Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa
File:                     eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa (raw, json)
Hash identifier:          sfKXe5tB2tWt+mD2s83ZdyxrjNzMq86TAukP064tFyk=
Subject key identifier:   64:05:AB:9D:08:BD:6D:75:9D:C0:99:E5:E8:CD:D3:51:67:BC:8D:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70F5ACBD81672307E4565CC5B0C5687008B4C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:ac:bd:81:67:23:07:e4:56:5c:c5:b0:c5:68:70:08:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=180e8169491f725b9203fc9932c862bbfe494bab8b4393894148489f67563784, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:f8:77:bf:75:15:9b:61:79:4b:25:af:16:
                    b2:41:78:5c:b3:8b:a0:07:ff:aa:56:db:a7:b1:17:
                    f5:ac:56:56:ba:00:74:27:d6:42:34:d8:64:af:2e:
                    fc:8e:25:b8:c6:fe:af:62:04:da:e8:1f:54:95:ab:
                    ad:5f:e2:a1:11:27:ed:3f:ca:52:93:78:d3:08:67:
                    48:5e:97:fa:b6:c0:c6:3a:c6:4e:72:2e:77:5d:d0:
                    b5:26:1e:a5:b2:51:f7:c5:ab:0d:8e:fc:80:4d:48:
                    95:42:1e:54:15:c3:66:30:a6:c6:09:2d:7b:d7:9e:
                    25:7a:52:5c:14:44:99:d3:ae:67:87:5d:8d:16:ff:
                    86:ae:1a:95:6c:4b:82:18:dd:77:23:e6:51:3c:78:
                    08:f7:1b:ba:38:e2:de:d7:91:2f:6a:40:7d:13:20:
                    ac:62:df:2b:a9:82:40:e8:d2:cc:3b:ea:28:9b:70:
                    ca:0b:2f:bc:fa:d3:8a:b3:b7:b9:e8:f7:5f:e6:d3:
                    60:dd:c1:53:dc:35:14:eb:c4:64:96:7f:d1:3a:5d:
                    88:b1:07:f3:0a:f7:37:72:39:15:6f:6d:09:19:d3:
                    4c:10:01:d3:ad:40:31:ec:57:6c:d6:24:6a:19:55:
                    88:83:2e:05:f9:bd:d0:5a:43:bb:a1:3b:3a:ea:20:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:05:AB:9D:08:BD:6D:75:9D:C0:99:E5:E8:CD:D3:51:67:BC:8D:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaca10ed-f765-4a76-9ea5-32f39b19c36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:8d:64:52:73:ca:97:71:65:8e:7f:e1:57:fa:9a:0e:22:
         44:50:c7:2a:4c:ba:ab:33:fb:c2:f5:fd:a7:43:7d:52:4d:40:
         06:af:84:3b:e0:c1:40:97:7b:cf:34:59:1a:41:95:b2:53:ef:
         00:db:f3:9a:dc:95:4d:77:bc:87:a1:5b:ab:d6:e0:40:7b:7f:
         75:52:4c:61:4a:f0:72:5c:75:41:60:1d:8c:cc:6e:d2:41:6c:
         4a:0e:06:3a:da:f2:61:f5:d2:a5:64:5e:b8:27:28:99:42:ee:
         d9:e5:bc:7c:c3:fb:53:44:26:06:57:c5:2b:a8:30:59:ff:fa:
         5a:e3:0c:ec:34:dd:35:b2:5c:68:ad:90:c6:30:bb:30:fd:1c:
         1c:0e:76:35:ff:ff:4d:b3:08:63:29:67:6e:a5:39:59:82:5e:
         9d:31:82:2d:37:e2:cb:19:79:08:b7:55:1c:04:56:7f:88:bf:
         7e:18:e0:1d:2f:bd:67:29:20:3e:29:0c:5d:1a:40:3b:d2:e5:
         a7:98:4e:db:8f:6f:9d:59:52:20:98:72:e5:b3:1a:e1:fd:da:
         a6:c7:f7:51:94:2f:e0:0e:7f:56:a6:87:fa:a3:19:c3:23:15:
         e6:53:fb:3b:25:59:25:c6:1f:a2:e1:25:c4:53:2e:3e:38:86:
         81:99:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----