Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f4baa3-7fef-4bbc-8462-7fe13d7a165a.roa
File:                     b1f4baa3-7fef-4bbc-8462-7fe13d7a165a.roa (raw, json)
Hash identifier:          6RErn+bfO7adArR88rO0D19p1FvQk0THjWo4CUKan/g=
Subject key identifier:   6B:EE:C5:68:91:E6:E0:C1:29:FE:F8:D2:2A:65:57:6B:99:65:6A:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6627D565AE80DFD651E6B791EA89050EB8077BB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f4baa3-7fef-4bbc-8462-7fe13d7a165a.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:d5:65:ae:80:df:d6:51:e6:b7:91:ea:89:05:0e:b8:07:7b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=37d970e63fd21f4c05b0ee37910b6ceed72ae56c743d28a04b96de4c299aaaca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:d2:58:6a:97:a2:47:89:10:10:f4:0b:5f:
                    7c:72:e8:af:52:7c:8b:e9:1f:12:6d:a1:b9:51:c0:
                    90:57:db:d5:6e:89:8f:36:7f:49:1c:2d:f2:92:98:
                    5a:76:63:a9:a2:92:90:ed:4c:0f:f4:10:0c:f7:a2:
                    f5:b1:42:90:4b:09:21:02:63:f2:71:23:cc:3c:7a:
                    6b:17:9e:84:4a:06:50:c1:5b:44:93:81:c7:55:a4:
                    99:9b:a4:4a:44:69:de:0f:ea:82:43:43:38:03:84:
                    41:68:5b:77:5f:63:62:b9:b3:dc:66:5f:2a:c9:4f:
                    0c:e0:3e:3b:d8:80:5a:6a:a7:c5:65:50:64:5b:45:
                    01:d4:c3:cf:a9:41:fb:ac:97:ba:d9:46:e9:f8:b3:
                    9a:e7:3f:0b:f6:5d:96:d6:5a:fc:df:1b:2a:f1:6c:
                    22:22:93:3e:59:a4:df:c3:9f:f7:be:57:d8:b4:3f:
                    5b:ae:00:ce:08:34:82:68:10:c6:98:6f:4f:3b:7f:
                    7f:ab:58:f1:c9:e2:82:aa:86:b5:88:31:2c:65:c5:
                    f0:2d:59:1a:a1:e2:3c:75:e0:36:c7:67:45:19:62:
                    71:3a:a7:9d:a6:b7:72:30:5c:ab:ca:f8:b9:9e:2b:
                    48:2d:19:ab:e8:b5:3a:dc:ed:22:d4:1f:c7:d2:19:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EE:C5:68:91:E6:E0:C1:29:FE:F8:D2:2A:65:57:6B:99:65:6A:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f4baa3-7fef-4bbc-8462-7fe13d7a165a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:cb:ed:0e:df:23:26:75:7c:89:4b:87:26:9e:37:10:bd:
         ff:81:d0:5a:b5:44:c3:04:00:b7:cf:fd:13:ff:55:13:9d:d9:
         1b:dc:5f:2c:c9:7f:1b:44:a4:21:89:08:1a:54:44:8a:c7:ec:
         5a:49:54:4b:d8:fd:be:d7:2f:24:b6:f3:ac:b4:f6:25:57:79:
         70:89:ee:99:6f:33:3b:01:38:b2:98:8d:cf:9f:1f:55:1f:18:
         db:75:fb:d9:a8:65:23:da:a6:a4:29:92:3f:2a:7f:fa:73:4e:
         b9:1f:1b:d5:b4:e8:d3:99:84:9a:bb:e7:09:8a:ec:41:55:d0:
         04:c4:83:06:fc:7d:c4:22:50:c3:8c:2d:fc:e1:f0:ab:f7:f3:
         fb:c9:5f:db:a6:63:4c:08:ba:a6:5a:c8:c6:f5:10:94:d6:e8:
         0e:e5:21:35:cb:ac:26:c2:94:1c:89:4f:78:13:91:94:af:cf:
         1f:2e:cc:40:f2:b6:44:ec:26:1b:c2:6e:00:3f:1e:e7:12:bb:
         55:26:9c:a9:02:89:d6:95:b0:63:6b:93:b4:50:53:ce:0a:26:
         12:cd:07:85:f7:c0:c5:52:bc:b0:f8:45:fb:ed:09:30:80:df:
         20:bd:62:f7:a2:75:bf:e1:5c:3a:d2:09:dc:dc:38:28:b0:c5:
         8d:88:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----