Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa
File:                     c3e990b6-39f4-428c-bb01-f760616cd068.roa (raw, json)
Hash identifier:          pMSqEiflhvZWxqkBd/pjkcqXaIk3Aon4TmMuA4YGkmM=
Subject key identifier:   84:CE:0E:FF:B8:9C:91:45:65:C1:C7:BE:29:98:62:FB:C7:14:68:DC
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       51C2D3192122713B7979AD07ED9F90B3D4551320
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa
Signing time:             Mon 31 Mar 2025 17:31:25 +0000
ROA not before:           Mon 31 Mar 2025 17:31:25 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.35.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c2:d3:19:21:22:71:3b:79:79:ad:07:ed:9f:90:b3:d4:55:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:31:25 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=fae346b4624d11c2e1f0d97b3a7f1c199125308b70b88d8fbecd967c215552ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:73:6b:e6:55:88:fc:31:3a:44:c2:6d:d6:
                    83:48:61:a2:10:cf:ae:f6:32:4e:ff:c7:4b:fe:fa:
                    64:e6:c6:09:05:13:e9:02:bb:4f:66:ef:b3:8b:33:
                    e6:76:da:00:c8:55:fc:e6:ad:fc:ab:1f:ea:88:2c:
                    c9:da:96:9f:50:a9:81:41:8d:ee:10:82:6b:e9:52:
                    88:04:bd:eb:65:fa:88:f5:78:0b:d9:6a:22:99:c8:
                    72:e2:63:3c:3e:0a:29:4b:d2:bd:e7:e8:5d:76:68:
                    a9:99:d2:f2:61:96:a3:99:65:02:24:97:a9:48:ff:
                    dd:41:b4:e4:68:d7:8d:46:6b:ea:a0:94:e5:2f:f7:
                    16:86:1e:38:64:bf:06:2c:c2:d3:de:80:10:50:c2:
                    a0:6c:03:09:77:1a:15:92:16:84:2b:30:b5:82:5b:
                    77:92:fa:df:26:7f:53:a9:7d:1d:27:f4:e6:fa:1c:
                    c9:30:20:a8:bb:9d:86:fb:0a:8b:d6:08:31:c0:49:
                    46:6a:b4:77:12:f8:ec:6a:6c:b3:f3:dd:37:5f:b1:
                    fa:6f:2c:4e:e7:11:53:3d:34:11:25:42:fc:69:d0:
                    31:1d:a2:af:1f:d8:2f:2b:15:81:88:6a:32:8a:e8:
                    97:cb:30:c6:23:96:14:66:66:02:5d:3d:d5:6f:54:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:0E:FF:B8:9C:91:45:65:C1:C7:BE:29:98:62:FB:C7:14:68:DC
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e990b6-39f4-428c-bb01-f760616cd068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:75:68:1f:3a:ca:25:92:a8:e9:6c:dc:a4:7d:d4:d8:e0:
         40:b2:a0:f0:1d:9a:34:fa:ae:18:b0:04:3b:42:c0:c8:96:b5:
         90:66:14:7f:e3:80:1f:99:fe:9c:b6:bd:47:46:1e:ae:9f:c2:
         3b:9b:3b:92:06:35:da:85:4d:55:fe:92:ad:f6:38:70:d7:f3:
         25:e5:e9:ed:d6:ef:be:58:71:cf:07:a2:23:36:4b:40:c2:1d:
         18:12:03:43:0b:42:18:f6:4c:fc:69:16:fc:4b:c4:e7:a3:6b:
         7f:8f:93:c4:31:8f:df:d7:21:0e:93:80:89:26:46:a9:4e:32:
         a9:da:d9:c4:1b:b3:3a:b4:0a:f5:10:37:71:ad:c1:22:25:27:
         df:e5:49:83:48:e9:c8:5e:81:b2:f4:60:8f:a1:bf:5f:b9:fc:
         da:1a:da:86:74:5e:66:22:45:6c:d6:b5:93:6e:d5:43:56:b2:
         71:11:29:69:cb:1d:5f:8f:e3:c9:dc:b1:08:34:78:bf:89:26:
         fa:09:9f:42:f1:b2:e2:6d:f6:b4:a3:19:53:7a:3c:38:b0:b7:
         d7:f5:b7:f6:75:0f:74:d2:c5:42:56:a5:27:57:eb:66:f5:f7:
         53:46:3a:f3:6f:26:2e:81:a5:e6:8a:95:22:00:75:c2:bb:33:
         50:98:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----