Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa
File:                     8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa (raw, json)
Hash identifier:          yiVcHgKXyEPS1eyVpfwmy/9zQo1FPrOC4Tyt+4akYlM=
Subject key identifier:   00:3B:F1:88:C5:58:7F:5E:0E:F6:0F:52:90:1B:F9:64:86:88:7C:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A07AE3EAFF9DBFAB571C08F734EC0F556BCD533
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.60.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:07:ae:3e:af:f9:db:fa:b5:71:c0:8f:73:4e:c0:f5:56:bc:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=10dfa3e69ba299296d0335253af5cd41d5fb51f7b82d1ef2c82798cf0bbdf667, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:52:23:f0:b6:41:82:2e:9f:76:0e:4d:d3:
                    9f:a4:b6:62:55:fb:50:fe:c7:b1:88:e3:b6:60:7f:
                    55:01:cf:4d:a4:17:63:00:63:ab:5b:19:14:c5:23:
                    a9:0d:aa:53:38:86:73:9f:c3:93:4e:97:84:12:a3:
                    8b:a7:d7:45:f6:c6:60:39:63:b2:4e:85:4c:d4:75:
                    fa:93:bf:3a:b8:e7:aa:79:53:27:f0:4c:63:b1:31:
                    d8:91:5a:24:1a:b0:0c:f4:c0:67:2c:d8:13:e9:d9:
                    20:75:64:fd:cd:78:09:e0:da:04:10:62:82:5c:49:
                    15:49:f4:de:e5:f7:9d:8b:c6:6c:b5:6d:a9:b2:e6:
                    30:70:f2:e3:ed:5d:8a:c0:b8:b4:e5:18:5b:bd:77:
                    c9:76:45:06:32:3f:16:93:26:1e:7c:c7:03:13:e7:
                    6c:d8:a1:85:1b:4b:6b:88:95:66:c0:27:ee:f2:18:
                    f2:20:07:12:e4:2c:35:21:2b:5b:ec:c0:cc:34:5d:
                    c2:dc:86:49:23:f5:b0:17:de:05:e6:bf:96:98:34:
                    35:3a:59:07:e9:81:32:31:75:f2:65:37:c9:91:28:
                    8e:98:8c:56:81:f9:3f:1b:8a:90:bc:fa:af:d8:3e:
                    e1:65:1a:58:6f:75:ac:53:c5:eb:96:35:41:8f:fb:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:F1:88:C5:58:7F:5E:0E:F6:0F:52:90:1B:F9:64:86:88:7C:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d01273a-91bf-43dd-88d7-eda61e7b75f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.60.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c5:e0:b9:12:d9:08:2b:ba:90:56:a3:99:6b:d1:f8:2b:03:47:
         c0:d8:6d:82:f7:73:05:05:3a:fe:f1:5e:12:37:bb:b2:1a:dc:
         7c:ef:dc:a6:90:fc:b0:11:9b:16:8c:04:ea:ef:aa:13:98:fd:
         93:28:9c:26:13:9f:7c:df:95:8e:5e:34:1e:d5:09:5a:17:41:
         4a:66:66:64:df:f6:83:32:33:fd:33:cb:39:cf:63:c0:94:b9:
         7c:f0:d4:b1:d1:fb:22:46:97:1b:e5:67:b5:b8:6e:94:e4:b9:
         b8:83:e1:c7:10:d1:51:f4:eb:7b:74:a2:c7:cf:42:06:ad:b7:
         cd:e5:83:18:28:4f:e2:4c:1c:aa:b8:bd:ea:e0:b5:86:6c:3e:
         34:68:1b:f7:b2:ac:f5:dc:a0:7f:68:42:18:cb:46:e7:9f:9a:
         65:95:3a:35:a0:18:6b:4e:5a:52:1f:82:66:5d:6f:af:28:b5:
         ee:d9:a5:b9:97:29:93:fb:f0:fa:65:7d:67:ed:fa:00:b0:38:
         38:f3:cc:ed:13:da:50:f7:fb:b9:9e:f7:4f:9a:c4:a8:92:b2:
         bd:51:86:30:31:af:57:88:de:15:82:36:59:47:ca:4a:41:61:
         58:53:ee:64:5a:3e:58:bd:a8:37:94:b4:95:24:20:a5:ab:47:
         54:0d:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----