Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa
File:                     ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa (raw, json)
Hash identifier:          u6uu54ZmVyLKstruHnoGyf8AT90W6PHEXOw5C7gwp+E=
Subject key identifier:   63:EC:29:F6:52:06:F1:75:DF:C6:53:95:80:CE:A9:D4:57:E8:E8:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58BF92098783C2FD5D64A7C83D50F55DDA72B4F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bf:92:09:87:83:c2:fd:5d:64:a7:c8:3d:50:f5:5d:da:72:b4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=bd5459343f76fa636c5789145e0828778e9189c82cb7dd760afcf4d28af5296b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:32:43:8f:91:db:c9:cc:c3:3e:f6:c7:05:
                    97:12:eb:08:cd:d8:e3:7a:d0:ad:59:00:85:61:4e:
                    ab:51:85:73:8b:8d:85:92:b4:8a:d4:06:50:bf:17:
                    18:17:4d:86:b4:39:be:a0:f5:62:b9:89:af:34:62:
                    7a:7b:0c:56:02:83:8b:ee:83:37:7e:5a:c0:72:03:
                    65:6c:7c:8c:60:25:b1:87:19:77:33:1c:7c:43:b6:
                    df:19:7c:8a:04:ea:69:f7:b7:62:d5:60:f0:7a:77:
                    4e:10:b8:c2:6d:a2:9f:f1:fd:8b:40:8e:71:66:1b:
                    33:fa:7c:00:aa:76:5a:83:df:09:b3:18:76:cd:56:
                    42:a9:2c:3b:59:b3:60:a5:95:5e:7d:f3:7e:60:6e:
                    2b:4a:99:47:78:24:75:5b:b6:ae:3e:e4:8c:d6:8a:
                    7c:6e:b6:dc:f8:60:29:d7:58:18:bd:0b:1f:61:c0:
                    61:f2:24:24:b9:5d:f6:79:ee:0d:86:e5:e3:63:1b:
                    86:2b:f2:77:cc:76:e3:00:76:8f:d2:14:5e:40:cf:
                    0c:21:8e:1e:83:27:da:b0:ef:1c:79:84:3c:42:cb:
                    a9:bd:86:38:39:03:28:1d:99:55:47:25:96:83:98:
                    6a:80:bf:c3:70:27:c5:c4:53:09:23:d9:ba:6e:e3:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:29:F6:52:06:F1:75:DF:C6:53:95:80:CE:A9:D4:57:E8:E8:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc963e2-4b9c-4ede-ba23-8ab86fef5ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:b4:52:03:de:0c:d9:9d:28:64:6b:51:6d:3f:e8:00:e3:c2:
         1a:f4:68:42:f4:26:db:f7:67:fc:0f:ab:e5:ad:c3:51:9b:9f:
         00:82:87:d7:85:5d:4a:8b:8d:0e:09:bc:c3:09:44:a4:14:9c:
         86:81:46:48:9d:bb:02:1e:8d:16:68:4d:9a:4b:88:aa:2e:33:
         54:36:3d:0c:3f:a2:65:c0:0c:1c:5c:e5:86:d4:58:41:8d:d3:
         46:98:97:a2:5b:ef:75:6c:9d:be:88:36:37:36:0c:6d:ee:d9:
         62:7d:d1:b6:c6:b9:f0:5d:e8:fb:10:2d:38:8d:77:63:e3:29:
         07:d6:2f:b6:62:65:f8:c1:43:e8:b6:ed:5d:7d:62:91:e7:43:
         e8:92:ae:56:f6:43:c7:55:03:bc:97:cb:24:b1:df:47:15:f8:
         4e:38:81:c5:a1:fd:56:75:a7:bd:52:82:39:24:28:a9:7e:28:
         b4:a7:5b:e7:cb:d4:05:4b:10:96:eb:d5:8f:a5:dc:a1:88:b8:
         7b:5d:dc:0c:21:5b:64:4e:02:62:43:54:1d:f0:f7:3d:07:be:
         6e:10:70:08:d0:85:c6:36:4d:48:2b:26:3e:f5:1f:b3:ef:7e:
         60:88:a6:6d:e7:7f:ac:c4:2d:39:bb:9a:f2:52:6a:00:23:79:
         f5:da:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----