Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa
File:                     2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa (raw, json)
Hash identifier:          SIu/XpfpTx365buMtgK8QxcoVQuq/jkxyWhJ0s9V5GA=
Subject key identifier:   52:8C:01:D7:98:9A:80:B1:E1:92:FE:44:FE:09:5F:C0:8D:3C:2D:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       068C9AC8F347AC4265C8A562867553FC360A833D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:9a:c8:f3:47:ac:42:65:c8:a5:62:86:75:53:fc:36:0a:83:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=fce53035c01c5775f9a6b29c41f962a04a6a9683583317cb8a56c690140c1863, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:37:c5:49:ed:d4:d6:c1:40:ca:8e:7b:3d:
                    0a:fc:3a:45:49:e1:a9:52:d2:d0:83:ac:6f:e9:48:
                    bf:34:9c:6f:bf:68:0d:b2:d8:52:b8:17:26:ed:4a:
                    9b:ba:77:46:7f:97:d6:ea:8d:d3:50:a4:e2:a9:ab:
                    b1:29:8b:29:f9:25:f0:32:91:52:19:e2:80:6a:9d:
                    bc:0a:bb:45:70:7a:0c:f0:6d:a6:12:fc:df:3f:64:
                    8a:e7:4b:86:6b:35:97:db:eb:29:43:45:74:ad:4d:
                    a7:92:5f:cf:91:e0:01:85:49:30:4a:e7:a3:cd:fa:
                    42:bb:c6:27:c9:1c:0a:72:57:1d:80:07:86:d8:49:
                    fb:6b:d6:24:fb:ce:40:05:02:f8:d3:01:d5:62:ec:
                    3f:b9:fe:18:c3:02:28:17:a9:6d:fd:24:09:a6:4c:
                    8f:98:6a:90:9e:57:0a:b8:e1:9f:40:ed:9c:9e:6c:
                    2f:39:e8:03:7d:b7:eb:10:5b:86:c3:18:64:e0:0f:
                    31:48:d9:82:8c:be:07:07:e9:85:5d:9d:5c:bd:fa:
                    75:c0:dc:9e:ec:64:d7:df:33:b5:11:f9:e2:c5:a4:
                    42:02:f4:8d:5c:ab:32:63:e1:fe:14:15:af:a4:a2:
                    f6:5a:46:17:43:06:87:09:1b:a8:23:3c:c9:7a:64:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:01:D7:98:9A:80:B1:E1:92:FE:44:FE:09:5F:C0:8D:3C:2D:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b4963d8-e2ac-4914-b19a-38c95ebe2e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:94:a6:19:e1:b3:2b:a7:70:e6:6f:3d:b8:ff:85:31:4c:c7:
         0c:ae:ec:54:0c:c3:05:3f:42:e5:20:58:94:05:f5:1d:d7:54:
         ed:25:c5:6c:1b:2d:5c:56:2b:97:f4:c5:69:60:f4:4c:a2:b6:
         aa:de:49:10:5d:b4:d3:80:92:9e:6c:9e:7c:92:b4:e1:7f:04:
         9b:ea:36:17:72:f8:51:ec:66:f6:ac:93:09:e4:5f:08:d1:22:
         85:48:51:03:f9:19:d3:de:9e:3d:d4:45:30:ca:64:e3:ab:7f:
         38:db:ed:c9:98:ca:95:92:63:5b:67:97:e9:53:f6:b4:18:f2:
         44:8d:11:d6:10:e4:7e:dd:09:ab:25:8d:2d:79:41:8a:61:81:
         34:59:cd:30:47:02:d8:55:c0:3e:f0:c2:c5:42:76:e8:d6:f7:
         47:94:f2:b7:16:24:8a:d0:6b:b1:61:39:f5:00:a7:b6:46:58:
         a9:0e:d2:ac:ab:29:39:f7:dd:16:52:07:88:f5:65:84:3b:0d:
         ca:b2:93:1c:9f:7e:e6:26:ee:99:92:9b:41:6b:ce:00:47:af:
         c2:4e:65:32:fa:ee:2f:6f:bb:97:6e:81:f9:96:dc:f1:a6:91:
         1e:7a:c7:ea:fa:42:e5:84:8f:fc:e0:93:ae:c7:b9:f4:43:5b:
         74:96:12:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBoyayPNHrEJlyKVihnVT/DYKgz0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI4MDAwMDAwWhcNMjUwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmY2U1MzAzNWMwMWM1Nzc1ZjlhNmIyOWM0MWY5NjJhMDRh
NmE5NjgzNTgzMzE3Y2I4YTU2YzY5MDE0MGMxODYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCucjfFSe3U1sFAyo57PQr8OkVJ4alS0tCDrG/pSL80nG+/
aA2y2FK4FybtSpu6d0Z/l9bqjdNQpOKpq7Epiyn5JfAykVIZ4oBqnbwKu0Vwegzw
baYS/N8/ZIrnS4ZrNZfb6ylDRXStTaeSX8+R4AGFSTBK56PN+kK7xifJHApyVx2A
B4bYSftr1iT7zkAFAvjTAdVi7D+5/hjDAigXqW39JAmmTI+YapCeVwq44Z9A7Zye
bC856AN9t+sQW4bDGGTgDzFI2YKMvgcH6YVdnVy9+nXA3J7sZNffM7UR+eLFpEIC
9I1cqzJj4f4UFa+kovZaRhdDBocJG6gjPMl6ZNXvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUowB15iagLHhkv5E/glfwI08LZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJiNDk2M2Q4LWUyYWMtNDkxNC1iMTlhLTM4Yzk1ZWJlMmU4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjljAwDQYJKoZIhvcNAQELBQADggEBAGSUphnhsyuncOZvPbj/hTFMxwyu
7FQMwwU/QuUgWJQF9R3XVO0lxWwbLVxWK5f0xWlg9EyitqreSRBdtNOAkp5snnyS
tOF/BJvqNhdy+FHsZvaskwnkXwjRIoVIUQP5GdPenj3URTDKZOOrfzjb7cmYypWS
Y1tnl+lT9rQY8kSNEdYQ5H7dCasljS15QYphgTRZzTBHAthVwD7wwsVCdujW90eU
8rcWJIrQa7FhOfUAp7ZGWKkO0qyrKTn33RZSB4j1ZYQ7DcqykxyffuYm7pmSm0Fr
zgBHr8JOZTL67i9vu5dugfmW3PGmkR56x+r6QuWEj/zgk67HufRDW3SWEjQ=
-----END CERTIFICATE-----