Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
File:                     7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa (raw, json)
Hash identifier:          f2skGwCaPIh+VFKoz/Ffdw1PgWk1ALyG+KHnu2kF1G0=
Subject key identifier:   F7:36:FD:F5:29:83:31:C9:E2:84:73:A2:6F:B1:58:E9:81:4F:BD:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C7C4A94E5B1C1F6FA59E52DC29B6EB58F309A1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:4a:94:e5:b1:c1:f6:fa:59:e5:2d:c2:9b:6e:b5:8f:30:9a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=c97608321aff4a99ee33701f6530d03f8686206ded303b3326e1d5e43782c8ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:9a:03:58:9f:16:bf:ce:36:d4:33:6f:64:
                    73:4d:4b:0a:b7:da:7b:bb:5b:12:de:e2:63:7b:7b:
                    50:89:23:11:15:6b:da:73:9d:bb:77:fb:48:24:5f:
                    00:03:55:64:84:04:36:41:0e:34:e6:14:5d:bf:21:
                    ff:cf:44:8a:78:42:56:ac:82:f1:05:3a:70:71:97:
                    a6:17:7c:d3:a6:55:7c:d4:3e:22:69:51:4f:a7:24:
                    e8:1b:3c:c5:43:9b:eb:cb:bf:09:34:b4:a6:4d:ad:
                    45:7e:d9:04:00:13:be:8c:c4:8e:53:2b:8c:9a:6c:
                    35:2c:47:0f:9e:83:69:8c:a9:e7:d9:95:56:99:7e:
                    bd:e2:06:6d:45:a6:55:c3:0c:b5:3b:e9:4b:7c:af:
                    61:cc:02:4f:c9:93:1e:4e:5b:f6:15:92:85:39:6e:
                    75:3b:97:a6:f0:2b:c2:cc:3f:64:88:b5:47:3f:8b:
                    9a:39:6c:e3:14:82:ac:32:47:82:c7:94:b0:c0:a1:
                    54:c2:32:2e:51:8c:1b:2f:d6:db:17:58:33:6f:3e:
                    20:86:30:6a:18:f9:c5:bc:25:3b:49:42:78:e7:06:
                    2a:d7:19:bf:15:41:82:da:bc:42:1e:76:0c:30:9f:
                    da:a9:45:dd:05:5d:0a:45:30:9d:10:69:ba:7e:03:
                    52:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:FD:F5:29:83:31:C9:E2:84:73:A2:6F:B1:58:E9:81:4F:BD:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bfdfc37-13e7-4b3d-b083-7c1d8cf07ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:23:9f:85:68:fb:41:52:12:70:6b:96:57:65:6e:d8:a5:f8:
         37:cf:65:ae:01:1f:df:a2:56:a4:b9:c5:2f:a1:0a:69:e5:75:
         9d:ec:29:95:59:41:c7:4d:8c:88:25:0b:f8:a7:09:60:b4:44:
         b6:e5:a1:a5:60:41:89:5d:e4:6c:fd:64:2c:03:12:21:8c:11:
         c1:d3:a8:56:82:73:cd:f5:aa:a4:bc:e9:07:2d:27:a7:bf:e8:
         ef:89:d9:5d:ff:b6:77:87:1e:56:21:fe:ce:44:19:d3:dc:44:
         20:d2:1b:98:41:8f:9b:e5:d6:07:01:12:65:3b:fc:9c:af:04:
         9e:1c:7e:5a:bb:73:9b:96:80:7b:2b:ac:12:71:96:ee:c3:3e:
         f1:ae:a5:96:79:66:81:6c:a8:28:c4:24:14:0e:b8:e8:b8:03:
         32:27:cf:d6:c7:e6:f0:f6:35:5b:74:88:3d:ff:dd:c7:03:5e:
         82:e7:f0:22:70:1b:3e:49:c0:10:5a:9c:d1:f7:a6:89:f2:fb:
         70:0f:23:74:11:18:16:41:87:63:29:b9:c9:2c:e1:7a:52:08:
         75:a3:b5:13:aa:b2:7a:68:58:89:d2:b0:54:a8:71:9f:04:f3:
         5a:fc:9f:af:19:57:f3:7e:b1:96:1d:ed:a3:dc:0e:85:bc:17:
         7f:c4:b9:11
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTHxKlOWxwfb6WeUtwptutY8wmhwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTc2MDgzMjFhZmY0YTk5ZWUzMzcwMWY2NTMwZDAzZjg2
ODYyMDZkZWQzMDNiMzMyNmUxZDVlNDM3ODJjOGVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwYZoDWJ8Wv8421DNvZHNNSwq32nu7WxLe4mN7e1CJIxEV
a9pznbt3+0gkXwADVWSEBDZBDjTmFF2/If/PRIp4QlasgvEFOnBxl6YXfNOmVXzU
PiJpUU+nJOgbPMVDm+vLvwk0tKZNrUV+2QQAE76MxI5TK4yabDUsRw+eg2mMqefZ
lVaZfr3iBm1FplXDDLU76Ut8r2HMAk/Jkx5OW/YVkoU5bnU7l6bwK8LMP2SItUc/
i5o5bOMUgqwyR4LHlLDAoVTCMi5RjBsv1tsXWDNvPiCGMGoY+cW8JTtJQnjnBirX
Gb8VQYLavEIedgwwn9qpRd0FXQpFMJ0Qabp+A1IHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9zb99SmDMcnihHOib7FY6YFPvWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiZmRmYzM3LTEzZTctNGIzZC1iMDgzLTdjMWQ4Y2YwN2FkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQNTANBgkqhkiG9w0BAQsFAAOCAQEAySOfhWj7QVIScGuWV2Vu2KX4N89l
rgEf36JWpLnFL6EKaeV1newplVlBx02MiCUL+KcJYLREtuWhpWBBiV3kbP1kLAMS
IYwRwdOoVoJzzfWqpLzpBy0np7/o74nZXf+2d4ceViH+zkQZ09xEINIbmEGPm+XW
BwESZTv8nK8Enhx+Wrtzm5aAeyusEnGW7sM+8a6llnlmgWyoKMQkFA646LgDMifP
1sfm8PY1W3SIPf/dxwNegufwInAbPknAEFqc0femifL7cA8jdBEYFkGHYym5ySzh
elIIdaO1E6qyemhYidKwVKhxnwTzWvyfrxlX836xlh3to9wOhbwXf8S5EQ==
-----END CERTIFICATE-----