Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
File:                     b50e29db-8ea8-465e-b77b-6bb4903e7932.roa (raw, json)
Hash identifier:          n5pVBDb/DodasINTDlSZH1b5jteKZ2hloHtLYC1q4Tc=
Subject key identifier:   9A:39:8B:B7:CE:9E:EF:B3:C9:CB:79:80:7D:2F:EE:27:D4:66:81:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44ACB34920543FED209851440302FA061635B3E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.215.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ac:b3:49:20:54:3f:ed:20:98:51:44:03:02:fa:06:16:35:b3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=2f3e08e3dcda5ce6f10c6728d173d6b9530945e02c6993befa042210d3b42e79, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:66:a1:62:29:f3:ea:cf:17:3c:07:79:03:
                    56:d7:00:c9:23:b0:b8:30:74:87:d1:56:89:27:6f:
                    8e:b2:ce:df:81:d4:af:ef:58:59:80:8e:6f:f5:c7:
                    cd:1c:8d:7f:41:96:4f:95:9a:6d:e0:cd:b8:e2:3d:
                    df:77:a4:74:01:35:0e:cc:43:23:d0:42:d1:14:36:
                    3e:6e:09:7d:ff:c8:c8:25:91:51:70:84:bd:01:a0:
                    e2:60:be:33:9c:83:cc:56:c9:e7:2f:e4:66:59:fe:
                    80:34:6b:27:ea:14:82:78:5a:bd:62:77:57:e5:59:
                    e0:19:ab:02:7a:94:57:b5:f2:89:24:73:5e:00:c5:
                    76:1b:29:d1:5b:a5:dc:f8:73:50:66:3b:f0:a4:04:
                    ba:05:d0:b4:bc:4e:52:77:02:b5:02:c1:65:43:f3:
                    97:f8:ad:f7:48:bc:24:ff:ad:23:ee:a8:ba:be:7c:
                    ad:21:5b:49:b2:45:19:ba:c1:62:24:d5:f1:26:48:
                    ef:5f:cc:cc:6b:88:c1:f0:55:1a:19:69:85:63:e3:
                    de:1d:14:e1:2f:8d:39:81:42:2a:df:e6:48:c4:24:
                    8b:c5:c0:2a:65:0e:68:40:97:4f:04:61:20:b2:9c:
                    3f:a5:7f:81:ce:cd:87:47:ad:fb:0b:c4:eb:ad:b2:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:8B:B7:CE:9E:EF:B3:C9:CB:79:80:7D:2F:EE:27:D4:66:81:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b50e29db-8ea8-465e-b77b-6bb4903e7932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cd:36:d0:46:87:37:a1:72:6d:b1:bd:a9:98:c9:05:75:c9:17:
         8b:8e:9f:9b:04:9c:06:66:f4:0a:4e:e0:bd:6f:5c:8b:60:a7:
         08:b3:7c:af:40:63:fc:bb:71:4f:31:0a:f0:f3:0e:c3:5d:c5:
         b4:a8:e6:9f:e7:38:bb:72:7f:88:2c:81:b4:c1:41:13:2b:30:
         e1:6c:0b:b6:0e:ec:e3:68:88:ab:fe:3d:14:4c:dd:ef:e4:36:
         33:da:95:61:03:bb:12:56:dc:8a:52:42:16:d8:14:54:08:9b:
         cb:b5:b2:80:ff:3b:c5:5e:91:44:65:12:61:19:44:c1:93:26:
         8f:71:bf:4d:59:22:5d:db:0e:a0:a6:ed:37:52:bf:d5:91:e2:
         70:ea:c3:06:d7:64:c1:cd:22:7f:29:ee:58:e7:b4:2b:05:64:
         ed:2d:18:84:3a:53:3c:a9:cc:bc:35:1b:72:4d:d9:0f:73:52:
         f6:09:72:0b:66:29:da:7f:f8:9d:4f:7c:8e:fa:3d:0e:65:e6:
         c8:90:a9:67:f8:51:b6:58:21:e3:d7:77:46:13:e7:93:98:a4:
         78:c0:f9:aa:9d:fe:8b:15:32:d8:f6:3f:51:03:a3:d7:f4:52:
         1a:53:b4:85:58:b5:36:64:e4:e9:ab:1d:0c:cd:70:51:2a:3d:
         21:eb:1a:78
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURKyzSSBUP+0gmFFEAwL6BhY1s+QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZjNlMDhlM2RjZGE1Y2U2ZjEwYzY3MjhkMTczZDZiOTUz
MDk0NWUwMmM2OTkzYmVmYTA0MjIxMGQzYjQyZTc5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYp2ahYinz6s8XPAd5A1bXAMkjsLgwdIfRVoknb46yzt+B
1K/vWFmAjm/1x80cjX9Blk+Vmm3gzbjiPd93pHQBNQ7MQyPQQtEUNj5uCX3/yMgl
kVFwhL0BoOJgvjOcg8xWyecv5GZZ/oA0ayfqFIJ4Wr1id1flWeAZqwJ6lFe18okk
c14AxXYbKdFbpdz4c1BmO/CkBLoF0LS8TlJ3ArUCwWVD85f4rfdIvCT/rSPuqLq+
fK0hW0myRRm6wWIk1fEmSO9fzMxriMHwVRoZaYVj494dFOEvjTmBQirf5kjEJIvF
wCplDmhAl08EYSCynD+lf4HOzYdHrfsLxOutslNJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmjmLt86e77PJy3mAfS/uJ9RmgdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I1MGUyOWRiLThlYTgtNDY1ZS1iNzdiLTZiYjQ5MDNlNzkzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA41zANBgkqhkiG9w0BAQsFAAOCAQEAzTbQRoc3oXJtsb2pmMkFdckXi46f
mwScBmb0Ck7gvW9ci2CnCLN8r0Bj/LtxTzEK8PMOw13FtKjmn+c4u3J/iCyBtMFB
Eysw4WwLtg7s42iIq/49FEzd7+Q2M9qVYQO7ElbcilJCFtgUVAiby7WygP87xV6R
RGUSYRlEwZMmj3G/TVkiXdsOoKbtN1K/1ZHicOrDBtdkwc0ifynuWOe0KwVk7S0Y
hDpTPKnMvDUbck3ZD3NS9glyC2Yp2n/4nU98jvo9DmXmyJCpZ/hRtlgh49d3RhPn
k5ikeMD5qp3+ixUy2PY/UQOj1/RSGlO0hVi1NmTk6asdDM1wUSo9IesaeA==
-----END CERTIFICATE-----