Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa
File:                     5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa (raw, json)
Hash identifier:          IFRa1QcPm18PdkbZIX87n9VbV0ys9AhzEHQqyX/4DY8=
Subject key identifier:   93:61:0F:37:C6:40:3B:BA:DE:CD:D4:34:DB:0F:F9:64:34:43:47:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A22F1EB7E9888648B84F5E80DB7BF95A91A11F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        153.42.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:22:f1:eb:7e:98:88:64:8b:84:f5:e8:0d:b7:bf:95:a9:1a:11:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=ed1b6fbff182c3cf415c7097a9ca91eecbbc28369b54ede227e517877cda7b8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:32:1c:81:13:09:ec:c6:9e:ff:e1:f0:7a:
                    cf:ce:ba:a8:f6:63:d0:22:f7:ef:8a:12:85:8b:4a:
                    57:ee:09:34:c7:3a:3f:1b:0d:58:20:91:50:11:61:
                    46:28:4d:e6:0e:1d:6d:e4:58:ea:43:80:6a:a3:13:
                    19:97:fd:05:f7:72:09:43:d5:08:aa:4d:76:8b:c6:
                    76:1e:8e:5d:35:f1:30:8a:c7:41:01:7b:7a:4a:22:
                    10:44:a9:60:71:0d:36:38:2b:6b:41:0e:f1:ec:28:
                    ed:c6:07:74:8b:78:b1:d5:0d:b9:04:aa:47:46:a2:
                    2c:69:11:0a:98:eb:5d:af:fe:64:0b:b5:58:ea:86:
                    0c:f5:15:5d:ad:17:62:cf:e3:65:8e:fc:28:2e:09:
                    70:ff:60:ee:ac:cb:cd:96:63:c5:a7:35:1e:d3:53:
                    4c:c5:17:43:48:60:b2:98:ad:3c:49:72:e8:13:34:
                    ca:ab:97:ed:15:a6:1e:85:9a:ab:23:2f:a4:36:6b:
                    f5:72:3b:39:dc:25:fe:19:da:cb:52:02:64:5f:60:
                    fc:d2:f0:52:77:27:21:fd:72:37:98:55:61:2e:61:
                    87:1b:80:72:f2:a3:2a:ce:bf:58:ef:f6:09:8e:ba:
                    ae:be:35:5a:1d:ca:70:c7:3d:72:6b:11:c2:c0:88:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:0F:37:C6:40:3B:BA:DE:CD:D4:34:DB:0F:F9:64:34:43:47:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.42.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:06:15:df:d9:46:8d:c1:5f:e1:0a:3a:d4:47:35:2f:b5:6d:
         f9:5a:5d:18:0e:ee:9f:08:51:53:06:a7:23:04:29:23:1c:3e:
         7a:7b:51:ea:9e:32:b6:03:f8:b4:a9:0f:84:89:5c:07:35:54:
         70:73:e2:67:b6:5f:38:26:02:2d:c7:22:61:e2:a4:25:4a:ee:
         50:d8:e9:f5:68:18:09:ac:8c:64:aa:55:62:29:66:d8:20:06:
         0c:f5:0a:88:00:4b:ff:42:11:f6:77:63:b1:31:11:c5:0d:62:
         d7:03:14:48:c7:18:04:a8:19:bf:7f:ca:1a:c1:ce:31:7d:b3:
         33:35:56:fc:e4:01:87:47:89:8b:fe:af:f9:56:fa:29:b2:a9:
         06:67:13:b6:f2:06:c6:21:99:c0:5d:c2:f9:a4:50:2f:3d:36:
         62:7f:30:3a:df:c7:a9:86:dc:6c:70:f9:a2:17:69:85:2e:a7:
         75:5b:d4:04:f7:63:97:ec:a6:83:4b:39:7e:71:e5:7b:1d:01:
         e1:76:28:35:09:ad:d1:d4:7c:22:f9:f6:92:32:e2:b6:40:9f:
         5b:eb:e4:6d:9a:74:df:02:5a:c4:08:a3:b7:e0:d6:b5:b6:95:
         11:2e:65:34:06:00:68:ec:e8:ac:89:dc:e3:fc:d9:67:53:95:
         30:de:ef:90
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOiLx636YiGSLhPXoDbe/lakaEfUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE4MDAwMDAwWhcNMjUwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDFiNmZiZmYxODJjM2NmNDE1YzcwOTdhOWNhOTFlZWNi
YmMyODM2OWI1NGVkZTIyN2U1MTc4NzdjZGE3YjhhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWkTIcgRMJ7Mae/+Hwes/Ouqj2Y9Ai9++KEoWLSlfuCTTH
Oj8bDVggkVARYUYoTeYOHW3kWOpDgGqjExmX/QX3cglD1QiqTXaLxnYejl018TCK
x0EBe3pKIhBEqWBxDTY4K2tBDvHsKO3GB3SLeLHVDbkEqkdGoixpEQqY612v/mQL
tVjqhgz1FV2tF2LP42WO/CguCXD/YO6sy82WY8WnNR7TU0zFF0NIYLKYrTxJcugT
NMqrl+0Vph6FmqsjL6Q2a/VyOzncJf4Z2stSAmRfYPzS8FJ3JyH9cjeYVWEuYYcb
gHLyoyrOv1jv9gmOuq6+NVodynDHPXJrEcLAiEJTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUk2EPN8ZAO7rezdQ02w/5ZDRDR+0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU3NjRjNWY2LTlmZTYtNDZjNS1iMWEwLTI2OGNkNzY2OTJmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCZKjANBgkqhkiG9w0BAQsFAAOCAQEAVgYV39lGjcFf4Qo61Ec1L7Vt+Vpd
GA7unwhRUwanIwQpIxw+entR6p4ytgP4tKkPhIlcBzVUcHPiZ7ZfOCYCLcciYeKk
JUruUNjp9WgYCayMZKpVYilm2CAGDPUKiABL/0IR9ndjsTERxQ1i1wMUSMcYBKgZ
v3/KGsHOMX2zMzVW/OQBh0eJi/6v+Vb6KbKpBmcTtvIGxiGZwF3C+aRQLz02Yn8w
Ot/HqYbcbHD5ohdphS6ndVvUBPdjl+ymg0s5fnHlex0B4XYoNQmt0dR8Ivn2kjLi
tkCfW+vkbZp03wJaxAijt+DWtbaVES5lNAYAaOzorInc4/zZZ1OVMN7vkA==
-----END CERTIFICATE-----