Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa
File:                     8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa (raw, json)
Hash identifier:          VLYUE2fizLDLJEgV3gAHQJRHdqolH02oVra12F/phlc=
Subject key identifier:   86:DF:7C:24:26:24:8F:70:94:FD:5A:32:F0:A7:8A:13:16:CC:83:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       34F262AC43E9051AABC8A32B0B0E520F198735A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        167.243.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f2:62:ac:43:e9:05:1a:ab:c8:a3:2b:0b:0e:52:0f:19:87:35:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=6a5666e380a8941e537f31aee0acf95e240410e272dc44a5c2578e93ab070db9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:82:02:e5:47:b5:23:44:fd:83:00:10:c2:
                    07:f0:0f:7f:67:94:8d:01:74:4c:b4:9d:16:71:a6:
                    6e:6f:1b:3c:02:eb:67:96:c6:e9:4d:6d:b0:91:3d:
                    8e:6e:b7:a4:0a:57:48:14:28:56:27:ce:f6:35:47:
                    73:bf:af:c2:4a:f2:13:03:60:61:3e:9e:3e:93:20:
                    57:53:3f:6f:a3:d1:c7:05:42:be:c4:fc:11:ad:cd:
                    41:7b:a2:52:ef:dd:29:d5:cc:ec:18:b0:42:c3:4d:
                    63:d7:99:4c:67:17:9e:31:05:6a:45:ba:0f:a1:35:
                    b4:ce:e2:f5:c9:57:67:5a:9d:bd:15:fd:e2:16:09:
                    2c:89:e0:3f:9f:52:8a:72:3f:49:0f:6c:23:60:23:
                    65:e9:27:c9:05:d8:32:6b:20:88:f0:d9:f3:1c:89:
                    d3:b5:d1:0b:18:b7:85:52:b0:96:b3:79:c7:b7:cc:
                    1e:66:38:4f:ef:f7:bc:83:00:20:21:1e:5a:db:a1:
                    91:7a:6a:0e:f2:2c:60:ef:96:3c:e7:f8:9a:e3:5d:
                    4e:5a:c0:01:b0:77:92:a6:01:c6:ea:29:fe:d4:37:
                    b2:5e:de:bc:26:d1:db:e0:35:cc:b1:ae:9e:5d:a5:
                    23:ec:d6:b6:c0:7c:23:f6:9a:d4:c6:eb:b3:2a:ee:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:7C:24:26:24:8F:70:94:FD:5A:32:F0:A7:8A:13:16:CC:83:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e18da5a-f870-44ce-b5d0-8665afe2c5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:e4:18:4e:3a:6a:9e:3d:94:f0:ae:9b:3e:75:e3:83:8e:
         62:cd:ed:44:3f:0e:b6:3b:d8:14:25:e5:1b:f1:fd:fd:e0:48:
         df:4c:6b:e2:73:1c:ba:5b:3a:e0:a9:c7:cf:a0:83:6e:0c:6d:
         bf:41:e8:35:94:b2:75:cd:f1:92:44:0e:51:25:19:d5:90:5f:
         42:4c:a7:7c:2e:42:2c:5b:67:0b:8b:19:14:c7:68:c2:a6:b0:
         5f:cf:60:46:a0:3c:ac:b9:bf:09:4a:33:78:bc:63:43:0f:c5:
         ee:35:dc:bd:32:a8:27:c0:20:2a:f8:59:c2:95:9e:a8:51:60:
         34:6d:d1:f5:f5:bb:07:3f:8a:ef:16:c1:a3:25:82:27:01:d4:
         2b:52:f3:a1:aa:c6:af:74:d0:da:fc:db:74:14:22:8d:1a:01:
         27:dc:0d:10:0a:cf:de:61:88:e5:1b:4d:ff:a0:2e:94:62:b2:
         04:00:87:4f:fd:a0:cd:b3:c3:fb:37:7f:c9:c5:26:26:3f:03:
         a7:ed:da:de:e5:89:3a:a7:fc:b7:64:73:a3:29:85:e1:8a:0a:
         b8:f5:bc:14:71:49:9e:3c:66:f9:44:f2:2b:97:81:8e:82:06:
         4e:7d:e2:78:02:65:02:4e:01:45:56:c1:13:93:1d:f7:19:aa:
         59:b6:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----