Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa
File:                     42bd5c98-ff16-4ff2-90fe-626a186a604c.roa (raw, json)
Hash identifier:          EMQFn3sLKBOzuyCmVPvplEnqtQJ69D/oSLB4lMX1c5Q=
Subject key identifier:   56:31:1F:EB:25:21:83:52:6C:76:7E:E6:B0:E1:AC:95:09:1F:DF:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33B446279C7012FC50FA5F6E5FF969A2FBF6674A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b4:46:27:9c:70:12:fc:50:fa:5f:6e:5f:f9:69:a2:fb:f6:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=0c9e3d3ddff377803221c7231f6be02d603e975455bb24ae0aca2361a06274c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:6f:3b:f1:2d:4a:e6:8d:3d:f2:81:8d:de:
                    99:57:aa:fe:27:3f:be:5b:4c:3c:46:22:ff:65:a5:
                    cc:e9:cc:69:c2:cc:b4:c3:7b:0c:62:d4:c4:21:df:
                    45:c8:12:44:a3:bf:9b:ee:10:72:0f:ca:e1:03:8f:
                    88:5d:37:b3:93:fa:05:1a:a7:de:bc:d0:a9:2a:fe:
                    15:83:bd:eb:f5:b2:f5:8a:62:b4:eb:2c:05:b5:84:
                    57:0e:7b:b0:8d:f7:6b:d2:21:da:d7:57:a7:cb:f5:
                    85:4a:c7:e4:f7:5f:b5:69:61:df:28:00:a7:27:a0:
                    23:5c:da:76:bb:47:7e:56:3f:10:eb:06:b2:45:80:
                    a8:f5:5b:29:bb:3e:90:20:2f:8f:99:77:64:2f:86:
                    c1:d3:01:ec:2e:95:69:57:da:52:17:f6:8c:53:32:
                    82:30:9f:18:40:a8:5b:fd:be:ef:88:0d:cc:0c:43:
                    76:fe:c6:e4:66:21:83:50:87:a7:02:59:20:3e:ad:
                    ad:84:56:bd:0e:1c:7a:c4:5b:cb:15:bf:32:c9:fc:
                    51:6b:8d:b2:40:af:c0:ea:9c:8b:44:bd:84:2b:16:
                    3d:19:da:22:3f:54:5a:82:78:30:ef:aa:1f:2e:b6:
                    ce:b0:60:a2:0d:94:55:61:87:4e:01:db:7b:7e:e1:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:1F:EB:25:21:83:52:6C:76:7E:E6:B0:E1:AC:95:09:1F:DF:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:95:5f:e3:c1:ea:d8:56:63:1e:fa:b3:11:39:77:48:53:c6:
         ee:8e:06:12:99:14:fa:d4:84:10:16:47:ad:94:8d:11:ed:8f:
         b3:6a:40:f2:20:39:02:77:75:4e:6a:0a:57:c3:41:4d:f8:3f:
         17:3b:60:ce:2a:b6:58:bc:90:ef:f2:20:e4:e3:98:bc:4f:95:
         9b:6a:37:10:f8:2d:a6:4b:9e:39:22:3e:e2:47:9e:4e:74:08:
         c9:12:93:54:6f:c6:dd:d2:28:42:c3:ea:4f:90:ec:79:4f:61:
         df:96:1f:00:b4:ce:a7:09:4f:fc:d3:3b:f0:00:ac:a0:df:4a:
         38:cb:88:26:2c:33:c9:44:8d:92:b6:60:5f:02:0c:6d:b1:ab:
         1e:00:9a:8b:f2:f8:68:c3:37:30:1a:76:a0:d3:d7:8d:53:88:
         b1:38:d4:59:d0:71:b3:ea:26:52:8b:db:07:c1:d0:d2:72:21:
         0c:40:c3:43:90:82:25:62:01:92:59:1e:48:3d:2d:f6:02:8a:
         f6:40:df:f0:52:3c:20:9d:c1:9e:cb:3c:e2:f6:c9:bb:7a:4e:
         aa:95:c3:93:26:d1:a3:3d:74:75:a1:d7:bd:9e:82:8c:a5:83:
         5b:4c:e1:e9:6e:87:3c:7f:84:f0:c0:f1:35:03:69:79:05:d5:
         26:16:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----