Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa
File:                     634e4c18-756f-434d-b58c-0c6f036067f6.roa (raw, json)
Hash identifier:          zUYUIkt+xu/DhxrSue7+9bO4CzKyBNpJKs+4R7xZcVA=
Subject key identifier:   CC:5B:70:88:BF:1B:8C:BA:30:57:D6:B6:0D:FC:6F:B2:BE:07:E1:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F06E6753287C7E744A6A67A09C72DB2C25E4C60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        162.250.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:e6:75:32:87:c7:e7:44:a6:a6:7a:09:c7:2d:b2:c2:5e:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=fdaaffc9e64994ec07101e06c20430168e6177044d477fe23c627856ca12968b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:bf:5c:85:01:c2:a9:25:f0:21:4d:a2:32:
                    4b:90:69:14:d3:76:f0:0f:aa:b8:94:17:9a:b9:61:
                    bd:58:d5:dd:0d:2a:e2:27:ad:a5:2f:c0:ee:b6:ce:
                    41:df:4b:50:d3:98:dc:f3:c6:45:07:06:2b:74:b7:
                    69:7c:d5:e5:d2:15:78:1c:c4:ab:d4:ed:a0:60:fa:
                    2d:7d:58:fa:41:f5:10:9a:c7:0d:c7:b7:a9:34:23:
                    19:22:cd:fe:3c:de:8f:33:9e:c4:db:03:97:6f:f8:
                    fd:d9:8c:35:a8:99:39:c9:d1:54:d3:dd:48:3d:e4:
                    ee:c0:74:a8:f3:4b:c6:94:a1:29:24:b3:8b:f1:72:
                    28:ed:bc:9d:79:74:a4:6e:c1:86:43:76:6d:94:b5:
                    ab:25:c2:5f:46:cf:a4:4c:a6:26:b5:27:a6:0b:04:
                    53:21:dc:b9:fe:7e:e3:61:a7:7c:bd:1e:0f:01:3d:
                    0e:ae:91:f9:a2:17:17:72:e6:e8:98:95:3d:53:d7:
                    1d:4a:c3:f5:7c:b7:83:06:74:bc:f0:f5:8f:69:e6:
                    23:f2:c1:c9:45:88:fe:d4:09:2f:8b:40:fb:09:99:
                    ea:9e:14:7f:0d:7a:33:a9:08:2b:09:5b:64:4d:6d:
                    2b:51:f6:22:eb:6e:78:a4:40:d6:1c:28:c4:bb:3d:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:70:88:BF:1B:8C:BA:30:57:D6:B6:0D:FC:6F:B2:BE:07:E1:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7e:27:26:38:65:9d:81:19:0f:dc:48:2c:53:4a:24:b0:50:
         ae:e9:74:6b:4e:61:32:07:9b:ba:7d:32:08:d7:f8:f1:a6:0c:
         e7:53:12:70:bc:20:1b:a1:6e:88:45:f6:11:ff:ae:72:6f:97:
         80:87:bb:91:c0:4c:6b:c1:33:53:c2:52:67:56:ce:5f:97:d5:
         24:f1:bb:25:e8:fa:0d:04:f6:eb:c0:66:94:7e:34:2a:b0:bc:
         58:b2:e6:4b:15:0b:ef:00:8a:e2:4c:8c:61:65:61:ac:5d:bb:
         14:25:73:c0:e8:a2:dd:2a:21:68:e7:26:99:28:8d:15:67:61:
         d8:90:58:9b:e6:3f:d5:7d:78:80:b3:e8:56:45:5a:75:25:97:
         05:7f:cf:45:d2:ba:c0:41:d8:1c:c8:52:5f:c8:f3:cd:2f:2a:
         07:ab:73:d5:46:ba:03:39:ef:02:ce:3e:0a:d7:e8:a7:ca:fc:
         37:c1:7e:81:bd:ab:64:f0:21:29:03:62:9b:6e:3e:d2:66:a7:
         11:77:b0:c5:93:c0:e5:9c:84:29:e3:ba:22:3c:f3:91:ea:78:
         a2:2d:bc:ea:35:b8:b1:f2:27:ed:f7:16:ad:a6:65:f1:c9:51:
         e9:a7:48:58:44:b3:9b:f8:87:9f:31:da:77:a7:c4:13:e1:46:
         e7:57:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----