Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d50afe-b916-421e-9463-8d89c5b90996.roa
File:                     25d50afe-b916-421e-9463-8d89c5b90996.roa (raw, json)
Hash identifier:          nku5KmJfyWlQnxzNwkrNHbln0UoqGVlEiDsbVb9IcHE=
Subject key identifier:   18:94:14:68:89:D7:71:CD:28:FC:21:C9:3D:86:D8:2A:37:09:45:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E5A7FBD8479FDFB5F45C62792D183C13C45C1F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d50afe-b916-421e-9463-8d89c5b90996.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.2.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5a:7f:bd:84:79:fd:fb:5f:45:c6:27:92:d1:83:c1:3c:45:c1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=0b8c2398bcf147b9c403b5f4ccd3c5ad1501d20a46d68204d139fc71cce2a586, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:7d:cb:d0:b0:45:47:83:18:2f:a6:64:e4:
                    88:68:f4:10:53:fc:a4:23:cf:23:97:5f:1c:55:35:
                    cc:e0:a1:c0:18:5a:64:e1:a9:c3:3b:3e:00:85:50:
                    56:d6:91:15:e2:75:45:98:53:83:fa:a0:74:c9:16:
                    11:cc:fa:e5:7f:e9:9d:98:69:01:b9:cd:cf:0d:3e:
                    1c:ba:ab:72:b4:88:c2:0e:7c:be:f7:60:fd:5c:fa:
                    84:88:5e:f9:50:6c:a6:43:67:0c:87:52:3f:de:ef:
                    72:26:70:19:eb:36:e9:39:02:62:b1:06:85:d3:bf:
                    e8:81:f8:e7:ca:50:a2:a6:40:1f:60:ff:8d:84:f4:
                    d1:fe:91:f6:e5:a7:3a:c7:1c:d2:59:21:9b:e9:7b:
                    93:59:85:86:0c:8c:32:13:7e:f3:0c:e7:52:0d:70:
                    b9:87:b8:c6:34:f3:5d:85:9a:f6:92:31:92:db:79:
                    92:74:1d:6f:49:a5:43:8c:21:61:04:a1:17:bc:db:
                    50:6e:88:d0:4f:e4:e4:62:25:a7:88:17:47:57:c1:
                    d6:ea:22:b0:ab:61:6e:d5:ee:14:88:e1:7e:2c:1a:
                    8b:9c:b4:1c:4b:28:b3:09:bf:6d:01:93:e0:be:e9:
                    f7:2b:4d:d3:fc:bb:92:f6:80:87:d3:bd:36:70:c7:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:14:68:89:D7:71:CD:28:FC:21:C9:3D:86:D8:2A:37:09:45:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25d50afe-b916-421e-9463-8d89c5b90996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.2.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:db:33:62:ce:c4:02:72:9b:25:0b:7c:07:be:c4:d0:a5:
         da:8f:3a:d7:c8:37:b9:c6:a4:71:2e:77:96:64:0a:4d:86:13:
         17:5d:48:9a:61:ad:ba:f9:c2:75:cc:3e:af:fa:ac:26:6d:cb:
         a9:e3:0f:f8:d8:32:73:d1:bd:fe:9b:33:2e:ac:64:d5:33:e2:
         46:79:4a:0c:96:91:5d:33:4b:14:3d:1d:c5:39:11:b2:8a:52:
         77:ac:99:e3:ca:44:99:61:20:61:3f:e2:24:c8:6b:5f:97:10:
         21:ce:b2:62:43:a6:ed:a8:fd:2d:e7:fe:cb:f2:4c:d2:70:f6:
         25:f1:9c:03:a5:62:41:27:e1:08:4d:51:51:26:ef:03:30:5c:
         93:68:f9:ba:a2:37:7a:a6:dc:15:39:9e:7c:2f:fc:8f:09:e0:
         be:76:03:d7:d0:d5:c1:1e:36:f7:69:c1:2f:1c:7d:ae:9f:de:
         5e:ff:58:0f:5b:4c:3b:1c:f2:82:2e:94:24:e8:47:bf:99:a7:
         74:5f:1c:3d:3a:c7:df:14:87:2d:35:a5:30:07:97:0f:de:96:
         ec:d5:ce:77:67:f2:0d:43:28:86:1c:3b:1d:c9:d4:08:dc:f2:
         e9:55:28:50:cb:50:c2:b1:de:8b:e7:5c:64:23:48:1c:39:40:
         01:ff:e1:62
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDlp/vYR5/ftfRcYnktGDwTxFwfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjhjMjM5OGJjZjE0N2I5YzQwM2I1ZjRjY2QzYzVhZDE1
MDFkMjBhNDZkNjgyMDRkMTM5ZmM3MWNjZTJhNTg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSvn3L0LBFR4MYL6Zk5Iho9BBT/KQjzyOXXxxVNczgocAY
WmThqcM7PgCFUFbWkRXidUWYU4P6oHTJFhHM+uV/6Z2YaQG5zc8NPhy6q3K0iMIO
fL73YP1c+oSIXvlQbKZDZwyHUj/e73ImcBnrNuk5AmKxBoXTv+iB+OfKUKKmQB9g
/42E9NH+kfblpzrHHNJZIZvpe5NZhYYMjDITfvMM51INcLmHuMY0812FmvaSMZLb
eZJ0HW9JpUOMIWEEoRe821BuiNBP5ORiJaeIF0dXwdbqIrCrYW7V7hSI4X4sGouc
tBxLKLMJv20Bk+C+6fcrTdP8u5L2gIfTvTZwx1fNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGJQUaInXcc0o/CHJPYbYKjcJRYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1ZDUwYWZlLWI5MTYtNDIxZS05NDYzLThkODljNWI5MDk5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBAg4wDQYJKoZIhvcNAQELBQADggEBAGj+2zNizsQCcpslC3wHvsTQpdqP
OtfIN7nGpHEud5ZkCk2GExddSJphrbr5wnXMPq/6rCZty6njD/jYMnPRvf6bMy6s
ZNUz4kZ5SgyWkV0zSxQ9HcU5EbKKUnesmePKRJlhIGE/4iTIa1+XECHOsmJDpu2o
/S3n/svyTNJw9iXxnAOlYkEn4QhNUVEm7wMwXJNo+bqiN3qm3BU5nnwv/I8J4L52
A9fQ1cEeNvdpwS8cfa6f3l7/WA9bTDsc8oIulCToR7+Zp3RfHD06x98Uhy01pTAH
lw/eluzVzndn8g1DKIYcOx3J1Ajc8ulVKFDLUMKx3ovnXGQjSBw5QAH/4WI=
-----END CERTIFICATE-----