Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca20876-6696-4841-abac-796243686ab3.roa
File:                     3ca20876-6696-4841-abac-796243686ab3.roa (raw, json)
Hash identifier:          y6QbgAD4m7NVkGsqxZW03KF8jmSUSeS47aRL9KAtFVQ=
Subject key identifier:   FD:CA:2E:E5:F1:A8:E3:04:D8:12:9A:C6:50:7B:E4:F8:F7:EC:B5:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7353F0B9F139750616A89C65C0DD2029DB3D7C2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca20876-6696-4841-abac-796243686ab3.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        208.64.224.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:f0:b9:f1:39:75:06:16:a8:9c:65:c0:dd:20:29:db:3d:7c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=79595cd4e98a782c44c2cc22ad971ed49b17329fb961307ab45a4388d9027067, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:9a:06:07:3d:c3:e0:fb:ca:72:8d:04:14:
                    ea:31:fb:04:b9:6b:13:75:7a:94:cd:d1:1d:f9:2c:
                    50:eb:af:1a:78:7a:13:c1:cd:d7:45:7f:61:db:6d:
                    21:e0:9e:eb:0b:6c:07:d3:91:e6:4e:f8:d4:d0:7e:
                    3a:b1:7f:cd:ac:d5:8a:04:ee:76:d2:be:79:28:ce:
                    e5:13:8e:62:db:a2:76:08:50:8c:f7:0a:13:bb:5f:
                    25:cf:98:50:73:8b:4f:bf:6e:83:37:fe:d3:a2:dd:
                    97:36:98:4b:2e:51:15:73:f8:da:1b:96:d0:b4:97:
                    3d:c1:9e:f2:9b:d1:20:d4:e2:81:f4:92:b3:a0:67:
                    21:74:11:48:33:2a:41:7c:79:fb:58:83:29:b2:dd:
                    bc:cd:f5:55:80:84:46:79:6b:7a:df:6c:36:93:1f:
                    0b:8a:76:4f:66:f5:ea:0f:35:60:69:72:6d:24:8c:
                    7e:f9:52:5e:66:2c:ce:e5:8c:a9:9e:11:39:86:d4:
                    4a:9b:46:ca:17:02:52:21:af:8a:75:6f:5d:bd:63:
                    4d:70:43:27:e5:7c:16:b5:26:ba:1b:f8:4f:d4:ac:
                    45:4c:16:6b:fe:b4:5e:5a:75:59:9f:23:b1:e9:8a:
                    12:c2:93:7b:0e:2e:5e:b5:ac:18:44:32:25:e6:11:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:2E:E5:F1:A8:E3:04:D8:12:9A:C6:50:7B:E4:F8:F7:EC:B5:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ca20876-6696-4841-abac-796243686ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:85:1a:45:ee:a7:08:4f:06:20:c7:f2:c0:40:6a:ac:4d:7f:
         ab:45:48:9d:a8:97:7a:83:c1:a1:72:2b:77:3f:85:44:6c:d6:
         2e:69:13:a8:d3:78:43:76:c1:95:0f:6f:16:bf:a7:73:47:14:
         82:06:7e:ff:80:bd:73:58:5c:6d:68:38:d5:54:03:9d:db:4b:
         d3:ec:24:86:79:c7:c1:a3:27:9d:e6:66:af:02:0b:31:31:a2:
         08:eb:c4:b1:66:7e:66:99:aa:c8:99:50:b6:ba:0a:01:ce:f7:
         86:a2:31:3e:6f:95:bf:fd:c0:fe:60:ac:bd:cc:6a:34:c0:f8:
         ed:64:5c:84:e6:32:3f:92:c7:10:da:bd:73:db:f0:9a:fe:8e:
         d4:46:41:f5:ea:5e:7d:58:57:e2:96:ab:95:3a:19:52:e3:2f:
         87:bc:ae:3b:55:1c:9e:85:e5:ea:ce:19:40:ab:5b:ca:ec:cc:
         88:5e:97:16:35:e2:f5:ab:28:69:bb:a2:91:41:b7:17:cc:4f:
         c2:ed:c2:cc:50:41:9d:c3:b3:97:7f:e7:12:8f:b9:6f:85:a2:
         6f:9c:92:d2:45:09:67:d3:21:0f:88:18:93:e2:5e:fd:fd:4a:
         9e:50:c3:af:5d:3a:f7:4c:73:8e:62:d8:3a:8f:2c:d4:ff:4c:
         76:b9:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----