Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e291b56d-84f0-408e-8eb4-abedb64ff6dd.roa
File:                     e291b56d-84f0-408e-8eb4-abedb64ff6dd.roa (raw, json)
Hash identifier:          UEg5Tddi2zto5uRftWTouh9iGSASQha6WLvZFRW84yw=
Subject key identifier:   E8:69:45:A0:4C:ED:48:79:99:F5:10:30:F9:E1:CC:8F:EE:29:7B:D7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6F9EE2FF58A11E589BE7944AB8AA302F28EC0D1D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e291b56d-84f0-408e-8eb4-abedb64ff6dd.roa
Signing time:             Mon 24 Mar 2025 17:31:10 +0000
ROA not before:           Mon 24 Mar 2025 17:31:10 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        3.2.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9e:e2:ff:58:a1:1e:58:9b:e7:94:4a:b8:aa:30:2f:28:ec:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 17:31:10 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=010d84865b4842d72e36142dde1d0ed52763c2e5b8c9aae48d06d7550084568b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:e7:c9:f0:4c:cd:6d:78:ef:21:34:ce:c0:
                    01:20:11:d0:81:d6:b4:35:2d:34:69:19:d3:b4:cd:
                    91:e0:d2:fa:f5:3f:99:3f:8d:2f:6a:64:80:98:59:
                    19:80:9f:1e:9c:28:f2:38:63:b4:d1:fe:d5:6c:1e:
                    5c:2c:fc:79:28:45:38:66:26:96:08:6b:a8:bc:a7:
                    bf:da:39:4d:2e:6a:e6:08:54:6f:64:c1:c9:17:b9:
                    1b:f5:44:9a:f8:f6:29:86:d5:94:03:a5:d7:90:61:
                    5e:ee:c1:e2:2b:0e:d8:5f:fc:63:77:89:07:1e:ed:
                    e1:1f:65:d7:0e:73:5b:41:3d:d7:97:e7:84:50:e8:
                    9b:6c:dc:d2:ea:50:e8:62:c0:5a:da:aa:82:0c:46:
                    5e:b7:08:24:a0:ea:65:8e:76:61:c6:f7:d8:d8:f5:
                    55:2b:3f:3a:c6:bc:f6:3f:56:ac:a4:45:6e:92:27:
                    67:a0:1f:44:ec:a8:b8:b8:b6:41:83:5a:87:de:be:
                    28:4f:fc:c6:d9:ff:16:c7:62:9d:a4:94:6b:0c:90:
                    1f:c9:9e:9e:14:c1:6f:ae:18:0a:db:ef:bf:7c:6e:
                    48:1a:b0:76:16:4f:97:1a:bd:65:90:c1:d5:4a:52:
                    f5:b3:73:a8:f3:44:65:42:4d:b6:68:fd:57:9d:9e:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:45:A0:4C:ED:48:79:99:F5:10:30:F9:E1:CC:8F:EE:29:7B:D7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e291b56d-84f0-408e-8eb4-abedb64ff6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.2.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:cd:b4:5f:2c:98:b1:7c:b8:7f:12:bb:39:6c:fd:dd:cf:
         d2:b5:13:8b:45:16:14:3f:f5:6e:bd:a7:05:41:84:e3:80:98:
         74:52:62:dd:1d:b9:fc:6b:b6:95:bc:29:e5:d4:44:cb:10:f8:
         72:1b:e5:ef:ba:88:5a:74:2f:77:d4:69:87:bc:3e:0f:db:16:
         61:84:0e:0e:7e:d0:42:a8:58:b4:79:06:9c:34:ee:2d:1a:56:
         be:d8:9a:a7:0d:3e:7c:2a:33:d3:2f:df:70:90:89:4c:d8:ee:
         37:d8:b1:7a:9c:fc:26:13:d9:c7:1d:c7:7d:8a:fd:b6:a8:7e:
         69:73:dc:3d:e0:21:dc:32:22:88:49:06:75:03:94:71:93:39:
         c9:ed:ce:64:10:c0:6d:11:ec:51:e4:4e:a2:7b:f9:ba:de:5d:
         a0:99:28:b7:e0:d0:d1:30:a1:b3:31:c1:12:02:a3:98:5d:5f:
         50:79:16:ed:a3:8d:c6:31:81:1c:18:80:cb:eb:a2:04:44:e0:
         87:62:ef:57:a8:ee:b1:13:83:10:22:13:99:1b:24:77:4a:ae:
         12:d9:b6:34:3a:f7:94:6c:8e:73:9f:a6:b9:9b:02:97:34:12:
         93:c1:5a:4b:ae:c3:17:16:80:f0:46:35:1e:72:91:78:e7:42:
         37:7b:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----