Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa
File:                     d281e50a-e2d2-49ec-b024-332c686b1f9c.roa (raw, json)
Hash identifier:          voYNOG23foar1kt/F5AAXhgzCx7SVfm1A3BF4S+fL/o=
Subject key identifier:   5B:0F:22:63:7A:CB:F6:B7:1A:CE:CE:7A:47:9A:D3:9D:E9:55:4E:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B0D934A2F48C2F2124E1681CA66F5554B06EE98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.170.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0d:93:4a:2f:48:c2:f2:12:4e:16:81:ca:66:f5:55:4b:06:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=9f1bfa2013d43334c77882b27bb51809a6c463f37f99f451333b788bbea4181f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:16:ed:8c:1d:d9:7d:c6:d2:1b:de:37:2d:
                    9f:9c:6c:eb:30:4a:99:23:d5:35:01:96:09:d2:3e:
                    89:4d:94:ae:d3:13:7c:6a:f9:74:58:6d:aa:79:08:
                    16:c1:d2:30:25:79:57:24:9b:41:17:9d:76:fe:e8:
                    9c:28:21:ab:9a:b4:49:e2:5c:68:96:31:9a:35:e6:
                    38:8e:3f:a0:b5:f9:dd:0d:a0:8d:39:1b:55:a9:87:
                    9c:4f:30:5e:72:09:64:9e:7d:07:0c:af:09:bb:21:
                    2e:09:87:3f:bc:ec:31:78:82:7d:d7:ce:5f:90:5c:
                    d0:7f:e2:74:b2:d3:95:ee:87:bf:e0:d0:fc:cb:6d:
                    f8:23:9d:6a:d1:74:4d:6d:86:22:82:45:b4:1e:21:
                    43:6e:5c:14:0f:47:4b:d4:61:f8:bf:55:7a:a5:f6:
                    b1:a3:52:f6:8d:e9:1d:6e:e8:88:ac:db:28:bd:e1:
                    c9:b0:f7:50:84:e2:a6:79:1f:f3:e6:88:d5:e6:a9:
                    91:6a:1e:e9:59:ae:f0:73:60:60:40:6c:20:24:d9:
                    4e:3f:62:f1:43:11:a2:8a:5d:59:4e:81:16:e2:5e:
                    18:83:7d:ca:79:0e:c6:42:d5:3f:9f:bb:d9:b9:ff:
                    1d:6c:6d:f8:74:da:b6:e6:6e:c3:bc:fd:e4:95:1b:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:22:63:7A:CB:F6:B7:1A:CE:CE:7A:47:9A:D3:9D:E9:55:4E:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d281e50a-e2d2-49ec-b024-332c686b1f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:90:08:71:cc:1b:0e:48:13:e9:b3:07:19:c0:7c:5c:16:
         bb:dc:90:6a:53:45:e0:9e:78:68:22:06:ff:cf:b3:2a:bb:9d:
         b6:c4:bc:41:d3:28:5f:8e:d5:90:87:1e:a7:08:20:18:11:32:
         37:11:13:68:15:58:ae:56:1d:eb:a6:7e:8a:e0:e3:70:ff:68:
         cb:3e:00:56:11:03:06:58:b0:5b:e7:49:5d:df:bc:6d:27:01:
         1a:dd:5f:4b:9a:da:79:80:04:1c:fb:ae:1b:fd:27:7d:40:af:
         b4:c8:73:d4:c6:35:73:9c:a7:70:c7:6c:c3:f2:b1:2c:b2:42:
         15:8e:4d:58:d2:da:9d:0d:23:b5:b6:aa:a2:58:b0:fc:64:c5:
         b6:d0:43:12:51:f2:9c:62:6c:0b:16:18:9e:20:6c:e6:08:3e:
         5c:0e:b5:cf:c1:fe:df:bd:d1:03:38:29:af:06:99:8c:6e:53:
         b7:a4:65:3c:64:96:c1:05:3a:13:b2:78:b4:3d:9c:ef:b1:63:
         7d:3f:e5:8c:4b:7d:7c:ad:f4:f0:26:ea:70:83:2e:10:a9:f9:
         14:a8:34:5a:6d:0b:e7:10:04:f7:22:4f:dd:03:e4:ec:8e:62:
         ed:8a:5b:cd:e1:ee:e3:2b:20:95:67:e8:f3:71:f2:71:89:65:
         26:c8:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----