Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa
File:                     70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa (raw, json)
Hash identifier:          C5tgJPlV5C4QOQ8OonjeFyrjGEUVb2G1YZddafYxe20=
Subject key identifier:   6F:E2:FD:8D:95:24:40:70:67:D2:EF:ED:5E:B7:DC:EB:A9:3A:67:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C398AE16F3C173174B165313C6AAEB47A80BCC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.182.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:8a:e1:6f:3c:17:31:74:b1:65:31:3c:6a:ae:b4:7a:80:bc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=98ad736d254b6535606bbc9d15ad3ff075d23aad7cf8666094a6527fb1815e76, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:00:5d:e6:b9:d9:89:2a:ef:a8:33:5f:49:
                    37:a2:00:60:71:2c:6b:fd:78:5c:0c:26:35:0b:96:
                    da:63:f0:98:3a:c9:76:dc:38:8d:c7:4a:70:8f:43:
                    7b:7c:4f:26:75:af:6f:55:5e:17:17:6e:20:30:9f:
                    09:68:bd:4d:b7:cd:cd:d8:3b:09:dd:93:57:33:0b:
                    19:34:69:c8:a9:1e:b4:bf:8a:03:7e:d4:d5:d3:33:
                    49:21:86:5d:e0:8f:f2:01:dd:1f:64:d5:05:fc:19:
                    92:1f:70:49:1e:87:2c:1d:33:87:1f:b8:69:83:1b:
                    bd:aa:af:ae:78:e6:60:a7:77:85:09:6a:86:98:b0:
                    fa:2c:e4:a3:2c:19:f2:4e:3f:3d:9d:58:41:a8:32:
                    72:39:cf:ef:1a:4f:e0:11:49:9e:6e:83:aa:9a:e8:
                    fc:28:c4:35:8e:3e:d8:92:5c:81:67:d0:87:1e:85:
                    d1:05:66:1b:5c:d0:8a:0d:e4:94:c1:48:fc:85:9c:
                    85:aa:ff:2e:2c:f7:8a:47:7a:1a:23:ab:f4:d1:8c:
                    2b:7b:7f:98:ef:8a:f9:82:4c:ff:01:0d:30:85:e5:
                    f9:15:6b:f8:70:15:2a:45:c4:02:50:67:04:c3:dd:
                    d1:8f:e8:79:ab:0e:ce:55:26:70:02:c0:8f:3c:ba:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:FD:8D:95:24:40:70:67:D2:EF:ED:5E:B7:DC:EB:A9:3A:67:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70aa4285-cbd0-450f-b52c-a70ba1e394d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:be:99:c1:80:d2:e1:f2:9a:fc:71:36:d6:30:0a:52:94:
         f2:84:23:3e:b3:32:f7:a3:ef:49:c9:4d:45:d7:25:36:eb:19:
         65:f4:12:2f:78:28:4b:9a:40:5b:6e:a4:e2:7e:71:60:a8:f0:
         ff:30:d9:d6:b8:85:99:05:52:9c:38:a2:b5:fd:e8:3c:f6:c6:
         6d:45:38:e8:7f:2e:9b:e9:2f:0b:e4:e0:b4:1f:a0:2e:b6:0b:
         87:9c:c6:5b:c3:ec:a1:94:dc:cf:d7:91:db:c6:d4:65:d1:3c:
         41:02:0f:2b:26:62:05:a1:a2:cc:02:3c:a8:6f:c4:7d:dc:02:
         43:43:4e:4a:0b:a2:51:b6:94:26:3c:f4:ca:df:69:cc:cc:e5:
         2f:f1:54:ae:55:42:4c:a9:dc:a3:c9:b7:db:5d:f0:c2:3b:b4:
         ce:cc:11:13:eb:9b:28:a3:60:af:4f:2d:c8:36:9f:b7:45:8e:
         f0:d3:3c:47:13:34:8e:04:8b:ed:62:aa:5e:74:12:10:5b:8d:
         6a:c2:b6:bf:d7:db:da:0a:d3:9b:04:08:88:18:fc:17:eb:c1:
         a7:9a:11:d2:ac:47:6f:d7:4d:92:f9:f5:7f:59:d6:82:49:0f:
         fe:84:e9:9b:1e:ae:df:da:df:5c:84:c7:7c:38:ea:d6:7a:f2:
         57:56:ad:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfDmK4W88FzF0sWUxPGqutHqAvMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGFkNzM2ZDI1NGI2NTM1NjA2YmJjOWQxNWFkM2ZmMDc1
ZDIzYWFkN2NmODY2NjA5NGE2NTI3ZmIxODE1ZTc2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhbABd5rnZiSrvqDNfSTeiAGBxLGv9eFwMJjULltpj8Jg6
yXbcOI3HSnCPQ3t8TyZ1r29VXhcXbiAwnwlovU23zc3YOwndk1czCxk0acipHrS/
igN+1NXTM0khhl3gj/IB3R9k1QX8GZIfcEkehywdM4cfuGmDG72qr6545mCnd4UJ
aoaYsPos5KMsGfJOPz2dWEGoMnI5z+8aT+ARSZ5ug6qa6PwoxDWOPtiSXIFn0Ice
hdEFZhtc0IoN5JTBSPyFnIWq/y4s94pHehojq/TRjCt7f5jvivmCTP8BDTCF5fkV
a/hwFSpFxAJQZwTD3dGP6HmrDs5VJnACwI88uup/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUb+L9jZUkQHBn0u/tXrfc66k6Z5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcwYWE0Mjg1LWNiZDAtNDUwZi1iNTJjLWE3MGJhMWUzOTRkMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALYtugwDQYJKoZIhvcNAQELBQADggEBAHrfvpnBgNLh8pr8cTbWMApSlPKE
Iz6zMvej70nJTUXXJTbrGWX0Ei94KEuaQFtupOJ+cWCo8P8w2da4hZkFUpw4orX9
6Dz2xm1FOOh/LpvpLwvk4LQfoC62C4ecxlvD7KGU3M/XkdvG1GXRPEECDysmYgWh
oswCPKhvxH3cAkNDTkoLolG2lCY89MrfaczM5S/xVK5VQkyp3KPJt9td8MI7tM7M
ERPrmyijYK9PLcg2n7dFjvDTPEcTNI4Ei+1iql50EhBbjWrCtr/X29oK05sECIgY
/BfrwaeaEdKsR2/XTZL59X9Z1oJJD/6E6Zsert/a31yEx3w46tZ68ldWrQ0=
-----END CERTIFICATE-----