Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42cfc8f8-a4b6-48c2-aac3-95e1116a6303.roa
File:                     42cfc8f8-a4b6-48c2-aac3-95e1116a6303.roa (raw, json)
Hash identifier:          wlJSzSR93hkWKe3bkXnnPwHUjy4bqZlbWZVHj8YqC38=
Subject key identifier:   A1:45:6E:C5:EE:75:1A:47:11:F9:83:AA:D5:0F:08:B1:23:CC:72:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37D6832588D7EF62BD64E835076B6E74863462
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42cfc8f8-a4b6-48c2-aac3-95e1116a6303.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:83:25:88:d7:ef:62:bd:64:e8:35:07:6b:6e:74:86:34:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=37d1df64c97e29a8b483452b42e5a6fa4033aea99642f532af53bf6014d782f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:74:d1:93:46:50:f8:ba:22:4e:c1:d4:84:
                    f6:50:79:43:c8:57:6c:0d:96:bf:ac:c1:ef:3e:dd:
                    98:cb:49:7f:59:2d:8e:c6:38:0e:f3:d2:15:54:ce:
                    fe:94:a8:34:00:4b:2f:74:54:8e:c6:45:c9:6e:21:
                    8e:79:9e:14:21:2b:d2:ca:3c:09:2d:1f:e8:26:84:
                    cb:64:af:38:c2:92:bd:17:e2:ec:45:d3:5f:76:e5:
                    42:cb:72:d5:d0:d1:7b:df:08:05:5b:ef:f7:5d:5b:
                    84:9e:d9:a5:53:a3:f4:c0:79:57:90:0f:07:eb:54:
                    ba:c6:5b:6c:54:01:31:9f:a1:48:2c:2e:da:8a:e8:
                    e1:d8:3b:01:f4:db:f5:2f:90:4c:9e:cf:19:ff:5d:
                    67:c1:83:8e:46:3b:72:48:a7:e2:2b:6e:98:bf:cf:
                    4e:a1:88:df:c3:60:f2:9f:04:a3:9e:64:cf:3e:62:
                    78:0f:7f:8c:b1:82:c9:bf:db:81:bc:a4:49:8e:83:
                    ae:7b:4c:19:9b:52:fd:be:2b:d7:6c:3f:c0:e7:6d:
                    1b:a5:99:35:74:e2:8e:b1:25:bf:38:83:b2:46:e8:
                    46:d3:4a:88:d6:56:6a:e9:72:4c:04:ff:94:6c:e9:
                    fb:a0:11:51:83:8f:ca:a4:af:7a:8e:95:90:89:5a:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:6E:C5:EE:75:1A:47:11:F9:83:AA:D5:0F:08:B1:23:CC:72:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42cfc8f8-a4b6-48c2-aac3-95e1116a6303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c8:82:db:69:7c:88:08:ac:cd:e2:01:db:15:f9:6b:c6:97:c3:
         39:8f:6a:84:9e:08:30:7d:ef:cb:4c:b8:a0:81:c6:24:76:ad:
         1b:94:60:05:60:10:88:dc:7a:68:0a:c7:ae:77:76:69:66:df:
         81:2c:40:f1:ba:df:9d:cb:3d:2c:e7:4e:3f:45:94:eb:c3:1e:
         64:0d:9f:a0:fd:7b:50:a0:3f:10:ae:5f:3f:95:68:9c:f2:91:
         08:e7:8e:3f:9f:bb:07:b7:3c:e0:7b:0f:93:3c:49:5b:d1:b2:
         c7:a1:c0:9f:d8:fb:88:65:fb:67:40:90:ea:bd:a8:16:91:6a:
         2f:94:38:cf:05:ff:26:0c:69:29:65:7b:42:2f:aa:8a:94:46:
         e9:2e:e4:5e:0d:99:da:5c:d9:ab:a7:65:84:9e:de:de:39:95:
         0e:ca:aa:a4:f6:d7:c8:dc:4e:3b:16:4a:68:6d:9f:5d:63:49:
         a2:88:11:1a:ac:f4:55:b8:19:58:a2:b3:ff:e5:fc:4b:af:95:
         d4:8e:7f:c5:67:a1:c4:3a:63:0d:3b:4e:ab:f5:20:17:cf:f5:
         26:5d:83:b4:21:82:b1:30:52:5a:1f:57:ae:b6:98:d6:53:91:
         a6:0d:18:74:ad:ae:44:4f:cd:4b:d3:0b:47:79:9c:12:3b:c0:
         39:0b:d0:87
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgITN9aDJYjX72K9ZOg1B2tudIY0YjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTla
MHoxSTBHBgNVBAUTQDM3ZDFkZjY0Yzk3ZTI5YThiNDgzNDUyYjQyZTVhNmZhNDAz
M2FlYTk5NjQyZjUzMmFmNTNiZjYwMTRkNzgyZjUxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9WdNGTRlD4uiJOwdSE9lB5Q8hXbA2Wv6zB7z7dmMtJf1kt
jsY4DvPSFVTO/pSoNABLL3RUjsZFyW4hjnmeFCEr0so8CS0f6CaEy2SvOMKSvRfi
7EXTX3blQsty1dDRe98IBVvv911bhJ7ZpVOj9MB5V5APB+tUusZbbFQBMZ+hSCwu
2oro4dg7AfTb9S+QTJ7PGf9dZ8GDjkY7ckin4itumL/PTqGI38Ng8p8Eo55kzz5i
eA9/jLGCyb/bgbykSY6DrntMGZtS/b4r12w/wOdtG6WZNXTijrElvziDskboRtNK
iNZWaulyTAT/lGzp+6ARUYOPyqSveo6VkIla6KMCAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBShRW7F7nUaRxH5g6rVDwixI8xyKjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvNDJjZmM4ZjgtYTRiNi00OGMyLWFhYzMtOTVlMTExNmE2MzAzLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDACimMA0GCSqGSIb3DQEBCwUAA4IBAQDIgttpfIgIrM3iAdsV+WvGl8M5j2qE
nggwfe/LTLiggcYkdq0blGAFYBCI3HpoCseud3ZpZt+BLEDxut+dyz0s504/RZTr
wx5kDZ+g/XtQoD8Qrl8/lWic8pEI544/n7sHtzzgew+TPElb0bLHocCf2PuIZftn
QJDqvagWkWovlDjPBf8mDGkpZXtCL6qKlEbpLuReDZnaXNmrp2WEnt7eOZUOyqqk
9tfI3E47FkpobZ9dY0miiBEarPRVuBlYorP/5fxLr5XUjn/FZ6HEOmMNO06r9SAX
z/UmXYO0IYKxMFJaH1eutpjWU5GmDRh0ra5ET81L0wtHeZwSO8A5C9CH
-----END CERTIFICATE-----