Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File:                     e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier:          k5WHcWOj3g16YYLgOSfQXlJu2Dkm/TXoN6EJ5FV3S10=
Subject key identifier:   87:B8:6A:77:C2:00:FA:AB:0C:C4:58:0B:E2:B6:6A:C3:FB:AC:A6:17
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       44A475E40FFA53F0A8AAD7DAEB49D5B39B5C3180
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time:             Mon 31 Mar 2025 16:11:15 +0000
ROA not before:           Mon 31 Mar 2025 16:11:15 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a4:75:e4:0f:fa:53:f0:a8:aa:d7:da:eb:49:d5:b3:9b:5c:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Mar 31 16:11:15 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=6bc2a9e066b981ff1d3c2bf73bc4eec0cb176de78d7a21dd3fcb9d351baa0050, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:90:ee:38:45:63:ae:eb:7d:f3:5b:bd:f3:
                    47:05:d1:f4:c5:1a:d1:eb:bc:9e:96:bb:98:ce:30:
                    62:92:38:91:61:42:95:91:b9:fa:88:a5:41:a7:d9:
                    05:58:a0:aa:b8:95:e3:1d:80:65:56:44:5c:56:bd:
                    d8:41:1b:44:4f:d9:6d:65:96:14:9d:38:b2:86:23:
                    56:21:1a:f3:92:31:e7:c5:23:8d:6f:02:72:6f:ab:
                    ff:6c:f6:de:bb:26:3e:86:64:55:bc:98:c1:1d:b1:
                    0d:e7:a3:be:19:0b:b7:27:99:d6:a7:16:8e:ac:3c:
                    a6:41:47:ca:ff:0e:73:04:88:01:8c:a6:6b:5c:3a:
                    42:cd:2b:35:3d:cf:c1:23:15:b1:ba:35:16:fc:f8:
                    c9:f2:b1:49:91:63:fd:26:4d:c8:a2:e0:3e:32:6d:
                    f0:68:de:4a:78:75:80:c7:b8:37:af:c6:f2:14:4e:
                    9a:c8:db:22:06:e4:c1:ad:ee:8f:d3:4a:3b:3c:32:
                    1f:58:2e:c5:57:82:f1:a6:e6:67:98:6e:0b:c1:5b:
                    01:a0:e8:ce:1e:35:37:fc:fb:f9:68:49:22:49:ac:
                    5a:9c:ea:e7:25:cb:a1:1c:7d:a7:da:e8:68:62:9e:
                    2a:25:9e:1a:bf:73:ba:22:c5:4f:56:1a:a5:83:f1:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B8:6A:77:C2:00:FA:AB:0C:C4:58:0B:E2:B6:6A:C3:FB:AC:A6:17
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:83:58:17:05:92:7b:9e:68:f3:93:0d:39:9e:d1:e1:c0:40:
         1f:3b:bd:18:3d:d4:5d:e5:be:75:5b:81:e8:11:84:d0:5c:82:
         da:fc:1d:a2:6a:68:15:07:6f:50:bc:74:88:27:0b:d1:5e:4e:
         94:be:d5:c0:ee:89:eb:48:6b:c4:b7:e3:87:ab:d6:89:91:1a:
         5a:d1:11:4f:b1:b8:e1:d6:09:79:b6:6a:0b:2d:07:85:4b:7b:
         f4:26:9b:fe:71:c3:dd:86:4a:03:23:f6:21:08:2b:2f:5c:62:
         2c:ca:c9:69:e7:e4:0d:09:73:af:a1:f8:b6:29:9c:fb:c9:a6:
         84:b7:8b:f6:eb:ac:b6:d2:2b:c7:d3:40:b1:7f:99:c5:bd:83:
         6e:7a:14:79:f5:fa:ec:b8:5e:98:1f:64:20:e7:26:a5:a7:54:
         57:c8:45:d8:2f:63:4a:74:a0:3e:a3:cd:e1:8e:1e:d4:1b:3c:
         fe:11:98:8f:1b:be:11:3b:79:c6:d5:bf:52:17:b5:a0:ed:c9:
         28:4a:c3:57:b4:82:b8:48:96:36:95:0c:89:18:b6:bc:53:c8:
         72:66:15:11:d9:9e:59:3e:dd:be:f2:4c:1c:26:1d:7a:64:03:
         bb:81:81:be:61:8a:04:d0:81:97:a2:ce:74:d6:29:3d:6f:0a:
         4d:b5:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----