Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa
File:                     88e587d9-8e06-45b7-b934-26b4ec796dde.roa (raw, json)
Hash identifier:          gnq6Vuy42y95icBikpROItIazUy7p8z0+beW9S2y09U=
Subject key identifier:   04:16:21:A8:9A:2E:99:98:EF:73:3B:21:82:E3:C8:A4:9C:E2:F8:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14DF4EC9F59F45B11AD422F3D45320E9ACD45788
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:5040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:df:4e:c9:f5:9f:45:b1:1a:d4:22:f3:d4:53:20:e9:ac:d4:57:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c75928f180716415bd392c547ff8939c9f2fa13452a38132eab2bfeffa6c9805, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:68:ad:42:fb:43:2f:03:c9:f7:a7:a3:5d:
                    34:bc:a5:a8:68:77:d8:1a:0a:85:56:70:8f:95:4e:
                    3a:23:7d:97:9a:19:14:a8:fe:be:15:c4:cc:60:54:
                    3f:31:a1:a2:27:2f:78:50:c8:5a:c2:8a:ef:f8:b0:
                    a8:e8:15:ae:1e:f3:9a:26:75:87:76:1f:d3:5a:b6:
                    49:aa:75:d8:5e:21:9c:9a:14:01:b9:6e:1f:35:7e:
                    9a:c2:d2:60:f5:92:4d:7b:c2:25:02:1d:99:54:2e:
                    92:18:81:85:a7:56:8a:4e:56:8b:53:bb:a5:bc:0b:
                    0b:0e:f7:34:bd:06:88:a4:eb:35:d6:35:7a:e1:bf:
                    4b:3a:54:65:f6:30:5d:ff:00:39:ee:7b:68:21:4f:
                    84:e6:70:06:38:92:5d:6e:10:4a:5d:35:84:80:cf:
                    54:54:71:cf:b5:4b:01:a2:4b:1a:67:a0:51:fd:83:
                    67:7c:c6:7a:20:46:b0:09:89:63:2a:57:39:b5:d0:
                    c4:eb:7c:ec:d0:3d:e4:b1:4e:32:94:3e:32:4f:ea:
                    13:d2:47:db:92:60:ec:d4:d3:92:36:40:53:0a:d2:
                    6c:13:ed:e3:ab:8e:15:14:d1:3a:fa:99:35:62:80:
                    f1:c5:34:e9:a5:6a:07:c3:f7:92:e9:95:25:21:b1:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:21:A8:9A:2E:99:98:EF:73:3B:21:82:E3:C8:A4:9C:E2:F8:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e587d9-8e06-45b7-b934-26b4ec796dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:86:08:79:7e:70:6a:47:78:57:1b:06:23:d3:7d:40:d9:
         b3:db:6e:3d:19:db:bb:3a:f7:fa:53:2e:63:cb:46:b3:3f:31:
         2e:ac:58:22:25:67:ce:2a:0e:02:62:ee:6a:c0:d8:3a:76:71:
         9e:bd:f5:77:6c:38:cb:db:66:59:56:bf:49:9a:1b:dc:bf:b7:
         60:28:74:b8:72:68:8e:60:d5:f2:c8:8a:05:64:f4:a2:87:87:
         c7:60:85:a5:26:af:e1:5d:ba:2d:e0:a1:ef:5c:95:6c:01:12:
         16:f0:95:b4:f0:f6:cb:76:a0:25:d5:df:84:63:4b:3b:e4:a1:
         c5:c1:3f:c1:a9:55:2f:4f:dd:f2:d1:4e:80:5a:e5:93:e7:97:
         16:2c:18:4e:42:da:51:a4:21:91:60:97:70:c4:a4:7d:58:f6:
         db:3c:c6:e6:62:dd:3d:a3:e8:28:58:30:13:7f:12:23:93:f8:
         69:29:f1:18:5a:aa:84:5a:9f:04:b2:3d:3e:88:3f:3c:eb:28:
         93:b1:a3:0d:d6:f7:7b:e4:cf:ce:0f:22:b5:d8:64:22:8e:58:
         8c:d4:33:e6:7d:91:f6:da:0b:2a:3e:36:40:81:1b:ea:c2:8e:
         e4:80:34:44:85:25:b6:18:58:f7:79:79:89:4e:2c:63:bb:e6:
         2f:34:a4:dd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFN9OyfWfRbEa1CLz1FMg6azUV4gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzU5MjhmMTgwNzE2NDE1YmQzOTJjNTQ3ZmY4OTM5Yzlm
MmZhMTM0NTJhMzgxMzJlYWIyYmZlZmZhNmM5ODA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzJWitQvtDLwPJ96ejXTS8pahod9gaCoVWcI+VTjojfZea
GRSo/r4VxMxgVD8xoaInL3hQyFrCiu/4sKjoFa4e85omdYd2H9NatkmqddheIZya
FAG5bh81fprC0mD1kk17wiUCHZlULpIYgYWnVopOVotTu6W8CwsO9zS9Boik6zXW
NXrhv0s6VGX2MF3/ADnue2ghT4TmcAY4kl1uEEpdNYSAz1RUcc+1SwGiSxpnoFH9
g2d8xnogRrAJiWMqVzm10MTrfOzQPeSxTjKUPjJP6hPSR9uSYOzU05I2QFMK0mwT
7eOrjhUU0Tr6mTVigPHFNOmlagfD95LplSUhsUqHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBBYhqJoumZjvczshguPIpJzi+DMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4ZTU4N2Q5LThlMDYtNDViNy1iOTM0LTI2YjRlYzc5NmRkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yUEAwDQYJKoZIhvcNAQELBQADggEBAH1ghgh5fnBqR3hXGwYj031A
2bPbbj0Z27s69/pTLmPLRrM/MS6sWCIlZ84qDgJi7mrA2Dp2cZ699XdsOMvbZllW
v0maG9y/t2AodLhyaI5g1fLIigVk9KKHh8dghaUmr+Fdui3goe9clWwBEhbwlbTw
9st2oCXV34RjSzvkocXBP8GpVS9P3fLRToBa5ZPnlxYsGE5C2lGkIZFgl3DEpH1Y
9ts8xuZi3T2j6ChYMBN/EiOT+Gkp8RhaqoRanwSyPT6IPzzrKJOxow3W93vkz84P
IrXYZCKOWIzUM+Z9kfbaCyo+NkCBG+rCjuSANESFJbYYWPd5eYlOLGO75i80pN0=
-----END CERTIFICATE-----