Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407fe81e-bb27-4fa2-b1d9-a07f8aa715d2.roa
File:                     407fe81e-bb27-4fa2-b1d9-a07f8aa715d2.roa (raw, json)
Hash identifier:          fkk2rFbgWDTkmsJbkgomf79LGhti00DUW+37endBbrs=
Subject key identifier:   FD:66:2D:89:A0:19:D9:D1:93:95:77:22:0D:BC:1C:91:7C:16:C8:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       631279874C2CDF8A034A362DB6A5960783300A6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407fe81e-bb27-4fa2-b1d9-a07f8aa715d2.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        199.182.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:12:79:87:4c:2c:df:8a:03:4a:36:2d:b6:a5:96:07:83:30:0a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=6822e366359cd53d4602f2743f8f72aec8a1c373c8533e3c29c307f3833cd6b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:4a:2a:e3:e3:b6:47:1c:05:93:81:c4:c6:
                    c8:8c:38:20:c2:2a:07:d1:a0:30:1c:52:68:aa:0f:
                    bd:ea:fb:69:50:d9:c7:d5:f9:08:2a:d2:84:32:7f:
                    5b:74:35:5a:9a:a7:ae:27:fd:07:c5:34:1c:50:fb:
                    d3:5f:d1:64:04:cd:fb:91:57:02:17:a6:a7:b2:6f:
                    b8:a8:06:ce:27:76:39:c6:4f:0a:cb:08:9c:5b:de:
                    82:1c:d7:f5:cb:41:64:92:3f:cf:d1:7d:fc:d1:65:
                    29:b3:10:c4:98:20:b9:a9:2a:fc:f8:04:34:9e:6d:
                    ba:72:97:7c:60:a0:fc:3f:18:7d:1d:e5:2b:18:3d:
                    7c:c8:e1:e3:8f:23:a4:0a:fd:9f:60:37:58:a7:e1:
                    20:4a:b3:13:2d:97:66:6a:48:64:77:11:81:de:66:
                    82:ff:e8:b5:01:7b:60:29:3b:86:98:fc:83:6e:b0:
                    67:f8:9d:6d:d5:6a:7f:95:bd:45:ba:73:4c:df:99:
                    4a:b9:9c:ca:6b:c6:ac:8d:0a:88:7c:8d:ad:9b:25:
                    cd:e6:3e:2a:64:25:fb:fe:bc:5f:c7:08:41:12:df:
                    79:3e:f8:6d:3b:88:36:ce:a5:a8:41:a3:e3:dd:88:
                    7b:82:1a:ee:ce:0f:65:3b:2d:c7:43:4e:c0:d4:b8:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:2D:89:A0:19:D9:D1:93:95:77:22:0D:BC:1C:91:7C:16:C8:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407fe81e-bb27-4fa2-b1d9-a07f8aa715d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:17:16:0c:65:bd:de:ef:b7:07:5a:ab:3a:a9:75:29:35:
         e9:01:50:24:e7:d1:b8:e9:8f:72:90:ed:76:f7:4b:85:2a:2f:
         f9:02:11:f2:50:5e:73:4f:4f:d7:d4:82:00:13:8e:af:fb:af:
         1c:b6:65:33:2f:18:0f:f2:0f:2c:bb:eb:53:b9:4a:1e:21:aa:
         85:dd:4d:df:88:60:9b:01:62:f7:85:7f:cc:67:22:80:6e:ad:
         ff:ef:b6:c0:db:37:c0:82:73:1d:6e:61:8d:da:f7:2a:eb:fe:
         10:99:a5:07:49:77:9c:40:ba:f5:17:a4:4c:bf:c3:f3:eb:e3:
         b3:17:65:a1:92:b6:f0:88:4e:ea:cc:10:91:aa:ae:a2:b0:f3:
         d8:ff:e3:d0:a4:f1:9c:3c:c3:fd:0b:05:97:dd:7e:57:26:b6:
         57:83:81:89:b8:7c:7d:83:e2:08:74:04:df:e5:30:32:35:4c:
         e5:ce:9a:d9:14:12:8b:1e:15:76:89:75:c2:4b:c0:bc:db:d7:
         36:9b:ef:b1:8e:7c:09:2b:0a:c6:85:df:d4:36:f1:d7:69:43:
         0e:ff:7a:ab:44:74:79:ce:b6:fb:cf:e5:f8:74:5e:5b:69:04:
         ec:ae:b0:4c:22:8d:86:c5:1b:fa:da:37:31:80:c2:65:0f:bc:
         50:68:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----