Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
File:                     c7b638b3-e41e-4f83-bc95-3722c08205ca.roa (raw, json)
Hash identifier:          A6t6LHzDkc9YVorDKMVc/j4O4e4cHLFSxv8p055WTUU=
Subject key identifier:   71:C9:C2:0F:D0:C8:EE:55:F9:4A:07:32:5D:3B:9E:AE:39:CA:F2:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09C85B94F3F9477292F0953C51B67A5B42414BA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c8:5b:94:f3:f9:47:72:92:f0:95:3c:51:b6:7a:5b:42:41:4b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=bcc069f423146d14747d4662b46bbf7befd43d6642361e2a8b61216ae44c39a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:a8:33:5d:81:51:9a:7c:db:52:42:84:c5:
                    0b:0b:c1:0d:1e:36:5d:18:89:a0:72:dd:23:f9:a0:
                    db:5b:be:49:d0:d9:22:ac:85:04:d9:38:51:ff:26:
                    7c:a5:6d:aa:0c:cb:eb:45:72:e2:31:f8:12:a5:28:
                    0f:8b:87:4f:1a:19:a8:bd:f8:4c:a4:45:d5:a8:1b:
                    93:19:e3:d2:bb:83:62:9b:5b:90:d3:e2:2e:96:40:
                    02:16:96:80:92:7e:df:63:01:6a:53:b8:a2:01:ad:
                    c1:b2:ae:f4:17:1e:76:ff:ea:bb:96:94:5a:d5:7e:
                    3e:02:28:3b:77:69:a0:db:fa:6b:41:ac:d2:66:b0:
                    0f:d0:b3:24:7d:0a:36:6e:f4:63:3a:ef:fe:09:d4:
                    e0:33:a9:38:7f:00:67:ab:5d:49:a6:60:92:9b:04:
                    b7:11:02:0f:2b:48:61:9f:eb:2b:95:0d:bc:75:7b:
                    6f:da:cd:c4:c4:a3:89:c5:56:ce:c9:d0:28:bc:87:
                    ed:d7:7c:7b:08:59:08:fe:6e:59:9c:13:4c:75:e1:
                    d4:69:17:e2:d4:80:36:97:48:8d:99:bf:92:db:d0:
                    60:de:44:76:fc:1d:07:eb:76:12:21:43:c5:c5:92:
                    e6:4c:c4:6e:c3:dc:be:2b:75:39:4b:aa:71:31:e9:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C9:C2:0F:D0:C8:EE:55:F9:4A:07:32:5D:3B:9E:AE:39:CA:F2:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7b638b3-e41e-4f83-bc95-3722c08205ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:61:d8:1c:ef:32:9c:a9:bb:ae:df:b5:a3:11:aa:ae:57:
         cf:fe:b0:79:ac:ad:de:a4:54:80:06:ab:64:99:d1:9c:ec:50:
         02:a6:c3:c2:04:2e:0f:27:12:67:e6:80:64:84:26:31:3d:3e:
         9f:ea:16:5f:7d:3c:b7:71:29:f0:4d:a5:e6:44:f4:99:25:df:
         72:7c:3d:32:bd:10:95:d3:d6:86:b3:22:49:c4:95:a9:e9:d1:
         59:fb:06:26:89:28:a1:aa:36:f3:2f:8b:09:a9:85:2c:07:fa:
         e5:c7:ef:2d:ef:ab:94:4c:51:dc:e0:a2:56:73:87:3b:b0:9a:
         8a:43:25:2c:41:67:f0:a0:38:8b:a0:76:95:c8:44:d1:c8:71:
         41:2f:38:3a:9e:cf:4f:d8:95:9e:4f:84:72:1e:39:e3:ea:e9:
         bb:72:c3:35:aa:e2:44:08:b3:9f:f3:1b:0d:03:d1:1e:cc:34:
         ba:f7:e5:39:f9:8e:6f:39:74:6f:43:3f:8e:e3:12:03:aa:e4:
         8a:6a:73:6e:10:ea:0c:fb:54:e5:b0:f6:22:1e:fa:5e:63:bc:
         18:cc:67:b4:1b:32:9e:ec:07:85:ea:62:23:53:80:46:61:20:
         42:6d:b5:e3:b8:55:2d:0b:c1:c1:2a:39:3e:39:87:29:93:88:
         7a:22:07:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCchblPP5R3KS8JU8UbZ6W0JBS6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiY2MwNjlmNDIzMTQ2ZDE0NzQ3ZDQ2NjJiNDZiYmY3YmVm
ZDQzZDY2NDIzNjFlMmE4YjYxMjE2YWU0NGMzOWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt6agzXYFRmnzbUkKExQsLwQ0eNl0YiaBy3SP5oNtbvknQ
2SKshQTZOFH/JnylbaoMy+tFcuIx+BKlKA+Lh08aGai9+EykRdWoG5MZ49K7g2Kb
W5DT4i6WQAIWloCSft9jAWpTuKIBrcGyrvQXHnb/6ruWlFrVfj4CKDt3aaDb+mtB
rNJmsA/QsyR9CjZu9GM67/4J1OAzqTh/AGerXUmmYJKbBLcRAg8rSGGf6yuVDbx1
e2/azcTEo4nFVs7J0Ci8h+3XfHsIWQj+blmcE0x14dRpF+LUgDaXSI2Zv5Lb0GDe
RHb8HQfrdhIhQ8XFkuZMxG7D3L4rdTlLqnEx6b8pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUccnCD9DI7lX5SgcyXTuerjnK8lMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3YjYzOGIzLWU0MWUtNGY4My1iYzk1LTM3MjJjMDgyMDVjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVLA6AwDQYJKoZIhvcNAQELBQADggEBAI/bYdgc7zKcqbuu37WjEaquV8/+
sHmsrd6kVIAGq2SZ0ZzsUAKmw8IELg8nEmfmgGSEJjE9Pp/qFl99PLdxKfBNpeZE
9Jkl33J8PTK9EJXT1oazIknElanp0Vn7BiaJKKGqNvMviwmphSwH+uXH7y3vq5RM
UdzgolZzhzuwmopDJSxBZ/CgOIugdpXIRNHIcUEvODqez0/YlZ5PhHIeOePq6bty
wzWq4kQIs5/zGw0D0R7MNLr35Tn5jm85dG9DP47jEgOq5Ipqc24Q6gz7VOWw9iIe
+l5jvBjMZ7QbMp7sB4XqYiNTgEZhIEJtteO4VS0LwcEqOT45hymTiHoiB3k=
-----END CERTIFICATE-----