Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa
File:                     3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa (raw, json)
Hash identifier:          5hv+7BrJ9e/4XzrV39GxzvT+Pee0FwmcmYWK3gvNUHc=
Subject key identifier:   1A:EC:2C:25:03:B0:DA:FB:7A:8F:3C:6E:A1:14:BA:E3:E2:AA:ED:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       576C015B661FAFD457115F0656A18AF206A39AB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.62.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6c:01:5b:66:1f:af:d4:57:11:5f:06:56:a1:8a:f2:06:a3:9a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=d5bb7ca7566586c2e454e492df736c2fd3485fb313fd772e8c738aebda198b1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:f6:7b:9c:bc:44:ec:78:44:68:78:09:99:
                    56:c7:a7:03:2c:08:05:d4:ff:20:95:30:41:8d:06:
                    05:d2:fb:ff:99:f7:b4:00:4a:98:09:ab:fc:45:14:
                    76:03:22:38:89:86:a6:2e:da:d4:bb:51:74:a7:3f:
                    6f:62:04:a1:f3:0f:41:eb:d6:71:dc:81:bc:a8:65:
                    a8:32:6e:c1:73:c1:49:dd:e2:a1:d9:bf:c3:15:70:
                    23:da:0c:7c:01:3b:24:90:80:13:b2:c7:1e:bf:e6:
                    51:ea:88:fe:7f:be:13:1d:f6:90:84:5c:e3:d9:0d:
                    1e:78:ba:58:45:07:84:f4:d9:93:93:83:99:89:76:
                    cb:1a:e7:ec:42:fb:a1:74:3a:01:8a:1e:f1:d7:f5:
                    97:3b:22:dc:47:11:b4:e0:50:5d:c7:e6:5d:0d:e4:
                    8b:86:73:fc:81:bc:87:5a:5f:4f:19:bc:57:a2:f3:
                    8a:18:0d:63:b4:8e:08:6a:4d:c0:d8:93:0e:c8:a7:
                    27:df:9e:11:c7:85:3c:52:9e:1f:c2:40:1e:14:cf:
                    78:55:0d:57:91:a8:f7:ea:04:ec:93:77:33:5e:30:
                    e5:be:c4:46:b6:b1:21:01:ff:de:f1:ee:b1:6f:e6:
                    b9:46:54:ea:55:de:bd:a0:f8:35:6f:5b:8a:59:3e:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:2C:25:03:B0:DA:FB:7A:8F:3C:6E:A1:14:BA:E3:E2:AA:ED:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:0d:1f:ad:0f:f1:a0:d7:4d:00:ef:26:ac:82:c9:ad:27:
         ac:12:a6:cf:1d:e5:48:a3:fc:84:fc:36:52:55:d5:48:b0:a5:
         7b:7f:e4:4a:ae:5b:2b:b0:b6:7b:c3:c2:c9:4a:0d:30:14:d3:
         ec:d0:1f:d5:16:44:b1:09:6d:e9:7a:64:62:66:b0:26:fe:4d:
         06:40:69:4c:9f:04:93:22:2b:b3:a2:d9:e2:64:e3:52:74:7f:
         7b:7b:64:4a:59:ed:6e:ef:da:64:96:18:18:b0:8e:b9:40:1b:
         6b:74:0f:20:68:3c:7f:36:cb:5f:1b:d4:54:14:11:a6:8b:3e:
         20:5a:c3:d8:60:21:9e:f2:62:27:c8:0d:71:0c:50:ee:15:91:
         69:57:44:0b:94:39:8e:d9:08:c6:5e:85:5c:54:51:c4:14:8e:
         b2:c9:af:71:c2:2b:bf:79:8a:b2:95:28:82:fe:c5:04:59:9c:
         b8:1c:13:fb:0d:0c:ae:76:22:81:f8:9b:0d:04:85:a5:45:46:
         54:a3:d4:f5:eb:41:26:ff:dd:f3:4d:27:16:11:fb:63:7d:c3:
         2d:0b:61:9d:04:d2:6c:b5:4d:c2:88:37:0e:6b:03:d6:c0:fe:
         dd:cf:73:ed:dd:60:c7:19:af:c4:5f:0e:5d:6c:3e:11:a1:d2:
         00:c9:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----