Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa
File:                     c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa (raw, json)
Hash identifier:          DMBC+9BaddVXk+YrGiAY8KjtcirT+xqGEflolp+3Wjs=
Subject key identifier:   95:87:EB:80:A5:E7:BC:F4:FD:CF:00:86:D0:4D:48:AD:27:88:48:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       710A14EF6D5255A0F00B9239EA848BAB2D2E00D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.72.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0a:14:ef:6d:52:55:a0:f0:0b:92:39:ea:84:8b:ab:2d:2e:00:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2b5d263f75f286c45c25dd831b8ab65a8676840ed92e983aa5eb5e468b24ecd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:85:2e:bf:e9:07:f8:8c:00:59:96:6b:1b:
                    8c:32:59:f2:2a:f1:8e:ae:cc:08:3b:b3:96:56:87:
                    63:54:6e:06:f5:51:25:1e:08:ab:be:76:08:2d:36:
                    53:03:06:17:f8:b3:95:c3:bc:ad:5c:93:f8:f8:00:
                    e6:48:5c:d3:20:6b:10:e8:b5:3b:42:27:51:8c:27:
                    74:15:3c:42:df:ed:af:cd:0e:1e:3e:fa:e9:51:36:
                    81:7b:df:ef:7e:27:e4:3e:9f:7a:d5:4d:11:21:96:
                    78:c9:71:c5:9e:81:ea:23:ba:4d:77:51:cb:a4:f4:
                    c5:5a:fd:b7:02:12:d4:52:a7:74:4c:4c:db:31:67:
                    1f:ce:c1:d3:27:39:b1:aa:31:62:22:8b:3e:40:01:
                    15:76:49:64:e6:21:b5:d5:1c:a5:f8:e7:bb:96:90:
                    49:9f:15:09:d3:46:f5:bc:06:a5:26:80:50:e6:1a:
                    24:61:d2:74:c5:e4:d5:52:94:66:40:5e:1d:46:53:
                    33:3c:89:ef:b9:86:76:13:bb:3f:4c:42:ae:4c:86:
                    0b:69:c7:b0:5d:ba:99:f4:a9:49:b3:b2:5a:7c:30:
                    eb:59:b4:9e:50:ec:38:28:68:a7:93:0b:13:0d:17:
                    10:fc:6c:dd:3b:af:a9:ea:ed:83:92:64:b7:04:a3:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:87:EB:80:A5:E7:BC:F4:FD:CF:00:86:D0:4D:48:AD:27:88:48:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:64:f1:c4:de:a0:57:32:e8:be:3c:f2:2c:28:ee:34:0c:
         af:79:b3:8c:6e:db:38:e0:41:4f:c3:0a:0e:32:6f:b6:2b:9a:
         a4:f0:df:da:0f:0f:74:ef:e7:85:f5:3e:2e:56:51:0e:46:b7:
         21:7d:77:46:03:28:0f:c0:9c:8e:fc:68:43:a6:8a:4d:a8:84:
         30:21:48:92:96:ed:37:09:88:ec:5f:ce:69:d3:92:7f:7d:3d:
         91:48:60:93:2d:11:7b:d0:6d:c8:73:93:41:03:37:0e:a4:4c:
         f8:6a:ad:dc:62:0d:c1:de:e1:3f:9d:11:df:55:e3:2c:72:e3:
         02:e1:ba:1c:73:04:c3:ca:af:fc:2a:8a:97:bb:5b:c3:15:e5:
         04:fb:18:56:9b:b3:0f:79:12:d3:d4:bb:0d:a5:fc:cf:e5:ab:
         d8:cd:5a:83:37:aa:ae:f2:cf:d6:b8:c5:38:e5:31:95:2b:41:
         09:23:71:40:74:76:4a:8b:e7:80:92:08:e9:ae:a9:33:97:71:
         7c:b1:94:ab:0b:24:c4:33:f4:00:ce:4f:c3:99:e9:66:12:37:
         92:87:8c:6a:5b:0e:30:da:44:8c:b6:2d:ab:45:87:f6:b2:98:
         9f:a0:8f:79:3c:92:c6:c4:d6:78:e3:f2:6a:40:e5:fd:a1:04:
         09:54:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----