Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa
File:                     c7855769-3437-40b2-8e8d-b2138da3a551.roa (raw, json)
Hash identifier:          Y+00S99eBrQfqIhUjIFr4Fq7evH13E08jWGL7DLESZI=
Subject key identifier:   99:D2:0B:EF:DF:EE:52:E2:AA:38:A1:CF:B7:6A:7A:0B:F4:87:D9:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3944911452A793924B08F6ADB5E2771482E0B014
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.46.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:44:91:14:52:a7:93:92:4b:08:f6:ad:b5:e2:77:14:82:e0:b0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=2d6d4864e2e3c7056eb55057898089a24f7485a3d98bde254280b19403f2bd8b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:c2:88:f2:24:aa:f2:7d:02:a9:df:84:a2:
                    b9:82:4c:16:e8:89:52:1d:c2:5a:34:a4:62:66:ac:
                    8c:9e:71:da:1f:72:4e:50:09:ed:f0:8c:15:49:1d:
                    a4:54:08:da:dc:26:bc:5b:bd:c7:e9:5c:c0:4c:c9:
                    f3:7b:c0:f2:b4:43:17:2c:a3:df:d4:38:ba:84:ee:
                    6b:b0:fe:04:6c:8f:f9:54:74:5a:bc:0f:95:00:41:
                    73:33:2a:f7:4f:b1:f6:80:03:9f:f0:e5:10:e8:d7:
                    4b:12:88:b5:07:ad:09:b8:1a:7a:6f:19:67:f3:18:
                    0d:c3:5f:6f:f8:05:21:3e:e6:76:53:d2:b9:7f:96:
                    94:51:be:ee:da:ba:15:06:14:0f:ee:e1:e1:32:b7:
                    c0:6c:9e:12:de:47:ec:cf:28:a3:66:fd:be:d9:71:
                    1b:ac:04:78:06:ec:4e:5c:ca:54:31:23:06:1e:f2:
                    ab:02:10:45:01:cd:13:5c:2b:e2:5e:50:e7:47:ab:
                    9d:87:68:36:77:97:8c:10:45:e8:5f:ab:15:44:18:
                    fe:89:3e:21:70:82:4c:43:47:1f:28:76:15:f5:6e:
                    d4:86:c3:fe:d9:7f:0e:cf:c2:c4:df:f8:ce:23:79:
                    fa:a6:6c:e6:37:e0:f0:f5:c8:77:45:2f:63:4b:55:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:0B:EF:DF:EE:52:E2:AA:38:A1:CF:B7:6A:7A:0B:F4:87:D9:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7855769-3437-40b2-8e8d-b2138da3a551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         04:26:6c:a8:0b:d2:d2:24:2f:f3:1d:8d:ac:11:26:5a:06:54:
         b4:9b:52:e0:3f:f7:73:e9:96:df:c8:e6:c4:d1:d2:be:b2:48:
         2a:b2:c5:85:6d:58:87:3b:d4:20:3d:d7:d1:59:04:fa:34:fd:
         c6:a6:59:23:09:ac:73:00:22:20:db:70:d9:c3:66:66:d9:9c:
         a5:30:0f:52:dd:ef:b2:b7:54:20:f4:da:35:d6:65:de:5d:66:
         fc:c5:d7:6a:b4:9a:a6:8b:f6:bc:4c:9b:86:36:a4:da:bf:c5:
         7e:eb:b2:b3:30:ba:8a:45:fa:07:29:4c:59:e6:ed:e8:1d:3b:
         a8:46:e0:43:f0:41:08:15:73:64:c4:ff:f2:b6:6f:63:7c:1e:
         86:e5:29:4f:56:67:c4:b6:13:a7:36:25:f6:04:a7:21:91:1f:
         3c:c7:c9:c3:16:66:4f:a9:fc:ed:cb:dc:92:f0:a4:a8:69:8e:
         e9:63:8a:e8:ea:d1:75:70:dd:f9:56:c6:7d:33:40:1b:02:0c:
         9e:75:5e:38:6a:c7:12:92:c1:52:12:e0:c9:a5:e2:f1:30:fe:
         e6:c3:e4:fc:a2:db:29:48:d4:26:90:ff:f8:6a:5e:28:69:d3:
         6a:e0:b5:42:2a:53:76:83:2a:e4:82:fe:f8:fd:24:00:f2:be:
         34:d4:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----