Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
File:                     22e0224f-add1-4750-9889-4168c3af1743.roa (raw, json)
Hash identifier:          vc9ZY2SHUE+ijAJGXuvbA5bPmnCy295GiDU8TrDihJY=
Subject key identifier:   D2:81:F2:D8:ED:24:F0:D5:74:85:A5:BB:DC:3D:D8:A3:24:30:87:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       053AD160EAF45CD56A1D5E6A851CBF43B21F94A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3a:d1:60:ea:f4:5c:d5:6a:1d:5e:6a:85:1c:bf:43:b2:1f:94:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=128a66a4b33a37280c892f4db35fffc43bd9d5e2d272cd440f7620bc0baa1613, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:f8:a3:36:8b:51:58:e9:39:41:51:60:32:
                    16:ce:6c:fc:3b:f9:15:f9:88:de:51:ef:3a:4d:55:
                    eb:25:65:68:db:ad:0e:83:88:be:52:79:86:ba:04:
                    92:b8:89:30:cb:99:dd:05:d2:64:3a:41:9d:05:62:
                    91:7a:b1:0b:3f:dd:15:2b:3d:39:97:c8:44:65:b8:
                    d2:ee:98:3c:ba:06:0e:14:97:59:42:f7:9d:47:b5:
                    42:c9:36:c7:9f:98:ed:d9:80:d3:06:6c:5a:8b:e5:
                    56:cb:bb:c1:8f:a1:36:92:c8:b9:c9:aa:b6:10:b2:
                    63:28:3a:28:ba:b3:e0:39:22:a9:dd:46:26:d3:6a:
                    d9:ec:d6:db:95:39:ac:ad:15:07:46:df:e9:c5:74:
                    83:57:8c:e9:14:57:fc:d6:14:6e:9f:2a:32:cf:a9:
                    1c:f6:da:c0:0b:96:85:4c:f0:1d:ff:b7:05:f3:1b:
                    fa:b3:90:55:95:6f:ad:4f:48:5d:a9:56:ae:c8:8d:
                    10:55:7f:56:3f:6d:b5:38:d2:90:7c:ca:c4:57:63:
                    93:68:8d:06:78:1c:f2:18:88:f2:70:91:e6:96:37:
                    73:6e:78:e3:7e:e4:b3:51:e8:f6:10:b3:8c:a4:98:
                    36:ca:b2:d1:0d:28:2d:b8:66:1a:1b:f6:fd:43:52:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:F2:D8:ED:24:F0:D5:74:85:A5:BB:DC:3D:D8:A3:24:30:87:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:75:59:2e:e7:3e:d5:93:a9:bf:bd:ed:2b:5f:53:a1:68:86:
         5e:97:d9:65:58:fc:3b:64:17:54:a7:78:87:97:e1:60:bd:b0:
         53:da:71:14:c5:9f:6b:f3:9d:c7:3a:61:7d:08:61:59:4a:84:
         28:57:dd:6b:44:cb:eb:24:84:2a:f1:e9:36:e8:54:eb:31:61:
         bf:dd:93:2d:90:1c:ff:52:ad:e0:b6:cf:d5:f4:53:ca:18:98:
         0c:06:27:ba:02:d9:3b:a6:0a:e9:36:aa:59:24:e0:af:19:7c:
         f8:ed:ca:9f:37:e9:04:08:a3:90:16:1d:62:8c:96:c4:96:a0:
         86:8a:86:db:6f:5c:e9:0a:93:ab:28:11:9e:f3:fd:33:32:24:
         90:a6:57:57:2c:6c:1d:4f:f2:b4:04:d2:f4:41:23:4d:6a:20:
         f0:2f:3d:32:0e:89:cd:77:30:8a:51:9e:5a:1c:4c:74:48:c6:
         76:3a:d7:ae:4c:ee:bf:a6:e0:59:b5:4b:ac:93:cc:f0:01:68:
         d4:56:d2:2b:6b:81:4e:1b:ce:5e:2e:92:8c:64:65:3a:ba:76:
         5c:16:c7:c0:22:e3:cf:a2:05:bd:01:09:6e:f7:9c:e6:99:f8:
         26:f6:5f:f0:c0:f5:22:35:f9:25:e8:c2:bb:9f:fd:58:d5:bf:
         ec:e7:a5:de
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBTrRYOr0XNVqHV5qhRy/Q7IflKMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjhhNjZhNGIzM2EzNzI4MGM4OTJmNGRiMzVmZmZjNDNi
ZDlkNWUyZDI3MmNkNDQwZjc2MjBiYzBiYWExNjEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNZPijNotRWOk5QVFgMhbObPw7+RX5iN5R7zpNVeslZWjb
rQ6DiL5SeYa6BJK4iTDLmd0F0mQ6QZ0FYpF6sQs/3RUrPTmXyERluNLumDy6Bg4U
l1lC951HtULJNsefmO3ZgNMGbFqL5VbLu8GPoTaSyLnJqrYQsmMoOii6s+A5Iqnd
RibTatns1tuVOaytFQdG3+nFdINXjOkUV/zWFG6fKjLPqRz22sALloVM8B3/twXz
G/qzkFWVb61PSF2pVq7IjRBVf1Y/bbU40pB8ysRXY5NojQZ4HPIYiPJwkeaWN3Nu
eON+5LNR6PYQs4ykmDbKstENKC24Zhob9v1DUhSPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0oHy2O0k8NV0haW73D3YoyQwh7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyZTAyMjRmLWFkZDEtNDc1MC05ODg5LTQxNjhjM2FmMTc0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANomXAwDQYJKoZIhvcNAQELBQADggEBAGV1WS7nPtWTqb+97StfU6Fohl6X
2WVY/DtkF1SneIeX4WC9sFPacRTFn2vzncc6YX0IYVlKhChX3WtEy+skhCrx6Tbo
VOsxYb/dky2QHP9SreC2z9X0U8oYmAwGJ7oC2TumCuk2qlkk4K8ZfPjtyp836QQI
o5AWHWKMlsSWoIaKhttvXOkKk6soEZ7z/TMyJJCmV1csbB1P8rQE0vRBI01qIPAv
PTIOic13MIpRnlocTHRIxnY6165M7r+m4Fm1S6yTzPABaNRW0itrgU4bzl4ukoxk
ZTq6dlwWx8Ai48+iBb0BCW73nOaZ+Cb2X/DA9SI1+SXowruf/VjVv+znpd4=
-----END CERTIFICATE-----