Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
File:                     258e6f29-ec78-4849-a049-84a7edb4a611.roa (raw, json)
Hash identifier:          EwtFXKV6klJU5pNpfo1OMcaamJ4MLlkEngxKk9Y+NBo=
Subject key identifier:   09:B2:50:E6:CA:A9:06:8F:8E:43:54:6B:CA:B9:B1:BE:45:D5:A2:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70F2A5FBDCF2F522B844964823B0A0BD450CB05A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        74.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f2:a5:fb:dc:f2:f5:22:b8:44:96:48:23:b0:a0:bd:45:0c:b0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=2abd4397115e9b070c2da7e15e63cae51c907370031a17aced66bd2f0b87e32c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:1b:00:44:b6:88:7b:e8:de:cf:d9:b4:38:
                    f7:0b:d5:1f:9a:4a:8d:94:64:5c:fa:18:51:d9:c8:
                    2b:92:dd:a5:5d:18:f4:3d:49:0c:34:6b:09:60:53:
                    72:65:8e:a7:87:64:cd:3b:eb:f6:67:5d:67:3e:af:
                    fe:fe:ef:51:e3:bd:57:56:da:d6:fa:39:50:ae:b2:
                    32:a9:2a:43:2d:b4:9d:68:81:df:53:bd:92:92:8d:
                    31:f0:56:22:2c:28:31:e1:ce:c4:04:a6:74:2b:83:
                    be:ce:55:2b:c4:22:45:23:ba:c5:0c:50:80:03:96:
                    25:e3:c3:4e:d2:b3:57:fe:a0:25:38:eb:64:13:77:
                    87:8d:2b:01:40:e7:7b:69:7c:c6:e9:f3:60:cf:5d:
                    9a:be:6a:92:b5:df:b5:06:ee:ec:94:f2:2f:1d:22:
                    16:a0:e9:47:94:8e:c0:6a:fe:1e:f0:12:cd:df:38:
                    e4:2f:19:b6:aa:c9:62:b7:69:7c:00:99:0a:01:75:
                    90:f9:00:f4:8d:05:7b:2f:38:e4:fc:bb:24:79:bb:
                    fd:e1:14:be:14:60:3b:3e:5d:fa:ab:59:4f:31:ea:
                    44:42:21:f6:b4:53:30:40:c5:0b:1b:7e:25:7f:4b:
                    51:76:5f:cc:56:60:e1:48:db:37:12:48:12:46:3f:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B2:50:E6:CA:A9:06:8F:8E:43:54:6B:CA:B9:B1:BE:45:D5:A2:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:93:05:87:c2:01:9c:ea:80:3d:0d:8a:32:78:7e:0a:5c:05:
         ba:55:dd:d8:c9:a1:cd:cd:c1:2b:9d:ea:c8:6f:49:ae:cf:25:
         c9:06:da:f3:c1:69:cd:cc:83:bf:75:ad:e2:56:f7:00:be:03:
         6b:c6:01:46:0a:69:3e:4c:16:fb:72:83:78:bd:f9:7e:cd:c9:
         67:c5:3f:b9:69:77:90:4b:99:db:09:3b:ba:6b:60:9c:2c:0b:
         ea:68:e1:bd:0f:b8:5c:9d:ac:a2:16:0c:8d:c0:5b:0a:83:dc:
         1a:42:bd:2d:48:0f:29:b6:96:93:41:42:05:0c:23:74:48:d4:
         a1:25:4f:07:b4:ba:a9:f8:a5:82:8e:cf:2d:4f:ea:df:72:4b:
         cc:38:ee:07:45:94:85:c7:a3:b2:33:9d:e3:0a:7c:f1:f1:45:
         37:98:c1:f7:d6:e6:17:0b:77:8a:13:4e:97:eb:c5:9d:b8:5e:
         88:f5:87:81:7e:ea:85:c7:e0:f2:c3:cf:e1:82:20:5c:01:31:
         9d:ac:b4:8d:93:f1:aa:c4:9f:5a:f2:56:52:74:36:45:c5:f1:
         98:f2:36:c6:03:12:72:b2:3d:5d:1e:aa:44:cb:ab:28:b1:ef:
         dc:a7:6a:1c:6a:cf:07:de:e5:83:ce:e2:5a:e6:9f:20:bb:8d:
         3f:95:a8:8a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcPKl+9zy9SK4RJZII7CgvUUMsFowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWJkNDM5NzExNWU5YjA3MGMyZGE3ZTE1ZTYzY2FlNTFj
OTA3MzcwMDMxYTE3YWNlZDY2YmQyZjBiODdlMzJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2HxsARLaIe+jez9m0OPcL1R+aSo2UZFz6GFHZyCuS3aVd
GPQ9SQw0awlgU3JljqeHZM076/ZnXWc+r/7+71HjvVdW2tb6OVCusjKpKkMttJ1o
gd9TvZKSjTHwViIsKDHhzsQEpnQrg77OVSvEIkUjusUMUIADliXjw07Ss1f+oCU4
62QTd4eNKwFA53tpfMbp82DPXZq+apK137UG7uyU8i8dIhag6UeUjsBq/h7wEs3f
OOQvGbaqyWK3aXwAmQoBdZD5APSNBXsvOOT8uyR5u/3hFL4UYDs+XfqrWU8x6kRC
Ifa0UzBAxQsbfiV/S1F2X8xWYOFI2zcSSBJGP879AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCbJQ5sqpBo+OQ1RryrmxvkXVok8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1OGU2ZjI5LWVjNzgtNDg0OS1hMDQ5LTg0YTdlZGI0YTYxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBKvjANBgkqhkiG9w0BAQsFAAOCAQEAgZMFh8IBnOqAPQ2KMnh+ClwFulXd
2Mmhzc3BK53qyG9Jrs8lyQba88FpzcyDv3Wt4lb3AL4Da8YBRgppPkwW+3KDeL35
fs3JZ8U/uWl3kEuZ2wk7umtgnCwL6mjhvQ+4XJ2sohYMjcBbCoPcGkK9LUgPKbaW
k0FCBQwjdEjUoSVPB7S6qfilgo7PLU/q33JLzDjuB0WUhcejsjOd4wp88fFFN5jB
99bmFwt3ihNOl+vFnbheiPWHgX7qhcfg8sPP4YIgXAExnay0jZPxqsSfWvJWUnQ2
RcXxmPI2xgMScrI9XR6qRMurKLHv3KdqHGrPB97lg87iWuafILuNP5Woig==
-----END CERTIFICATE-----