Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa
File:                     5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa (raw, json)
Hash identifier:          RiL6MSdp7xaJyPFoNMtXv7n+Xy0WK0ZyamRVgbSgCyc=
Subject key identifier:   44:0E:DA:13:87:02:EB:19:3F:0B:88:EB:35:8A:15:D2:12:8B:1D:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D175B034366CD51E691E5EEE5D99253BF9BA92E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffd:84af::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:17:5b:03:43:66:cd:51:e6:91:e5:ee:e5:d9:92:53:bf:9b:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=a681d17109eeef3c5e884ce5f811909c891c0a05d798f1cbe0a55968a8ed9917, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:45:13:ae:77:5e:e8:04:3d:5a:14:d8:a0:
                    71:f7:b0:9b:31:16:03:b1:72:d1:52:72:c3:99:74:
                    08:a4:e0:f3:bc:57:eb:70:a0:30:69:2c:0d:ff:85:
                    17:f6:0e:7b:12:a2:d0:0e:34:62:27:48:79:93:e2:
                    ed:6b:e3:f9:26:87:5d:49:97:e9:91:ad:59:1c:1c:
                    65:5d:d2:1b:fb:78:5f:d1:33:b9:6b:5d:59:63:ca:
                    9b:6c:85:ba:0f:81:ff:a1:19:a6:ad:8a:8a:57:79:
                    84:89:a9:36:c5:c2:cb:1a:11:54:73:97:d9:0b:2b:
                    81:f0:e4:93:c8:0e:2c:51:8b:47:4a:ec:dd:1e:c1:
                    37:3b:0c:e7:f5:68:62:7c:2f:c7:3c:25:1f:45:ef:
                    94:06:b0:b3:71:5e:ca:ad:7a:b4:d0:c0:d9:10:19:
                    e8:61:a6:ca:f3:94:c8:57:1d:e7:35:01:cf:ad:ad:
                    ef:81:14:11:e7:c2:22:c2:0c:b3:c3:d3:56:5b:76:
                    e1:a4:81:16:e6:cb:9d:d0:ae:21:c5:d3:a2:0a:dc:
                    b9:3d:26:c4:d1:97:0e:46:8f:4f:53:4c:2e:ca:27:
                    4a:36:f4:17:5e:fb:7b:71:4e:3d:77:50:08:0d:d9:
                    0f:70:29:6a:2e:27:66:ee:ca:38:b9:e3:38:81:ad:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:DA:13:87:02:EB:19:3F:0B:88:EB:35:8A:15:D2:12:8B:1D:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:84af::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:2e:85:04:a6:89:7d:9c:c5:28:55:9a:d2:08:93:e1:4e:
         32:f7:e9:77:f8:61:c1:3f:e6:17:db:9d:c7:f2:65:a6:d5:3c:
         29:14:66:52:13:d3:84:7b:cc:6d:6c:3c:a0:02:ca:6b:75:e2:
         34:5b:af:8d:68:ce:ef:e0:02:ee:59:2c:d3:b4:f6:ab:6d:ec:
         41:ca:85:23:13:d3:68:17:bd:6e:3a:6e:39:51:3c:21:a6:9c:
         0f:b3:35:ec:4b:0f:e2:dc:85:c7:cc:3c:51:6a:fd:69:05:8b:
         76:cf:9b:8d:ba:a7:c7:56:e6:dc:4a:7c:78:b2:3e:de:1b:27:
         a4:a4:5e:b8:ca:ae:b6:b9:ba:f3:4c:77:f1:83:cf:22:a5:35:
         a8:35:84:44:70:36:b3:85:7d:5c:4d:11:83:cb:c6:f3:30:1c:
         ea:f1:3c:e2:33:0a:23:2a:ea:bc:0c:12:4a:69:eb:0c:02:95:
         74:86:c8:6a:15:ae:28:62:8b:4b:20:a8:69:a8:7c:03:0b:6a:
         f1:4c:61:4e:61:40:4c:97:8e:eb:1f:f3:16:c3:67:45:59:96:
         57:dc:cc:9d:19:16:7d:da:d0:7c:27:e5:63:24:e8:46:cf:6d:
         b3:a2:0a:2c:ff:8e:ce:72:33:ba:dd:84:1e:8a:eb:8b:70:ce:
         4f:8f:2f:b2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfRdbA0NmzVHmkeXu5dmSU7+bqS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE4MDAwMDAwWhcNMjUwMjIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjgxZDE3MTA5ZWVlZjNjNWU4ODRjZTVmODExOTA5Yzg5
MWMwYTA1ZDc5OGYxY2JlMGE1NTk2OGE4ZWQ5OTE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeF0UTrnde6AQ9WhTYoHH3sJsxFgOxctFScsOZdAik4PO8
V+twoDBpLA3/hRf2DnsSotAONGInSHmT4u1r4/kmh11Jl+mRrVkcHGVd0hv7eF/R
M7lrXVljyptshboPgf+hGaatiopXeYSJqTbFwssaEVRzl9kLK4Hw5JPIDixRi0dK
7N0ewTc7DOf1aGJ8L8c8JR9F75QGsLNxXsqterTQwNkQGehhpsrzlMhXHec1Ac+t
re+BFBHnwiLCDLPD01ZbduGkgRbmy53QriHF06IK3Lk9JsTRlw5Gj09TTC7KJ0o2
9Bde+3txTj13UAgN2Q9wKWouJ2buyji54ziBrRITAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURA7aE4cC6xk/C4jrNYoV0hKLHSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkNzJkYmJlLTJiODgtNDhhMS04MWY1LWI1NTA4MmFhODk0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/9hK8wDQYJKoZIhvcNAQELBQADggEBAGTxLoUEpol9nMUoVZrSCJPh
TjL36Xf4YcE/5hfbncfyZabVPCkUZlIT04R7zG1sPKACymt14jRbr41ozu/gAu5Z
LNO09qtt7EHKhSMT02gXvW46bjlRPCGmnA+zNexLD+LchcfMPFFq/WkFi3bPm426
p8dW5txKfHiyPt4bJ6SkXrjKrra5uvNMd/GDzyKlNag1hERwNrOFfVxNEYPLxvMw
HOrxPOIzCiMq6rwMEkpp6wwClXSGyGoVrihii0sgqGmofAMLavFMYU5hQEyXjusf
8xbDZ0VZllfczJ0ZFn3a0Hwn5WMk6EbPbbOiCiz/js5yM7rdhB6K64twzk+PL7I=
-----END CERTIFICATE-----