Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef484b3-de87-49e5-a7f9-21051396b63b.roa
File:                     8ef484b3-de87-49e5-a7f9-21051396b63b.roa (raw, json)
Hash identifier:          5LJqTun/nW0UGit9r3LN6E+9rZnYNdkQy5gajsxRG/E=
Subject key identifier:   A3:EF:35:7A:AC:BF:66:B8:D3:F1:17:35:AD:5C:2B:B9:4F:B9:EE:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AE11866E41D6824D7570FAB88C5A88243286D68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef484b3-de87-49e5-a7f9-21051396b63b.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:18:66:e4:1d:68:24:d7:57:0f:ab:88:c5:a8:82:43:28:6d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=82b3552a74c6dbe7aae31656382896982d98f81cf415732365c8ce2af0932b26, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:d6:42:a8:df:a3:7a:7a:67:5c:65:62:fe:
                    72:a2:ab:57:47:1e:2d:a7:87:5d:40:6a:f1:9c:01:
                    fb:f1:0f:1b:28:eb:13:80:0b:d2:00:de:7f:45:34:
                    00:28:50:10:bd:62:1d:47:4d:85:b2:fa:88:86:01:
                    2c:87:67:a5:13:43:15:79:ec:62:6c:a6:b8:3a:da:
                    f8:0d:31:d7:f6:38:7e:2a:af:19:44:cb:31:2d:20:
                    b7:7c:4a:d2:5b:b1:5c:0e:d1:b9:bc:7d:e3:57:84:
                    b7:19:f9:00:14:a5:07:f9:0e:c1:71:a2:66:a7:3c:
                    c0:b4:df:ea:c7:64:7e:da:49:fc:2c:8d:0d:00:6a:
                    dd:d3:c7:f6:41:c6:c7:b3:2e:d1:d3:58:14:c2:1d:
                    5c:2f:ab:ff:a6:be:38:ce:73:3d:13:b8:b8:7e:67:
                    33:ed:ef:8a:48:18:22:90:16:0b:27:32:84:28:7f:
                    74:0f:c5:4a:03:7f:9f:89:08:33:c3:69:37:a6:c8:
                    a6:e8:91:88:b5:6c:2e:f5:e3:e2:fc:6e:3e:11:80:
                    21:5f:ef:80:eb:3c:ff:84:ab:e1:b5:b6:0a:6e:a9:
                    50:3f:fa:df:eb:50:ea:ce:5b:1e:c4:1a:40:6f:36:
                    9a:36:d4:94:c4:81:18:ee:e9:4d:13:3a:9e:2e:77:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:35:7A:AC:BF:66:B8:D3:F1:17:35:AD:5C:2B:B9:4F:B9:EE:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef484b3-de87-49e5-a7f9-21051396b63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:2a:4f:d4:49:3c:37:84:cb:4c:8b:73:77:70:2a:b2:22:
         ad:f3:69:1a:fd:4d:63:71:cc:16:8a:db:7f:b6:c9:f1:72:e0:
         93:a2:dd:c8:91:b9:27:0c:a7:99:34:f1:76:6b:d1:11:3e:df:
         02:a4:55:1e:45:d6:64:49:2b:d9:4f:ba:41:ae:ff:a0:9c:2e:
         65:c7:fc:49:67:f8:32:95:90:04:0b:bd:0d:4d:2a:9e:78:28:
         3f:d6:92:04:f3:9b:84:37:de:8f:59:23:06:27:8a:b4:d7:7a:
         27:9b:9e:cf:5c:e8:85:81:fb:81:b8:35:dc:f2:d1:17:f3:a4:
         d9:cb:ca:7d:46:86:31:b1:90:df:8f:2a:74:68:8f:9b:8b:a8:
         de:d0:5d:fa:97:c9:74:e2:47:2c:1c:95:d2:84:b3:c8:cb:0b:
         87:21:21:b2:ba:19:f3:ed:1e:fe:e8:87:35:a1:53:00:78:90:
         da:f8:69:ff:fb:b6:67:18:b2:45:83:19:59:80:b5:07:4c:3e:
         e0:46:f3:71:b0:90:ba:1e:0f:bb:0e:0a:02:10:41:78:8a:85:
         a4:53:ec:83:a1:0f:35:9d:97:62:6d:f0:50:a6:d3:1d:3b:6d:
         82:1c:41:77:06:96:b6:cc:38:af:ec:48:18:4f:f7:50:4f:0d:
         7c:7a:14:82
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCuEYZuQdaCTXVw+riMWogkMobWgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE3MDAwMDAwWhcNMjUwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmIzNTUyYTc0YzZkYmU3YWFlMzE2NTYzODI4OTY5ODJk
OThmODFjZjQxNTczMjM2NWM4Y2UyYWYwOTMyYjI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7FtZCqN+jenpnXGVi/nKiq1dHHi2nh11AavGcAfvxDxso
6xOAC9IA3n9FNAAoUBC9Yh1HTYWy+oiGASyHZ6UTQxV57GJsprg62vgNMdf2OH4q
rxlEyzEtILd8StJbsVwO0bm8feNXhLcZ+QAUpQf5DsFxomanPMC03+rHZH7aSfws
jQ0Aat3Tx/ZBxsezLtHTWBTCHVwvq/+mvjjOcz0TuLh+ZzPt74pIGCKQFgsnMoQo
f3QPxUoDf5+JCDPDaTemyKbokYi1bC714+L8bj4RgCFf74DrPP+Eq+G1tgpuqVA/
+t/rUOrOWx7EGkBvNpo21JTEgRju6U0TOp4ud+jXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUo+81eqy/ZrjT8Rc1rVwruU+57hQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhlZjQ4NGIzLWRlODctNDllNS1hN2Y5LTIxMDUxMzk2YjYzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYtOYAwDQYJKoZIhvcNAQELBQADggEBABrqKk/USTw3hMtMi3N3cCqyIq3z
aRr9TWNxzBaK23+2yfFy4JOi3ciRuScMp5k08XZr0RE+3wKkVR5F1mRJK9lPukGu
/6CcLmXH/Eln+DKVkAQLvQ1NKp54KD/WkgTzm4Q33o9ZIwYnirTXeiebns9c6IWB
+4G4Ndzy0RfzpNnLyn1GhjGxkN+PKnRoj5uLqN7QXfqXyXTiRywcldKEs8jLC4ch
IbK6GfPtHv7ohzWhUwB4kNr4af/7tmcYskWDGVmAtQdMPuBG83GwkLoeD7sOCgIQ
QXiKhaRT7IOhDzWdl2Jt8FCm0x07bYIcQXcGlrbMOK/sSBhP91BPDXx6FII=
-----END CERTIFICATE-----