Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a8479-63ba-4a09-9b38-592d41f7e985.roa
File:                     2d7a8479-63ba-4a09-9b38-592d41f7e985.roa (raw, json)
Hash identifier:          Sxj5LaACxt99/zUaW0rf/71NBuHDMzuDfnhUFUyPSwU=
Subject key identifier:   14:A1:7F:9B:B1:3A:FB:BF:B2:33:46:76:39:85:B2:E1:03:F8:25:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2DA2106DE8A382A6242ACB2AEAE6767E8A3914E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a8479-63ba-4a09-9b38-592d41f7e985.roa
Signing time:             Mon 14 Apr 2025 15:51:52 +0000
ROA not before:           Mon 14 Apr 2025 15:51:52 +0000
ROA not after:            Mon 19 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.235.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:10:6d:e8:a3:82:a6:24:2a:cb:2a:ea:e6:76:7e:8a:39:14:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr 14 15:51:52 2025 GMT
            Not After : May 19 23:59:59 2025 GMT
        Subject: serialNumber=1a857c37bfc64cdc783640d3a5c64c91ddf0aeffdfe7bd99f502d25cea708e07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:d6:80:87:32:fa:3d:f0:5a:26:14:c9:13:
                    01:44:e5:18:97:97:bd:23:0b:a1:8c:4c:e5:0c:a5:
                    fd:84:2b:8d:b4:a1:ce:4d:4b:bb:dd:b5:8d:67:46:
                    4b:2b:16:d6:40:0b:15:05:59:93:94:f0:c6:9c:ec:
                    af:ae:ba:1d:4e:e6:9e:22:6d:bf:ae:94:24:0f:62:
                    2b:45:51:d4:9f:04:1f:44:19:f7:d6:02:a3:61:2b:
                    f2:d2:11:47:b5:a9:7a:4d:fb:a6:82:46:48:dd:59:
                    b4:52:68:49:13:b4:b1:2f:fe:4b:58:0e:67:5a:4f:
                    da:cd:1b:74:0b:06:8c:8b:50:f3:24:86:f6:a8:83:
                    43:e8:ae:0d:c7:c5:76:76:96:c8:c8:33:7e:d6:ab:
                    d4:97:3e:c5:5f:d8:b5:9f:07:56:ea:36:5e:60:0c:
                    a8:51:21:19:29:13:ea:1c:00:03:c0:03:34:9a:36:
                    f2:4f:40:8c:2a:ec:b8:1e:22:06:a5:69:95:e1:dc:
                    56:53:f2:00:40:17:97:94:9e:34:a6:e2:75:3e:14:
                    d0:42:87:20:a2:73:11:8c:16:17:a6:05:25:c4:c9:
                    d5:c0:8a:4a:2b:9c:24:c3:95:d9:39:fe:d2:bb:91:
                    99:4f:f1:dd:1d:37:ec:95:37:d3:1b:d1:74:68:01:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:7F:9B:B1:3A:FB:BF:B2:33:46:76:39:85:B2:E1:03:F8:25:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d7a8479-63ba-4a09-9b38-592d41f7e985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.235.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:23:a2:56:33:e8:86:53:eb:c2:68:88:ab:32:70:fc:46:
         3d:28:4d:9e:4c:bd:6c:ce:ab:78:15:34:fb:57:3e:e1:fd:c2:
         54:65:a1:6b:aa:ef:ca:4e:4a:4c:57:ac:d0:2d:d6:12:b0:89:
         33:b7:f4:c6:30:a1:9b:1c:af:bf:ef:02:a6:cc:a4:10:7f:df:
         5d:26:64:f8:a9:6a:da:20:a3:27:41:66:f7:dd:34:6d:fc:a8:
         95:36:f0:47:ab:11:eb:8c:6c:d1:c4:4c:0c:01:16:48:03:84:
         ea:85:c3:a3:47:f7:6b:7f:67:58:e0:09:f5:8a:ab:17:14:a6:
         e9:ca:88:3c:d3:1e:dd:03:08:6e:72:9d:c2:b0:8e:ac:5b:d7:
         8e:79:17:3f:57:70:9a:14:cf:29:a4:52:bf:3c:8e:8d:cf:2e:
         8e:ea:01:8c:73:d6:a4:ba:77:92:24:61:d9:8b:db:f2:f6:96:
         a7:e5:8d:7f:1f:21:25:ed:f0:7d:e0:7e:78:41:9d:13:90:fb:
         7c:dd:68:93:13:1a:b7:7e:f7:13:6d:50:bd:b1:38:32:6b:cf:
         5f:c8:ee:48:f8:d8:c9:64:ba:f0:87:b0:7c:44:66:b8:32:8c:
         d4:d6:76:a0:42:2e:ca:58:97:b4:78:d4:32:08:ec:a2:f0:00:
         96:a6:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----