Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa
File:                     c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa (raw, json)
Hash identifier:          ZHR1rEfRCgyiTCyBx7VL1OW6nN4zGbXm3yqF6tuTVkU=
Subject key identifier:   0A:EA:F1:6A:AB:6A:E7:19:E9:C0:16:35:14:AD:C8:55:2E:3B:F4:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43C8D3215711A2550D83B61CAAF9A150E7739DE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.224.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:d3:21:57:11:a2:55:0d:83:b6:1c:aa:f9:a1:50:e7:73:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=9b01181d78ac3192a69366ac9f0b1b803135fc3f579e61f0a9e4c58de39e2c64, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:25:ee:fa:e0:40:3c:c0:3c:0d:36:5e:3e:
                    47:8d:40:7b:da:32:c6:7c:5d:13:2b:d6:5d:89:6b:
                    4a:ef:1c:4b:ef:7a:e3:39:50:eb:d0:99:ce:dc:49:
                    9d:35:f0:20:3f:f9:7b:c6:e6:55:9d:36:56:29:17:
                    92:77:62:0d:30:83:03:23:0b:da:55:45:72:c9:ac:
                    18:03:1c:43:aa:56:95:a4:f2:57:d4:6e:02:d9:12:
                    fa:66:0d:1d:e8:72:9d:a5:f6:17:aa:03:f7:43:f3:
                    f8:87:86:cf:2e:c4:47:5e:b6:bc:fc:eb:aa:9e:67:
                    ac:f2:2c:8d:c2:bf:c2:56:87:7d:5b:93:50:c1:d6:
                    d2:38:51:2c:b6:92:88:2a:80:f3:f9:79:a0:68:a4:
                    fa:c6:73:b0:15:18:ad:33:fc:4a:a6:0a:a9:88:42:
                    90:7c:9b:3a:c6:57:9c:eb:ee:86:0b:27:ca:7e:d5:
                    7d:2e:21:75:c8:86:f2:54:c8:b8:dc:c7:fa:9c:39:
                    07:b4:7b:5d:a5:c4:b3:59:24:39:35:9b:a4:1c:7b:
                    4a:33:a8:18:6a:1b:e4:d0:0e:07:a3:f4:67:28:7b:
                    10:e9:3b:a6:14:99:70:97:ce:74:f3:b0:50:f4:78:
                    c7:67:60:d4:01:c7:1b:e9:3c:dc:d8:fb:51:d0:97:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:F1:6A:AB:6A:E7:19:E9:C0:16:35:14:AD:C8:55:2E:3B:F4:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c406b7fd-9f31-4bb5-a025-b22a7bbed4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.224.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:e6:35:1d:84:17:5e:29:71:b5:d6:b8:6f:d4:ad:a3:2f:
         c6:e6:35:5e:b7:1c:da:82:87:f4:e9:2d:6d:3a:fd:df:3e:80:
         ae:95:82:b7:4b:c2:83:d1:5d:f1:be:96:b5:0a:34:93:fb:0b:
         6e:5b:72:10:e0:74:d4:a6:d5:d2:56:d9:78:6e:ae:cc:90:49:
         6d:c2:5b:f2:ea:1d:c5:c1:3f:35:f1:b2:e4:00:9b:e2:cb:38:
         fb:ef:32:2f:dd:dd:55:f3:0f:7e:95:ac:40:ab:31:f1:c8:34:
         3e:7a:ea:13:e3:b4:0a:6f:e8:ac:94:6f:6d:ec:5e:cf:37:64:
         39:db:d5:64:86:9d:b9:12:1f:b6:e3:d9:fb:0b:47:cf:7f:08:
         42:a1:1a:a6:13:07:9f:64:c4:33:cc:b8:c9:e1:4b:38:0f:54:
         0e:bf:24:6a:0e:97:0f:90:c7:dc:d6:2d:96:19:db:44:4b:2f:
         c7:ee:f9:f1:91:c6:40:25:b5:46:98:62:7c:23:8d:26:bd:e2:
         fa:e4:d5:6d:ff:f6:94:c5:ca:b6:d2:3b:77:a9:17:b5:d7:42:
         4a:98:f3:e2:cf:0a:a3:cd:6c:1a:fe:90:74:07:b0:6c:59:e5:
         4d:07:66:15:34:45:b6:5e:0a:81:1f:cf:25:4f:6d:16:33:fc:
         31:35:e4:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ8jTIVcRolUNg7YcqvmhUOdzneMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjAxMTgxZDc4YWMzMTkyYTY5MzY2YWM5ZjBiMWI4MDMx
MzVmYzNmNTc5ZTYxZjBhOWU0YzU4ZGUzOWUyYzY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDM4yXu+uBAPMA8DTZePkeNQHvaMsZ8XRMr1l2Ja0rvHEvv
euM5UOvQmc7cSZ018CA/+XvG5lWdNlYpF5J3Yg0wgwMjC9pVRXLJrBgDHEOqVpWk
8lfUbgLZEvpmDR3ocp2l9heqA/dD8/iHhs8uxEdetrz866qeZ6zyLI3Cv8JWh31b
k1DB1tI4USy2kogqgPP5eaBopPrGc7AVGK0z/EqmCqmIQpB8mzrGV5zr7oYLJ8p+
1X0uIXXIhvJUyLjcx/qcOQe0e12lxLNZJDk1m6Qce0ozqBhqG+TQDgej9GcoexDp
O6YUmXCXznTzsFD0eMdnYNQBxxvpPNzY+1HQl2efAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCurxaqtq5xnpwBY1FK3IVS479JQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0MDZiN2ZkLTlmMzEtNGJiNS1hMDI1LWIyMmE3YmJlZDRiNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARG4NAwDQYJKoZIhvcNAQELBQADggEBAL7z5jUdhBdeKXG11rhv1K2jL8bm
NV63HNqCh/TpLW06/d8+gK6VgrdLwoPRXfG+lrUKNJP7C25bchDgdNSm1dJW2Xhu
rsyQSW3CW/LqHcXBPzXxsuQAm+LLOPvvMi/d3VXzD36VrECrMfHIND566hPjtApv
6KyUb23sXs83ZDnb1WSGnbkSH7bj2fsLR89/CEKhGqYTB59kxDPMuMnhSzgPVA6/
JGoOlw+Qx9zWLZYZ20RLL8fu+fGRxkAltUaYYnwjjSa94vrk1W3/9pTFyrbSO3ep
F7XXQkqY8+LPCqPNbBr+kHQHsGxZ5U0HZhU0RbZeCoEfzyVPbRYz/DE15D8=
-----END CERTIFICATE-----