Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
File:                     8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa (raw, json)
Hash identifier:          rMMRXy3zndko/piDFfx4U9bkJKfMjjkN/HP/va1rh+M=
Subject key identifier:   69:CD:79:0E:CA:FE:EE:2B:42:BA:D7:6D:38:04:AB:C6:52:0E:6D:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       68812C72893F00B8C2D04F9AC7E637FCA5EA68A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
Signing time:             Wed 22 Jan 2025 00:00:00 +0000
ROA not before:           Wed 22 Jan 2025 00:00:00 +0000
ROA not after:            Wed 26 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        158.80.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:81:2c:72:89:3f:00:b8:c2:d0:4f:9a:c7:e6:37:fc:a5:ea:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 22 00:00:00 2025 GMT
            Not After : Feb 26 23:59:59 2025 GMT
        Subject: serialNumber=4d45a71841b84f2dd0e3c32849d36f8cec17ee533f892f1db7b48d89d3d87074, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:08:7c:cb:95:99:28:a3:9b:2a:98:c1:a0:
                    2c:25:2f:98:d7:a2:23:3b:af:08:f4:b8:ce:0e:c8:
                    fa:d4:a8:69:bc:fe:b2:69:d8:22:cc:a7:38:0a:5e:
                    19:f7:1a:63:dc:b0:4f:12:b3:f2:cb:63:d4:ea:37:
                    0d:15:5e:c1:19:27:3e:86:ab:fd:92:2d:02:69:29:
                    d7:8b:bd:9d:6f:88:84:8c:f1:e6:ba:35:d9:99:ae:
                    5d:d5:98:c6:6e:ab:dc:07:b3:88:fd:a8:3d:36:1f:
                    fb:d8:92:e8:8e:7c:8d:0c:ad:83:16:0e:16:3e:3f:
                    45:ca:1e:64:10:ac:44:95:44:9e:1d:42:78:bb:e0:
                    e9:51:e0:28:eb:3d:98:28:05:9f:48:a8:43:76:35:
                    27:a0:e2:a4:0b:4a:02:9c:53:7d:03:f7:5e:4e:ef:
                    e5:34:fa:00:74:ea:a5:5a:01:d5:5c:4c:9c:e9:5a:
                    a7:ea:80:a5:d3:10:d2:8b:b3:5d:b5:ee:9f:d2:73:
                    43:bb:37:8d:86:09:5d:44:b4:90:f1:c3:48:21:ef:
                    9f:06:84:50:17:f0:f0:7f:87:46:68:ab:49:a6:26:
                    43:4b:b1:54:81:96:f5:cc:f2:12:55:44:6c:c3:72:
                    c6:bf:04:05:c3:93:11:77:18:2d:dd:02:6e:e6:6c:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:79:0E:CA:FE:EE:2B:42:BA:D7:6D:38:04:AB:C6:52:0E:6D:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:99:19:9e:cd:aa:10:09:38:3b:44:f6:12:52:63:b5:5b:23:
         c2:94:6d:8c:21:52:92:d8:ba:f2:e2:34:5f:2b:1a:1b:f9:49:
         5f:f5:75:b0:3c:f0:c5:5f:1f:63:34:bf:f4:ae:2f:01:0e:c9:
         01:57:c1:c4:ba:9a:e6:7b:bb:17:64:49:70:75:bf:e7:a4:2c:
         77:16:b1:fe:54:38:b4:0a:fc:b5:09:8c:a3:fb:77:84:02:12:
         6e:e7:42:e7:82:71:80:11:20:b1:51:ea:84:29:db:a8:21:18:
         0d:e9:43:dd:00:45:c2:23:72:43:25:20:e0:69:9a:4a:eb:c4:
         02:c3:69:0b:63:21:b1:77:05:f6:35:63:09:31:56:83:3e:3b:
         e6:8c:0e:89:9b:3d:64:b2:59:ff:a6:ae:07:84:72:58:99:58:
         a0:e4:a9:b1:66:b4:60:ca:0d:5b:e3:71:c0:1b:43:91:c6:9b:
         cf:7d:a2:b2:b0:ef:24:75:16:29:e7:fb:c0:3b:71:27:74:66:
         d7:85:69:69:8b:8f:7f:12:e7:3b:e3:84:df:89:a9:df:02:93:
         f3:d8:90:fc:ee:95:7f:61:36:cb:7e:91:20:5f:a7:48:37:ac:
         97:23:6a:55:45:36:e5:62:bf:25:68:50:b0:29:f9:ac:3b:44:
         8d:07:fc:11
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaIEscok/ALjC0E+ax+Y3/KXqaKUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIyMDAwMDAwWhcNMjUwMjI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZDQ1YTcxODQxYjg0ZjJkZDBlM2MzMjg0OWQzNmY4Y2Vj
MTdlZTUzM2Y4OTJmMWRiN2I0OGQ4OWQzZDg3MDc0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJMwh8y5WZKKObKpjBoCwlL5jXoiM7rwj0uM4OyPrUqGm8
/rJp2CLMpzgKXhn3GmPcsE8Ss/LLY9TqNw0VXsEZJz6Gq/2SLQJpKdeLvZ1viISM
8ea6NdmZrl3VmMZuq9wHs4j9qD02H/vYkuiOfI0MrYMWDhY+P0XKHmQQrESVRJ4d
Qni74OlR4CjrPZgoBZ9IqEN2NSeg4qQLSgKcU30D915O7+U0+gB06qVaAdVcTJzp
WqfqgKXTENKLs1217p/Sc0O7N42GCV1EtJDxw0gh758GhFAX8PB/h0Zoq0mmJkNL
sVSBlvXM8hJVRGzDcsa/BAXDkxF3GC3dAm7mbMjDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUac15Dsr+7itCutdtOASrxlIObaQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhkNmEwNzNlLTQ1N2ItNGE0Zi05ZjM5LTU5YmE1YzVlZmM5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeeUAAwDQYJKoZIhvcNAQELBQADggEBACWZGZ7NqhAJODtE9hJSY7VbI8KU
bYwhUpLYuvLiNF8rGhv5SV/1dbA88MVfH2M0v/SuLwEOyQFXwcS6muZ7uxdkSXB1
v+ekLHcWsf5UOLQK/LUJjKP7d4QCEm7nQueCcYARILFR6oQp26ghGA3pQ90ARcIj
ckMlIOBpmkrrxALDaQtjIbF3BfY1YwkxVoM+O+aMDombPWSyWf+mrgeEcliZWKDk
qbFmtGDKDVvjccAbQ5HGm899orKw7yR1Finn+8A7cSd0ZteFaWmLj38S5zvjhN+J
qd8Ck/PYkPzulX9hNst+kSBfp0g3rJcjalVFNuVivyVoULAp+aw7RI0H/BE=
-----END CERTIFICATE-----