a:69:3f:61:
         2a:13:78:74:4d:bd:42:71:47:db:bc:a8:d5:60:56:e7:d0:d1:
         4b:67:b7:2a:18:c6:80:cb:02:24:1e:76:38:da:58:37:33:78:
         7a:7b:23:8f:10:4d:d1:43:c0:60:29:a4:44:a0:37:31:71:0d:
         e4:74:e7:69:fb:28:3c:84:a5:8d:88:45:c3:59:7f:7d:05:65:
         c7:e4:65:8c:42:9f:aa:b7:f6:47:4a:d4:5e:21:f0:9f:0b:39:
         ce:53:13:a3:5b:7d:5c:15:69:24:37:5d:26:2d:80:c5:bf:53:
         dd:c8:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----