Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19640214-4ded-418d-91eb-0efa82584848.roa
File:                     19640214-4ded-418d-91eb-0efa82584848.roa (raw, json)
Hash identifier:          XqAH8Z0ISATBgIJW++CjAsWmv7LuD880P1T41dFnhQg=
Subject key identifier:   47:82:C7:7D:DE:7F:AF:E3:94:CB:D1:B9:FD:85:7D:79:50:D5:F5:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47197D2D092A592F721D69541CD8034A3C525F01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19640214-4ded-418d-91eb-0efa82584848.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     22394
IP address blocks:        204.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:7d:2d:09:2a:59:2f:72:1d:69:54:1c:d8:03:4a:3c:52:5f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=2a27aa46123a1c42c797925fdfa068476ef30e5d90c25f553a81a79680fd4d1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:5c:c9:1c:68:40:35:93:05:40:89:bc:fb:
                    e3:fb:d0:72:bd:67:9f:21:54:58:e2:5a:30:85:87:
                    70:cd:69:bd:42:fd:f4:29:20:08:2f:cf:85:7c:b1:
                    e9:28:27:27:32:d7:39:24:41:aa:55:84:96:eb:7a:
                    14:ff:79:17:0b:f5:77:bd:1e:e8:a9:6f:78:60:83:
                    8e:67:12:f5:5a:8f:69:bd:73:12:63:a4:d8:e7:8c:
                    b3:9d:bf:3b:16:f9:82:52:cd:99:ef:1f:00:ef:a7:
                    b0:49:86:d2:6b:52:fd:69:59:85:44:77:af:af:d9:
                    5c:91:a4:8a:de:3e:d7:8b:5c:c0:47:da:03:3a:8e:
                    d7:f9:14:58:f4:41:9d:55:f3:0a:a2:ed:08:d6:5a:
                    b8:ea:8d:1b:03:3a:1e:f6:94:16:03:1f:b6:27:35:
                    8a:ec:4b:b5:e3:78:75:1b:e2:2c:fd:d2:35:d5:b2:
                    d7:ea:a5:80:8e:8c:8a:ca:4c:fa:b9:b4:a6:d3:16:
                    d6:f7:76:0a:da:37:a9:68:78:aa:8a:47:73:7f:cd:
                    9e:d3:ee:6f:e6:f9:c8:11:e7:7e:60:a7:da:31:61:
                    1d:16:43:29:f2:ba:ba:4e:7d:6e:e6:bf:16:8e:01:
                    4c:18:25:40:d9:f7:a4:4f:16:62:bf:6f:27:97:dc:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:C7:7D:DE:7F:AF:E3:94:CB:D1:B9:FD:85:7D:79:50:D5:F5:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19640214-4ded-418d-91eb-0efa82584848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:a0:40:85:85:02:14:13:7f:bc:28:de:1c:43:73:a0:da:bd:
         02:44:f9:d7:d2:32:ef:eb:10:4b:ef:2f:69:a0:60:da:1f:bc:
         36:c3:a2:4d:d3:32:71:f5:78:39:d1:5f:ec:9f:18:bf:72:8b:
         cd:f5:f7:83:a0:2b:64:48:9d:ca:fe:76:a4:74:ab:3c:9a:40:
         77:3c:a7:2a:e3:0e:93:8b:38:ad:7c:9a:3d:76:e1:72:37:cd:
         7e:b7:e0:3b:69:c6:7c:c1:fc:8b:54:44:88:62:b3:dc:0f:76:
         56:42:c9:15:32:0a:f3:b5:46:2f:63:8d:42:e0:62:cb:8e:45:
         59:c0:44:94:22:ca:ba:f4:d1:64:88:67:76:e9:45:f3:1b:a6:
         e9:78:cb:bd:4c:64:cf:ad:fc:cb:2d:80:ab:b5:ec:90:6a:6e:
         35:63:8a:61:04:e2:cc:1e:ee:c3:35:89:31:4f:02:fd:aa:f2:
         73:e1:e4:6b:70:e3:88:0d:68:76:0d:01:76:3b:c4:a5:dc:44:
         af:a7:13:77:65:78:97:d7:d1:b4:6e:f5:cc:b4:8f:b9:36:a5:
         6f:99:d0:d5:85:fd:fd:98:e7:12:0a:8a:15:30:72:9b:c1:4a:
         84:a5:e0:43:60:37:94:20:2e:eb:f7:28:75:f5:58:56:0a:12:
         00:02:d9:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURxl9LQkqWS9yHWlUHNgDSjxSXwEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYTI3YWE0NjEyM2ExYzQyYzc5NzkyNWZkZmEwNjg0NzZl
ZjMwZTVkOTBjMjVmNTUzYTgxYTc5NjgwZmQ0ZDFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm51zJHGhANZMFQIm8++P70HK9Z58hVFjiWjCFh3DNab1C
/fQpIAgvz4V8sekoJycy1zkkQapVhJbrehT/eRcL9Xe9Huipb3hgg45nEvVaj2m9
cxJjpNjnjLOdvzsW+YJSzZnvHwDvp7BJhtJrUv1pWYVEd6+v2VyRpIrePteLXMBH
2gM6jtf5FFj0QZ1V8wqi7QjWWrjqjRsDOh72lBYDH7YnNYrsS7XjeHUb4iz90jXV
stfqpYCOjIrKTPq5tKbTFtb3dgraN6loeKqKR3N/zZ7T7m/m+cgR535gp9oxYR0W
QynyurpOfW7mvxaOAUwYJUDZ96RPFmK/byeX3MnpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUR4LHfd5/r+OUy9G5/YV9eVDV9WIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5NjQwMjE0LTRkZWQtNDE4ZC05MWViLTBlZmE4MjU4NDg0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADMfhkwDQYJKoZIhvcNAQELBQADggEBAMagQIWFAhQTf7wo3hxDc6DavQJE
+dfSMu/rEEvvL2mgYNofvDbDok3TMnH1eDnRX+yfGL9yi83194OgK2RIncr+dqR0
qzyaQHc8pyrjDpOLOK18mj124XI3zX634DtpxnzB/ItURIhis9wPdlZCyRUyCvO1
Ri9jjULgYsuORVnARJQiyrr00WSIZ3bpRfMbpul4y71MZM+t/MstgKu17JBqbjVj
imEE4swe7sM1iTFPAv2q8nPh5Gtw44gNaHYNAXY7xKXcRK+nE3dleJfX0bRu9cy0
j7k2pW+Z0NWF/f2Y5xIKihUwcpvBSoSl4ENgN5QgLuv3KHX1WFYKEgAC2Ww=
-----END CERTIFICATE-----