Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a3afea8-8d0b-4e5d-ba26-1f49113a0c3b.roa
File:                     6a3afea8-8d0b-4e5d-ba26-1f49113a0c3b.roa (raw, json)
Hash identifier:          bCaBhqYMAi0OKExCwwIYvAugMLbMJQgiuBugs39m+kA=
Subject key identifier:   84:F0:9E:B7:52:31:AE:52:3C:3E:8D:52:6F:1F:A7:E8:C3:87:42:8C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E3F1CAADD180C3105A569C028FF34FC5B256794
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a3afea8-8d0b-4e5d-ba26-1f49113a0c3b.roa
Signing time:             Sat 22 Mar 2025 00:41:50 +0000
ROA not before:           Sat 22 Mar 2025 00:41:50 +0000
ROA not after:            Sat 26 Apr 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        3.30.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3f:1c:aa:dd:18:0c:31:05:a5:69:c0:28:ff:34:fc:5b:25:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 22 00:41:50 2025 GMT
            Not After : Apr 26 23:59:59 2025 GMT
        Subject: serialNumber=990c3b7ba8e254744c52df44eeed7f126626ea7ae5e2f72be648653ba822254c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:97:f5:0a:75:98:d2:ba:95:63:f3:f8:a1:
                    e9:3f:5a:f3:1d:b7:6f:d1:69:d5:8b:ba:29:b3:f3:
                    ca:03:2f:97:1d:7a:95:ec:92:f0:b7:ee:b6:ce:68:
                    bf:ba:46:f3:de:5e:ca:8d:bd:a3:be:94:5b:c6:2b:
                    02:56:8a:af:54:02:6a:8d:64:26:7d:c6:e9:ab:74:
                    3f:02:19:42:30:35:4e:03:ac:91:cc:57:cc:66:36:
                    93:24:d9:aa:97:00:68:75:da:8b:93:cc:e3:6b:70:
                    4a:e5:46:c0:5f:5a:bc:df:71:52:77:de:22:d2:f5:
                    e1:73:16:bc:1d:45:c2:81:b8:f0:e6:b4:51:7c:02:
                    fe:d0:f8:16:6b:19:5b:99:67:85:6a:e7:32:51:c9:
                    37:7f:aa:b2:45:bf:54:ed:cf:3f:f3:3c:78:d1:e8:
                    81:4c:8f:be:50:ad:75:4d:6a:5d:d9:74:4d:be:26:
                    c8:b8:a1:b2:24:e9:d5:dd:e2:7d:e4:7c:dd:b1:5c:
                    66:9e:3e:56:ca:b0:dc:22:7d:9e:a4:94:a7:24:20:
                    75:40:fe:86:4e:a2:79:13:dd:bc:5c:3e:15:8d:b5:
                    04:68:6d:84:f5:80:98:e2:6d:63:41:bd:22:51:1c:
                    e2:96:f5:44:14:24:25:85:66:ad:36:ab:97:f8:e9:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:9E:B7:52:31:AE:52:3C:3E:8D:52:6F:1F:A7:E8:C3:87:42:8C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a3afea8-8d0b-4e5d-ba26-1f49113a0c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.30.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:6c:2f:c3:46:ff:d5:d4:e8:a4:96:a4:98:f7:ac:e4:62:
         c0:f3:b4:45:44:b6:28:32:84:1c:9b:ef:10:7a:59:36:07:7a:
         60:64:ab:84:f8:74:3b:74:ba:38:94:4c:5b:20:9c:2e:b3:eb:
         95:2b:c2:04:35:0d:a6:5d:7b:46:41:d3:a0:8d:de:fc:b2:47:
         08:99:dc:f7:58:19:77:60:d0:83:46:e9:82:6a:f7:5e:ef:ae:
         6a:0e:1d:9a:48:82:f0:9e:f6:3c:0b:2e:9f:0e:8d:99:bd:57:
         db:cd:f7:2f:57:7b:d3:7e:94:4f:b6:ac:6a:7e:b8:26:fe:0a:
         42:2c:0c:d9:75:1a:13:af:f4:75:d8:1f:3b:18:0f:d7:15:c2:
         56:41:61:c5:18:26:2d:2c:e9:d2:d2:6e:0a:3b:4a:4b:e3:f6:
         82:c5:3f:d4:6a:f7:70:ba:e3:1b:94:67:bc:59:bd:43:af:c0:
         d6:53:53:0e:0f:8d:46:3a:70:d0:18:6b:05:96:2c:51:a7:f2:
         da:3c:ae:a2:d1:f3:71:2f:ee:c9:95:8e:15:12:fa:a4:a0:f8:
         e2:32:59:a6:47:c1:a2:9e:cf:90:4d:77:e9:db:2b:38:b0:7f:
         e0:2b:36:28:d9:0b:3c:6f:15:5c:8e:0a:5e:45:a6:1a:c9:96:
         91:d3:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----