Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85f61c0e-ad64-4d0c-a667-d36df6461f04.roa
File:                     85f61c0e-ad64-4d0c-a667-d36df6461f04.roa (raw, json)
Hash identifier:          k9bARW1BSHvMv1faQrpDvajk/9Md7u1HM2rze+ikTm4=
Subject key identifier:   7B:B6:20:BD:F0:2C:FB:68:F6:91:6F:21:70:40:F6:88:9F:7B:44:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       471541412A40201916FA6B295F6A815C0D5C901C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85f61c0e-ad64-4d0c-a667-d36df6461f04.roa
Signing time:             Mon 24 Mar 2025 15:51:53 +0000
ROA not before:           Mon 24 Mar 2025 15:51:53 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:41:41:2a:40:20:19:16:fa:6b:29:5f:6a:81:5c:0d:5c:90:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 15:51:53 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=ebf3a2dc4fd0a973364e55edc53890d80521369c6601cc6f3c5f35acc054fc85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:9d:ca:e6:18:bd:aa:45:06:8f:d8:f5:d8:
                    98:c2:92:8f:b7:64:d2:04:9e:d7:8d:ec:3e:9d:ca:
                    00:da:7e:da:71:6d:f5:7f:16:3e:79:66:64:96:6e:
                    ed:7d:d0:8d:bb:ac:99:c6:a1:de:c1:70:97:36:cf:
                    63:80:4c:3e:27:74:15:07:11:ea:c7:94:a0:fe:ca:
                    af:03:2a:50:4a:e6:05:54:c8:f4:a0:4a:11:d4:a7:
                    14:16:32:ee:e2:f9:0f:24:d8:54:52:22:b7:d6:d5:
                    f9:87:7a:9b:af:54:ed:a7:03:61:ec:58:22:4a:b8:
                    55:8d:c9:db:ea:13:4f:a9:e1:51:87:9e:a4:d3:26:
                    66:46:5a:1a:d1:97:7d:a2:aa:3e:b6:54:49:e8:f2:
                    0e:64:fa:a9:69:e3:dd:0d:a2:e0:75:21:de:b7:de:
                    2a:c2:9b:7d:cb:f4:9c:40:17:66:20:ff:c3:62:f3:
                    66:89:b4:83:00:2d:f2:f5:68:db:05:09:30:13:67:
                    f7:c8:a8:66:7a:11:27:f7:b0:26:db:53:c3:a6:5e:
                    34:a7:1a:19:2d:30:4e:52:dd:86:6a:ea:1f:7c:53:
                    a7:6e:35:d6:fd:50:bf:a8:6a:41:bf:59:59:09:ae:
                    f5:11:85:c1:70:69:74:f8:71:c9:a4:c2:65:fc:81:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:20:BD:F0:2C:FB:68:F6:91:6F:21:70:40:F6:88:9F:7B:44:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85f61c0e-ad64-4d0c-a667-d36df6461f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:73:36:c1:b8:51:d5:20:14:7b:84:61:91:dd:74:2a:9a:
         20:c1:5a:4b:ce:09:df:40:86:bf:39:5a:3a:73:96:65:db:9a:
         89:23:81:2d:9b:e3:d4:a5:de:21:65:17:89:a5:08:76:d7:6c:
         49:4e:bf:f5:93:d1:ab:78:f7:bc:3c:ba:51:f7:b4:5a:fd:b8:
         e0:46:7f:ee:da:4e:58:a5:d1:b3:db:d8:ed:70:f9:d5:9c:d7:
         2a:2d:13:79:5f:34:c4:3e:09:29:46:2f:28:56:ba:6f:fd:7d:
         31:ee:4e:a3:e2:d8:fc:9d:3f:40:e5:d5:e1:1b:5b:10:e3:90:
         ba:34:10:a2:ec:53:e1:38:e3:1f:b1:46:05:28:3e:ae:03:cc:
         44:0d:b0:f6:f1:bd:64:53:41:dc:f0:0b:6a:6c:ab:67:86:d9:
         03:1d:ae:d1:14:ec:29:19:b5:95:5d:a7:33:5b:4e:dd:c2:40:
         c3:b6:64:4b:b4:7f:59:4d:ea:04:ea:61:3c:d4:28:91:cb:47:
         47:c0:a5:df:f5:48:1c:f2:70:26:12:22:da:38:b8:2c:a8:83:
         da:91:dd:d6:11:f5:b7:aa:3a:35:fa:e6:33:3a:28:fd:37:87:
         f8:31:cf:30:8c:f2:2e:ec:77:fe:6a:50:71:b0:bb:e2:94:db:
         79:3c:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----