Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e01d93-e64b-4d89-ab2f-cc542346d6cc.roa
File:                     50e01d93-e64b-4d89-ab2f-cc542346d6cc.roa (raw, json)
Hash identifier:          +2jmSrsvQbJyCxQyPFW5POiZMU0+L/jQLBbOtyvtUqg=
Subject key identifier:   D5:B3:04:62:72:BB:08:85:2D:A4:10:71:2D:B5:3A:C5:BA:62:C3:FB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       264E327F41B25E859DC0E1F877B03032513E6043
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e01d93-e64b-4d89-ab2f-cc542346d6cc.roa
Signing time:             Mon 31 Mar 2025 17:00:19 +0000
ROA not before:           Mon 31 Mar 2025 17:00:19 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.140.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:32:7f:41:b2:5e:85:9d:c0:e1:f8:77:b0:30:32:51:3e:60:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:00:19 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=af0794f12da9f0ed0bce6f8380bf11b4789997fee61e1afa44e56e4d34fb2924, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:e3:a9:a2:46:f9:8f:0d:50:1f:d9:df:4c:
                    f1:8c:db:8c:46:f7:2b:e0:8d:6f:a3:29:ce:e7:60:
                    b1:dc:ff:a6:3d:39:dc:09:7b:e8:f9:3b:34:b1:b0:
                    ff:de:62:a7:c5:8c:bf:f4:94:bc:10:ed:72:b4:6f:
                    55:5e:b1:33:80:4b:2c:7b:d3:69:80:24:c9:b8:0f:
                    50:72:e8:b6:ac:15:31:ba:d7:d3:67:fb:bf:d0:7b:
                    9c:f1:72:ce:a0:00:14:1d:b5:15:4b:5b:65:d7:01:
                    b6:f4:70:80:b7:45:fd:6b:3f:cd:c3:7d:90:4f:64:
                    1c:6b:da:93:fc:83:b5:23:41:a1:84:24:db:6e:cb:
                    68:ab:21:96:7d:16:46:58:c2:ab:a7:24:80:32:9a:
                    8f:f1:bd:f4:be:8f:72:69:ad:7b:53:c7:d1:97:1b:
                    ee:64:79:e9:f0:62:7b:d9:71:0c:7d:0c:5e:f3:4d:
                    5e:73:a8:73:d7:a2:af:39:0f:86:ae:6e:de:3f:e9:
                    0f:8e:22:a1:3c:48:71:4a:04:bf:e7:6b:ef:9e:c4:
                    81:db:a4:a7:ed:f8:2b:ea:1f:3f:9e:66:3d:72:5c:
                    af:05:0f:b6:b8:08:b9:73:28:44:c3:41:29:c9:fd:
                    21:e6:fc:bf:f2:87:12:21:94:e5:99:2d:9f:3e:a9:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B3:04:62:72:BB:08:85:2D:A4:10:71:2D:B5:3A:C5:BA:62:C3:FB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/50e01d93-e64b-4d89-ab2f-cc542346d6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:f6:56:57:8c:30:b4:d1:27:4d:ec:84:c2:e4:65:58:6f:
         10:10:c0:90:c2:f4:86:5e:5a:d8:a7:bc:72:fa:80:0f:d8:4f:
         82:c0:42:2d:bb:7d:d3:4d:f6:6b:b0:c5:3a:94:8e:6b:64:9b:
         b1:53:6c:07:6d:fd:f6:be:c2:b4:3c:c8:a7:bc:23:72:e1:e6:
         e0:46:ff:1c:03:d6:2d:5c:27:4d:bd:ef:3f:a5:95:dc:eb:d4:
         6b:e9:46:0a:8d:90:71:ba:95:2f:bf:ac:5d:3d:62:d4:56:5e:
         bc:33:dc:25:52:8b:df:63:0f:81:7e:22:93:5e:e8:88:60:a7:
         b6:9f:18:51:84:ff:4d:1f:21:05:3f:bc:bc:0e:ad:d3:cc:2f:
         74:c6:c0:89:a3:b9:85:28:54:cd:b3:7e:76:13:8c:09:56:56:
         89:1e:a2:3b:74:ad:78:47:87:2d:22:e5:ed:9f:e5:c9:bf:40:
         a4:8f:51:ca:da:c5:27:11:bd:d8:57:0a:4b:9b:62:47:5e:de:
         17:65:c0:f7:64:87:f5:6d:d9:42:8a:ba:b7:6c:f6:d0:7c:b7:
         9f:b1:a2:da:da:05:15:9e:5b:ab:81:95:33:5c:b2:bc:11:b5:
         7c:a3:54:ad:81:a0:5e:55:9e:d9:32:67:fa:84:e7:f8:df:7f:
         d1:13:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----