Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa
File:                     cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa (raw, json)
Hash identifier:          Vt0HqroB7/qj9VjYkXQVqpFOTlvTWTobROH4W2cTzf0=
Subject key identifier:   CB:50:76:99:27:F8:1F:0B:4F:8D:97:1D:1C:DD:22:37:F9:66:9E:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CB415594E39229D94DA19F7A2443DAA267CFBB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.157.72.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b4:15:59:4e:39:22:9d:94:da:19:f7:a2:44:3d:aa:26:7c:fb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=1fc0bbb8e34cda5266c3a19034a4649fac9252f3cfe48f947f62c7abb4e5ed9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:f9:6f:6b:55:59:57:d4:9f:d5:79:76:a3:
                    bf:91:c7:76:1e:ee:27:82:2d:cc:ec:74:25:30:f7:
                    fa:ad:13:3c:d5:df:67:68:23:8b:87:60:3e:78:3a:
                    77:ea:70:44:d5:b8:5f:a3:60:d3:09:32:0e:0f:d0:
                    b3:ed:f9:9f:ed:59:db:40:89:f8:44:08:e9:f6:89:
                    d2:26:66:9f:97:cb:5f:f7:e2:d5:41:fb:ac:09:23:
                    8c:d8:3d:8b:38:e5:62:79:9f:8b:66:38:8c:bf:43:
                    dc:ef:76:d5:21:38:06:8c:00:71:89:2a:95:db:b2:
                    10:24:90:a9:58:61:c0:14:7e:42:48:de:62:e0:27:
                    ab:33:7a:63:74:78:33:80:e3:23:53:79:52:08:b1:
                    62:44:aa:ed:9d:be:b2:1f:3c:7d:35:99:11:97:de:
                    08:33:9f:e8:f1:2d:77:00:cd:0d:47:36:b5:c5:70:
                    72:e7:3b:e9:cd:58:04:aa:60:75:25:ce:73:fd:1a:
                    cd:79:f6:80:44:c4:f2:2d:df:bf:4d:1d:64:d8:c1:
                    f1:ec:0f:58:48:f1:e7:30:05:7b:1e:67:a6:be:ff:
                    a8:f6:3f:0e:8f:a8:2d:fa:3b:04:ed:14:ae:4b:ae:
                    a8:17:cb:e2:c9:c7:1b:d6:54:1c:f2:23:71:4e:d9:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:76:99:27:F8:1F:0B:4F:8D:97:1D:1C:DD:22:37:F9:66:9E:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:de:1b:2f:45:02:27:9c:e6:8d:ef:a8:a4:bf:40:4e:dc:24:
         9e:40:2b:45:cd:e2:9c:0b:39:42:c3:9e:9a:e3:58:63:60:d7:
         15:c3:0c:8a:1b:46:96:72:30:a4:c7:4d:49:f1:dc:1f:3f:32:
         e4:1e:9e:a5:0d:88:e0:3a:e1:05:5d:79:09:13:34:ec:da:33:
         74:3a:06:50:ca:ae:5d:d9:c9:a2:fd:10:d9:e5:69:ab:9c:a1:
         b4:a0:91:ec:83:9a:f5:8b:66:76:18:44:ce:d6:e3:4d:a0:b0:
         f5:6e:a9:53:14:7c:e5:a9:ae:ec:4f:da:97:87:44:bc:f7:bc:
         bd:9b:0b:a8:6e:2a:8b:05:2d:a5:fb:d8:e6:e3:14:ee:64:7f:
         19:2c:ae:7c:b2:00:58:7d:d3:40:82:fe:5f:8f:b4:c2:b0:5f:
         41:8d:f4:f6:20:e0:e2:9b:d7:00:da:22:89:af:96:e6:a9:3a:
         a5:d1:28:7b:72:b3:c8:c1:0b:ab:5e:27:92:37:d8:83:8d:3a:
         c8:df:a8:a0:f0:2e:50:ca:48:69:d7:19:14:a0:19:fd:01:25:
         cf:34:c6:a0:f8:95:c3:83:23:5c:15:a6:09:53:20:34:04:6c:
         f3:ae:5b:4b:2e:62:4b:1b:f4:26:bd:f1:b6:e5:a5:fa:4f:29:
         8e:06:e6:f5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbLQVWU45Ip2U2hn3okQ9qiZ8+7YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZmMwYmJiOGUzNGNkYTUyNjZjM2ExOTAzNGE0NjQ5ZmFj
OTI1MmYzY2ZlNDhmOTQ3ZjYyYzdhYmI0ZTVlZDlhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8hPlva1VZV9Sf1Xl2o7+Rx3Ye7ieCLczsdCUw9/qtEzzV
32doI4uHYD54OnfqcETVuF+jYNMJMg4P0LPt+Z/tWdtAifhECOn2idImZp+Xy1/3
4tVB+6wJI4zYPYs45WJ5n4tmOIy/Q9zvdtUhOAaMAHGJKpXbshAkkKlYYcAUfkJI
3mLgJ6szemN0eDOA4yNTeVIIsWJEqu2dvrIfPH01mRGX3ggzn+jxLXcAzQ1HNrXF
cHLnO+nNWASqYHUlznP9Gs159oBExPIt379NHWTYwfHsD1hI8ecwBXseZ6a+/6j2
Pw6PqC36OwTtFK5LrqgXy+LJxxvWVBzyI3FO2QaXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy1B2mSf4HwtPjZcdHN0iN/lmnkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiYzI4OWM4LWJkNmEtNGY2My05YTcyLTQyNzc5MDExZjhiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHAnUgwDQYJKoZIhvcNAQELBQADggEBALPeGy9FAiec5o3vqKS/QE7cJJ5A
K0XN4pwLOULDnprjWGNg1xXDDIobRpZyMKTHTUnx3B8/MuQenqUNiOA64QVdeQkT
NOzaM3Q6BlDKrl3ZyaL9ENnlaaucobSgkeyDmvWLZnYYRM7W402gsPVuqVMUfOWp
ruxP2peHRLz3vL2bC6huKosFLaX72ObjFO5kfxksrnyyAFh900CC/l+PtMKwX0GN
9PYg4OKb1wDaIomvluapOqXRKHtys8jBC6teJ5I32IONOsjfqKDwLlDKSGnXGRSg
Gf0BJc80xqD4lcODI1wVpglTIDQEbPOuW0suYksb9Ca98bblpfpPKY4G5vU=
-----END CERTIFICATE-----