Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa
File:                     ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa (raw, json)
Hash identifier:          ocP7DC9mM/BkES7fIDQdTPA9NZRQikce+gO7FSAdjgA=
Subject key identifier:   75:BB:A5:DF:83:48:AF:0E:00:5B:F0:AA:41:4D:09:24:8B:5F:87:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5164BACF1D069E361DB3BC82F20072A2FB167C8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffb:8020::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:ba:cf:1d:06:9e:36:1d:b3:bc:82:f2:00:72:a2:fb:16:7c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=45feab712e7854f88cd7befe4404e275b4bbf9d26c2db38d92e2ec3fadd61828, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:f2:40:64:6b:b5:f8:88:d8:60:78:69:f7:
                    42:26:82:05:68:b9:55:ef:f2:53:97:44:e1:95:61:
                    af:a8:0e:ea:64:99:af:4c:2c:fb:41:4e:f6:a3:22:
                    19:c5:1f:12:84:c0:c9:7c:1f:d8:c3:48:ac:b6:99:
                    98:54:e5:57:ec:ca:b8:e3:80:25:26:f6:5f:f1:f1:
                    45:62:35:c0:9b:ef:4e:82:9c:b6:6f:42:77:0a:be:
                    3b:02:c4:1f:66:51:99:3e:67:b9:c1:41:6b:dd:0c:
                    94:cd:dc:d5:fa:18:b3:16:95:b9:15:39:6a:19:5f:
                    f9:b8:ef:1f:e5:21:60:4b:ae:d6:66:52:ff:5a:93:
                    65:ac:e9:c5:07:3a:95:86:bb:32:d0:e5:99:a0:18:
                    80:cf:13:d6:25:1c:1d:8f:2a:ac:86:55:a4:2a:c1:
                    a9:6d:2d:53:1d:b8:cb:d0:0a:63:12:1e:ec:ba:4e:
                    bf:5c:45:40:42:61:16:21:4d:22:64:f9:af:eb:a1:
                    d0:21:e6:3f:67:e3:ea:8c:6c:86:1d:bd:b2:ef:1f:
                    a5:cd:63:84:b9:c6:56:d2:a6:09:21:8f:03:17:d1:
                    22:8c:1a:e4:06:5a:a1:3b:69:2a:6c:9b:31:5f:ed:
                    42:ce:1d:21:a6:8b:5a:5c:79:f8:bd:35:7a:21:af:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:A5:DF:83:48:AF:0E:00:5B:F0:AA:41:4D:09:24:8B:5F:87:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:8020::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:06:ed:4f:20:42:fc:eb:78:05:70:b1:e3:20:68:ed:3d:fe:
         72:87:fc:05:b5:6e:f6:c5:54:c3:19:a9:5e:e9:b1:4f:11:6b:
         ee:bc:d7:fe:bc:fd:01:f4:8c:03:2e:cf:40:41:50:42:68:a6:
         73:c9:73:6a:a6:46:2d:74:03:c1:2c:66:32:05:8b:89:ec:b6:
         2e:91:ac:d3:53:c9:1d:d0:54:9d:9e:ce:d3:94:42:13:42:f6:
         1c:cb:15:0b:9f:e7:cd:92:16:b6:a9:c0:fb:23:ed:13:81:66:
         80:71:51:df:75:f7:ec:23:63:87:52:f8:e1:f8:f7:69:18:1e:
         90:ed:b3:80:fc:47:3f:7e:22:d3:bb:3b:56:17:8d:9a:79:0e:
         a5:a9:21:02:4c:92:08:b8:26:c0:90:3a:b6:06:2a:9b:10:f8:
         6a:d1:a9:44:2c:54:97:15:a1:83:09:d0:b1:de:cb:6b:38:d6:
         9d:a5:99:06:d2:17:d6:c0:c9:ae:35:c3:eb:f7:cc:b8:fc:b4:
         ab:88:c6:cb:f8:32:b0:92:c7:c9:f4:2f:6e:36:17:e8:ec:ab:
         f8:6c:fe:ce:cb:04:8b:3f:9e:5e:9b:cf:3d:19:71:d0:03:37:
         36:22:b3:c1:c2:75:41:77:75:09:ee:6a:40:3f:4f:82:a8:45:
         6d:fc:1e:f7
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUWS6zx0GnjYds7yC8gByovsWfIowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NWZlYWI3MTJlNzg1NGY4OGNkN2JlZmU0NDA0ZTI3NWI0
YmJmOWQyNmMyZGIzOGQ5MmUyZWMzZmFkZDYxODI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHnPJAZGu1+IjYYHhp90ImggVouVXv8lOXROGVYa+oDupk
ma9MLPtBTvajIhnFHxKEwMl8H9jDSKy2mZhU5VfsyrjjgCUm9l/x8UViNcCb706C
nLZvQncKvjsCxB9mUZk+Z7nBQWvdDJTN3NX6GLMWlbkVOWoZX/m47x/lIWBLrtZm
Uv9ak2Ws6cUHOpWGuzLQ5ZmgGIDPE9YlHB2PKqyGVaQqwaltLVMduMvQCmMSHuy6
Tr9cRUBCYRYhTSJk+a/rodAh5j9n4+qMbIYdvbLvH6XNY4S5xlbSpgkhjwMX0SKM
GuQGWqE7aSpsmzFf7ULOHSGmi1pcefi9NXohryQ1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdbul34NIrw4AW/CqQU0JJItfhxgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FjMmIwMDM0LTRiNzYtNGY5My1iNDIzLWVhNmI3ZmFmNDJlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/7gCAwDQYJKoZIhvcNAQELBQADggEBAJkG7U8gQvzreAVwseMgaO09
/nKH/AW1bvbFVMMZqV7psU8Ra+681/68/QH0jAMuz0BBUEJopnPJc2qmRi10A8Es
ZjIFi4nsti6RrNNTyR3QVJ2eztOUQhNC9hzLFQuf582SFrapwPsj7ROBZoBxUd91
9+wjY4dS+OH492kYHpDts4D8Rz9+ItO7O1YXjZp5DqWpIQJMkgi4JsCQOrYGKpsQ
+GrRqUQsVJcVoYMJ0LHey2s41p2lmQbSF9bAya41w+v3zLj8tKuIxsv4MrCSx8n0
L242F+jsq/hs/s7LBIs/nl6bzz0ZcdADNzYis8HCdUF3dQnuakA/T4KoRW38Hvc=
-----END CERTIFICATE-----