Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eab77d0-4f15-4e89-8e84-d4012e37bfca.roa
File:                     3eab77d0-4f15-4e89-8e84-d4012e37bfca.roa (raw, json)
Hash identifier:          VnZGZPZWFrnLlGf3HzD9LT+RqgAYboCwRNQx0qgjaXI=
Subject key identifier:   11:8B:0F:00:4C:EF:F8:BB:BF:04:AA:FC:57:E9:B5:19:07:69:60:85
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       014866446DD98788A3979D6EDCB01DDD6B9340BB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eab77d0-4f15-4e89-8e84-d4012e37bfca.roa
Signing time:             Mon 31 Mar 2025 17:11:46 +0000
ROA not before:           Mon 31 Mar 2025 17:11:46 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.246.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:66:44:6d:d9:87:88:a3:97:9d:6e:dc:b0:1d:dd:6b:93:40:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:11:46 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=c9e298cdd2f95fa7eb93c253f0c41fa95f7af06e89ec1d7b2d4ca6c88a7ebe18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:79:19:38:0e:18:f1:21:74:66:1b:9b:b4:
                    d9:36:29:cb:14:10:85:35:0c:98:5e:b0:22:3f:75:
                    2f:37:a4:5f:92:59:e0:eb:fc:7b:c2:2f:05:e8:ed:
                    6d:cf:a5:b8:40:d2:a0:79:51:20:63:92:46:73:d1:
                    f9:bf:09:48:6f:55:81:d9:f0:df:2f:74:bf:dd:ea:
                    b8:9f:fc:6a:26:6f:93:d6:f8:07:24:1e:a4:7c:8c:
                    af:01:8d:e7:c6:54:32:3d:d5:bd:8d:70:15:03:aa:
                    c8:06:56:96:8c:fe:8c:a8:95:c6:c2:9e:ab:a2:53:
                    58:2a:28:d7:df:ce:60:55:31:29:79:ff:bc:a6:13:
                    1a:91:27:91:8d:0e:35:b9:08:da:89:33:15:d2:c5:
                    fd:e8:61:e3:59:21:62:ee:48:86:bd:4b:c0:ab:36:
                    d9:a9:aa:42:b8:7d:8a:27:c2:06:2c:90:a9:57:b1:
                    3a:f1:03:f7:15:ff:94:d9:6e:4d:eb:39:7b:9d:cb:
                    d8:0d:12:68:9f:b7:68:b8:06:f5:6a:49:49:37:21:
                    e3:47:92:68:5e:f9:de:03:31:9f:90:80:b2:02:62:
                    63:78:ff:fa:f1:f1:4b:fc:47:de:66:25:78:34:4b:
                    d1:a1:4b:e1:b5:7d:f9:5d:49:66:0c:0a:fd:7c:3e:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:0F:00:4C:EF:F8:BB:BF:04:AA:FC:57:E9:B5:19:07:69:60:85
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3eab77d0-4f15-4e89-8e84-d4012e37bfca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:3a:f1:f1:6d:ea:cd:1d:c0:28:01:50:33:05:40:a6:7f:
         4d:d7:d7:e6:40:a0:e9:0d:4d:1f:fc:dc:7a:1e:15:3a:50:88:
         b2:cb:28:00:9d:6d:1d:59:d0:fe:bc:53:84:df:ab:fe:76:29:
         46:8a:57:4d:28:30:38:9f:b1:1a:32:7c:23:f6:6e:85:0a:4d:
         fb:e2:dc:36:f2:49:6a:0a:06:d1:24:e8:4b:45:b1:b7:a7:3e:
         23:75:7a:40:8b:3a:ee:fe:80:ad:60:71:90:1e:16:46:ea:dd:
         75:f9:37:5d:55:25:13:80:28:7d:af:83:1c:de:52:28:b3:73:
         ce:82:a4:f0:56:18:ce:a9:ff:ed:20:e0:7d:16:9b:4d:2f:8d:
         27:8b:fb:e0:e3:c0:4e:40:87:f2:70:78:dd:b9:fc:fb:63:d6:
         0d:bd:76:6e:2e:54:f0:f1:ce:bf:37:ad:d1:ab:f8:7b:62:c7:
         57:14:f8:ec:41:99:79:77:2f:b6:35:4d:9f:14:8e:64:1e:6b:
         45:31:0f:c2:6b:13:17:96:6c:3f:4e:38:96:67:08:22:73:5f:
         f2:91:31:e0:9b:b6:6b:76:ca:51:fc:b6:ff:fe:24:91:bb:53:
         f1:18:97:c1:68:b5:25:f4:86:00:fc:87:88:5c:16:3d:e9:d5:
         ae:95:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----