Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85eef6d5-082a-41a8-964e-c7693112fb31.roa
File:                     85eef6d5-082a-41a8-964e-c7693112fb31.roa (raw, json)
Hash identifier:          +RO/oFg0O9hyw8H0tGRh3kHAjKpVvtrdfRWNU5UqIbA=
Subject key identifier:   F1:23:4D:D2:70:BB:D1:53:F7:F6:8A:BF:9E:86:2C:6F:F3:30:FC:CB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       22ADCCFDE460C0103DB3CD779E31D06E4A3500B2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85eef6d5-082a-41a8-964e-c7693112fb31.roa
Signing time:             Mon 31 Mar 2025 16:21:03 +0000
ROA not before:           Mon 31 Mar 2025 16:21:03 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.244.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ad:cc:fd:e4:60:c0:10:3d:b3:cd:77:9e:31:d0:6e:4a:35:00:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 16:21:03 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=208f881cc72faff0de8965efb7e60cf83a3ee923f00d16ec51d627fb1a342002, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:e6:c0:49:db:f3:91:e1:13:ae:69:11:07:
                    90:0a:48:28:0a:f4:a2:60:32:54:40:02:b5:bf:1b:
                    f4:9a:2b:a7:92:84:4e:48:1d:5e:c0:c6:8e:83:df:
                    d6:2b:f4:4a:89:7a:38:ce:fc:94:e9:7b:41:2f:5c:
                    1e:98:a3:a1:06:62:0b:47:f5:26:15:bf:02:7a:4a:
                    f0:30:8a:2f:1e:92:ac:bc:16:cc:e7:fe:93:a2:b3:
                    2b:6b:b6:74:a4:6b:9a:c3:f4:cd:af:52:eb:0f:7d:
                    a8:b6:b1:9e:6a:38:31:bd:98:53:19:e7:2b:d8:dd:
                    5d:d6:84:0e:fa:2c:b7:f6:68:b9:7b:d3:3c:b5:e1:
                    7a:3f:f7:f0:c8:aa:90:98:86:51:d1:c2:ee:e4:7f:
                    ca:ee:cc:a4:91:7d:4e:25:00:15:d9:c6:4d:1c:89:
                    1a:47:9f:bd:61:9d:51:c7:7e:f2:d8:25:54:19:05:
                    6d:77:6a:5e:47:11:59:66:cf:6b:a5:ea:6c:b3:52:
                    81:0f:f7:17:87:79:95:f0:1f:fe:2a:07:4e:62:2f:
                    27:5d:c4:4c:a1:ef:2f:04:8f:98:27:3a:8e:82:d4:
                    7f:58:0f:10:15:5c:32:7e:ea:a2:dd:08:48:e2:44:
                    53:14:4a:79:be:51:42:d7:7d:24:74:32:e5:a5:19:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:4D:D2:70:BB:D1:53:F7:F6:8A:BF:9E:86:2C:6F:F3:30:FC:CB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85eef6d5-082a-41a8-964e-c7693112fb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:7f:a2:3e:d8:2e:f1:8f:38:7d:3b:14:88:56:c1:84:98:
         3a:7f:af:d3:34:51:68:fd:9e:82:2c:56:d8:ec:c2:6c:b9:aa:
         3f:fd:c9:30:d6:f7:b3:b0:f2:5f:a1:e6:4f:75:f7:56:bd:8f:
         f5:a7:b7:40:0a:f1:0d:4f:a5:29:70:8a:2e:a7:df:db:0d:07:
         a7:5b:da:f7:b9:ff:c7:08:50:3c:2b:3c:87:ac:10:30:49:77:
         ee:91:a6:66:39:38:c1:ad:8b:ab:4d:0b:8c:b8:71:41:27:12:
         42:73:86:7f:d9:02:3c:af:21:f2:54:9e:3d:0b:91:c4:42:d1:
         a7:b7:41:8e:d7:95:7e:83:eb:1e:0a:68:4a:87:22:ea:08:e0:
         f2:29:e3:f4:bf:e4:56:a9:7c:43:96:c1:78:36:5d:af:f9:e2:
         39:df:55:ad:d9:cc:7c:d5:cc:26:a9:21:c2:48:8f:ef:26:02:
         95:30:d7:27:5e:62:22:bd:87:98:23:65:ce:01:86:f9:f0:f3:
         3a:98:c7:37:17:4c:26:31:34:6f:db:27:9c:12:3c:c9:fa:03:
         58:f2:6d:65:9e:fa:b0:64:75:fe:2a:48:64:18:04:33:d7:de:
         ba:79:3d:29:94:c2:2b:ce:17:46:58:4c:46:45:19:81:96:a1:
         d6:bc:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----