Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
File:                     6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa (raw, json)
Hash identifier:          LvA/Yp9G3nifRzY3q4sE4VXLFCfWKTSgZHlZ/6EyTKI=
Subject key identifier:   4E:42:BA:FF:E7:8D:57:58:63:4B:E1:6C:AE:33:28:3D:5C:3D:F7:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55DCA07C0B3D760AB15052605FC8A20FC5CC0012
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:a0:7c:0b:3d:76:0a:b1:50:52:60:5f:c8:a2:0f:c5:cc:00:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=3660d4af3f284fd1fc8ec288b3ff5dd504a54d91067a95c0002116d1750fe8c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:66:2e:b7:31:be:fd:4f:de:7c:a9:58:58:
                    d2:6f:bd:84:05:ae:aa:95:cb:cd:9e:c3:12:9a:3e:
                    74:a9:b4:85:7b:8c:f4:92:ac:be:bb:d6:fe:ae:86:
                    60:9e:d6:76:80:4d:57:22:76:e6:22:ed:fc:9a:d0:
                    78:9f:b0:76:bd:5d:cb:1b:b5:62:12:35:06:93:76:
                    0b:3c:29:31:34:f8:a9:24:c4:4e:c9:5d:4f:c8:3d:
                    37:4d:f9:8e:54:9b:13:03:b4:7e:cb:f8:9e:45:66:
                    17:6b:3a:6e:28:f2:0b:a0:0a:d1:17:10:a8:ea:91:
                    db:bc:f6:5c:f8:9a:c2:b5:2e:14:4c:5d:e2:cc:6c:
                    b7:72:54:07:99:13:8d:48:79:01:de:c6:54:ab:74:
                    12:bb:12:97:39:77:c3:f1:c4:90:24:d8:66:69:21:
                    ad:99:8a:44:46:9e:2f:43:cc:a7:31:f6:6f:58:f1:
                    cc:b0:ff:34:d8:ec:c7:47:fd:5d:e2:49:ee:f9:71:
                    42:01:20:63:3c:81:62:25:6a:b9:60:f3:68:ae:4b:
                    fb:e4:c0:00:9f:a2:e4:5d:37:d2:0b:5b:dc:00:68:
                    d3:d3:b0:15:3d:93:84:bd:5c:47:67:8d:1d:b6:d0:
                    70:10:67:ab:ca:32:a4:ca:60:3a:61:66:c1:ea:e3:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:42:BA:FF:E7:8D:57:58:63:4B:E1:6C:AE:33:28:3D:5C:3D:F7:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:87:41:b4:41:25:66:69:23:32:19:46:c3:3c:f3:79:4b:75:
         9f:88:f4:20:84:8e:14:88:55:8e:b7:c4:9e:f5:6b:07:f4:cf:
         1d:48:29:3f:90:84:2a:0b:71:cf:79:2d:12:6a:f5:76:b9:97:
         3b:60:2e:d3:2b:fc:0f:61:b6:5e:f7:da:57:7f:9b:06:33:81:
         5d:43:c1:e1:33:d0:c8:bb:a7:28:4f:c2:43:e4:c7:1d:b3:6a:
         12:f5:50:f0:4f:a6:4e:3f:57:50:22:ac:c9:f0:2f:cc:8b:6a:
         3f:20:64:30:eb:72:6f:17:8f:af:45:e8:b9:bc:23:ce:e2:5d:
         6b:79:e1:1b:61:d1:7f:66:07:a2:97:c9:e0:4a:1c:11:93:ad:
         3e:a3:36:58:96:22:bf:b7:73:67:95:5a:9f:30:2c:62:5a:92:
         6d:22:31:2c:3b:97:96:5a:61:d3:6f:c4:e3:c7:76:d6:f9:1f:
         99:4a:d8:33:17:4b:00:89:3d:b9:1a:3d:d4:95:31:74:2c:fe:
         4e:b5:fe:77:92:48:e2:32:18:a5:61:24:a9:fc:51:88:76:f2:
         f2:74:4c:2f:0a:b0:92:2b:48:8d:2b:85:d3:b4:03:32:a9:39:
         4b:27:44:3a:d8:b3:4e:70:e9:92:da:c5:21:f6:aa:14:cf:9c:
         61:09:f1:b3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVdygfAs9dgqxUFJgX8iiD8XMABIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjYwZDRhZjNmMjg0ZmQxZmM4ZWMyODhiM2ZmNWRkNTA0
YTU0ZDkxMDY3YTk1YzAwMDIxMTZkMTc1MGZlOGM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpvGYutzG+/U/efKlYWNJvvYQFrqqVy82ewxKaPnSptIV7
jPSSrL671v6uhmCe1naATVciduYi7fya0HifsHa9XcsbtWISNQaTdgs8KTE0+Kkk
xE7JXU/IPTdN+Y5UmxMDtH7L+J5FZhdrOm4o8gugCtEXEKjqkdu89lz4msK1LhRM
XeLMbLdyVAeZE41IeQHexlSrdBK7Epc5d8PxxJAk2GZpIa2ZikRGni9DzKcx9m9Y
8cyw/zTY7MdH/V3iSe75cUIBIGM8gWIlarlg82iuS/vkwACfouRdN9ILW9wAaNPT
sBU9k4S9XEdnjR220HAQZ6vKMqTKYDphZsHq4wj/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTkK6/+eNV1hjS+FsrjMoPVw99+AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZiMWZmZTg1LWVkMzUtNGE2NC04YzIxLWM1YWM5NjdiZjFiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHM7IIwDQYJKoZIhvcNAQELBQADggEBADOHQbRBJWZpIzIZRsM883lLdZ+I
9CCEjhSIVY63xJ71awf0zx1IKT+QhCoLcc95LRJq9Xa5lztgLtMr/A9htl732ld/
mwYzgV1DweEz0Mi7pyhPwkPkxx2zahL1UPBPpk4/V1AirMnwL8yLaj8gZDDrcm8X
j69F6Lm8I87iXWt54Rth0X9mB6KXyeBKHBGTrT6jNliWIr+3c2eVWp8wLGJakm0i
MSw7l5ZaYdNvxOPHdtb5H5lK2DMXSwCJPbkaPdSVMXQs/k61/neSSOIyGKVhJKn8
UYh28vJ0TC8KsJIrSI0rhdO0AzKpOUsnRDrYs05w6ZLaxSH2qhTPnGEJ8bM=
-----END CERTIFICATE-----