Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
File:                     119dc5d3-828f-4fcb-ac13-56c9facae99f.roa (raw, json)
Hash identifier:          Ud3OHtFwIMoIJ6aXJb5IP9Cs4fsmHWZp2kV4sXd6lDU=
Subject key identifier:   97:64:9B:C7:E7:B1:06:2C:C0:2A:98:19:90:5E:C4:6D:67:0D:0D:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       646E2CE1423874E0950FD377C1916A9C28D5A62F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
Signing time:             Wed 29 Jan 2025 00:00:00 +0000
ROA not before:           Wed 29 Jan 2025 00:00:00 +0000
ROA not after:            Wed 05 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.50.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6e:2c:e1:42:38:74:e0:95:0f:d3:77:c1:91:6a:9c:28:d5:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 29 00:00:00 2025 GMT
            Not After : Mar  5 23:59:59 2025 GMT
        Subject: serialNumber=6d631e2335265226c9e83b3e99456678799f557099d704ffd8255290c3c6382b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:86:94:ef:cf:02:28:5a:6c:3d:77:02:1d:
                    cd:76:6d:22:5b:cb:f1:c4:a9:e5:9e:47:93:47:e5:
                    63:31:e9:91:04:ca:b8:0c:de:79:eb:a9:a8:57:99:
                    71:31:2a:88:ef:2f:8d:e0:13:66:5a:ba:f4:39:32:
                    2c:66:0b:5b:98:66:fc:93:e6:72:92:b9:8e:88:cb:
                    26:7d:6e:b1:17:9a:3f:2f:72:99:9c:de:56:17:c5:
                    5a:5d:f2:1d:a4:c1:9c:03:9b:68:91:f8:77:1f:7b:
                    9f:56:90:87:bf:a5:3a:6c:ff:96:60:94:b7:b3:57:
                    89:57:01:9b:e9:79:16:17:e9:d2:73:e3:26:6f:d6:
                    29:7a:9d:80:bc:97:66:4f:fe:0d:59:b9:85:eb:15:
                    9f:09:61:68:76:9d:e4:3e:cd:c9:50:d5:0b:05:6e:
                    da:b1:71:70:58:66:5d:92:18:b9:1b:e1:50:56:8e:
                    fb:88:7d:8f:01:a0:05:99:26:2c:81:33:15:af:1d:
                    90:e5:fd:2d:78:7f:0f:ff:5d:a9:24:de:44:fe:16:
                    86:80:b6:52:31:14:07:9e:01:a3:21:bd:7d:e5:c4:
                    35:db:8e:67:e3:1f:52:ff:7a:f4:60:dc:d4:f3:32:
                    3f:ce:e5:6f:ac:8b:85:4b:bf:3e:ce:0a:5b:49:f4:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:9B:C7:E7:B1:06:2C:C0:2A:98:19:90:5E:C4:6D:67:0D:0D:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:46:fd:7d:3d:2f:8f:8d:d3:33:40:44:b6:87:06:b2:f8:
         c5:77:06:89:65:4f:a0:2e:ad:58:04:16:56:08:d6:f7:a5:71:
         85:c7:2a:5e:20:70:9d:40:d5:57:b7:fe:ed:a2:8b:53:10:94:
         9d:df:ac:7d:05:b4:94:cf:48:56:52:38:99:08:90:4d:34:6a:
         9e:6d:f8:22:29:5c:bc:eb:88:54:dc:3a:51:e5:0a:91:a6:76:
         44:0c:e9:e6:45:b2:5a:42:43:29:e8:1d:53:34:f2:c3:86:dd:
         85:6b:6f:aa:24:f0:c7:3c:2c:a2:10:c0:67:5f:b1:6a:1d:51:
         e5:55:94:97:d9:8d:84:64:36:94:fe:ef:9d:1c:dd:b6:84:0e:
         dc:1e:06:3c:04:7e:06:77:7b:e9:85:9b:85:b8:d4:dc:aa:63:
         54:ee:89:74:b2:1c:bf:e4:72:1e:7f:8a:b6:28:d9:c6:72:ea:
         a8:6a:ca:08:9e:67:0f:31:bf:01:d6:d3:39:ea:fb:f0:eb:71:
         06:5a:ee:3b:25:32:b0:17:26:35:d1:05:97:a0:f1:8e:e8:8e:
         55:a9:72:99:a2:37:9f:e8:02:84:78:20:cb:16:43:e0:13:98:
         11:b4:8c:44:82:ad:9e:90:c8:a1:3b:1b:4c:22:49:9c:75:b6:
         13:2c:d6:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZG4s4UI4dOCVD9N3wZFqnCjVpi8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI5MDAwMDAwWhcNMjUwMzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDYzMWUyMzM1MjY1MjI2YzllODNiM2U5OTQ1NjY3ODc5
OWY1NTcwOTlkNzA0ZmZkODI1NTI5MGMzYzYzODJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBtoaU788CKFpsPXcCHc12bSJby/HEqeWeR5NH5WMx6ZEE
yrgM3nnrqahXmXExKojvL43gE2ZauvQ5MixmC1uYZvyT5nKSuY6IyyZ9brEXmj8v
cpmc3lYXxVpd8h2kwZwDm2iR+Hcfe59WkIe/pTps/5ZglLezV4lXAZvpeRYX6dJz
4yZv1il6nYC8l2ZP/g1ZuYXrFZ8JYWh2neQ+zclQ1QsFbtqxcXBYZl2SGLkb4VBW
jvuIfY8BoAWZJiyBMxWvHZDl/S14fw//Xakk3kT+FoaAtlIxFAeeAaMhvX3lxDXb
jmfjH1L/evRg3NTzMj/O5W+si4VLvz7OCltJ9OfrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl2Sbx+exBizAKpgZkF7EbWcNDdkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzExOWRjNWQzLTgyOGYtNGZjYi1hYzEzLTU2YzlmYWNhZTk5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcjMoAwDQYJKoZIhvcNAQELBQADggEBAIDWRv19PS+PjdMzQES2hway+MV3
BollT6AurVgEFlYI1velcYXHKl4gcJ1A1Ve3/u2ii1MQlJ3frH0FtJTPSFZSOJkI
kE00ap5t+CIpXLzriFTcOlHlCpGmdkQM6eZFslpCQynoHVM08sOG3YVrb6ok8Mc8
LKIQwGdfsWodUeVVlJfZjYRkNpT+750c3baEDtweBjwEfgZ3e+mFm4W41NyqY1Tu
iXSyHL/kch5/irYo2cZy6qhqygieZw8xvwHW0znq+/DrcQZa7jslMrAXJjXRBZeg
8Y7ojlWpcpmiN5/oAoR4IMsWQ+ATmBG0jESCrZ6QyKE7G0wiSZx1thMs1os=
-----END CERTIFICATE-----