Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa
File:                     ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa (raw, json)
Hash identifier:          89q1GfEE03EN27i6r9UL9BiwqQcVDvj8NHnF6tvrlbY=
Subject key identifier:   B1:81:D6:8A:B9:5D:7B:D6:BB:A1:4B:56:84:D7:B5:8E:44:04:ED:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A7C00D2CBC87710CB92CF6D71859251E302CAF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa
Signing time:             Wed 15 Jan 2025 00:00:00 +0000
ROA not before:           Wed 15 Jan 2025 00:00:00 +0000
ROA not after:            Wed 19 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.224.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7c:00:d2:cb:c8:77:10:cb:92:cf:6d:71:85:92:51:e3:02:ca:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 15 00:00:00 2025 GMT
            Not After : Feb 19 23:59:59 2025 GMT
        Subject: serialNumber=90501b182ffbaf531c32967873c1bea5476f7cb7f9147068269515a9b9012626, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:67:15:f4:c3:b3:28:d4:85:b7:6c:0c:40:
                    85:7d:13:59:cf:26:64:ca:4a:1f:36:f9:c8:23:bc:
                    cd:fb:14:65:e5:f7:46:46:f6:df:cf:4b:e1:db:a5:
                    5f:d0:68:0d:5b:33:d0:f0:00:f8:9f:a9:a2:50:8c:
                    d6:4a:f4:e4:de:dc:79:c0:15:cf:e0:fb:32:a5:18:
                    b9:a4:58:bf:47:72:34:bd:9f:a6:ce:c6:27:6c:3c:
                    6b:29:c5:da:12:8d:13:0e:62:5e:2a:07:cf:82:63:
                    95:fd:0b:67:1d:5c:d0:b6:8e:2d:58:e1:4a:1a:9a:
                    82:7f:a5:6e:76:45:40:40:86:c5:ed:cf:f6:92:c2:
                    bf:da:a4:71:d6:04:a2:fb:90:28:13:ea:b3:e1:76:
                    c2:9d:6c:5a:92:3b:7a:2e:29:6d:38:67:45:ff:f1:
                    e0:66:46:cd:49:1e:ff:2d:c5:eb:3c:ba:ed:6d:d3:
                    27:66:ab:9b:f9:bd:1f:fc:1e:6c:ef:61:f0:e4:63:
                    cb:45:70:ee:3c:01:3d:b2:fa:57:5e:6c:8d:34:38:
                    6b:1d:83:26:0e:1c:3f:73:6b:68:7e:ce:a3:b9:ed:
                    5d:96:df:63:a9:ee:b7:18:41:e5:b4:43:5f:38:91:
                    68:6d:c5:34:c6:82:31:18:6d:cd:66:44:e5:71:b1:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:D6:8A:B9:5D:7B:D6:BB:A1:4B:56:84:D7:B5:8E:44:04:ED:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:5c:dc:e7:05:5a:2b:0e:fc:cc:22:77:12:6b:e1:b3:e8:
         e2:40:7f:53:14:d1:cc:48:f3:ee:49:23:90:2e:c6:31:0e:3f:
         59:87:c3:63:f5:b6:10:1f:b2:e8:3b:74:b4:cd:8a:87:7e:c8:
         fa:84:51:9d:cb:51:47:14:f3:93:65:4b:dd:b6:08:f7:5c:d4:
         03:e9:09:fd:40:d2:5b:70:3d:b6:73:06:6d:43:60:db:f0:5f:
         e8:8c:aa:a2:ce:fc:dd:0a:2e:f3:06:e4:4b:4a:c7:e5:fe:47:
         a8:62:d5:71:7c:d8:05:b5:aa:4c:69:8b:f0:60:c8:92:1e:4a:
         38:b8:9f:34:39:06:b5:81:75:fa:08:a7:23:56:d3:62:99:b2:
         c6:ba:46:7a:cd:13:0d:7e:9c:9a:cf:97:43:c5:25:a6:5b:db:
         12:63:6a:49:79:83:40:e7:f8:6d:09:b6:fb:d6:41:5b:fc:b2:
         2c:45:63:69:1a:07:ba:75:79:aa:93:a2:5f:20:77:33:b0:ec:
         ee:93:23:b1:14:04:ed:d7:e5:c4:d5:0a:19:11:b7:5b:3c:05:
         66:2b:b1:b4:0b:5b:bb:7f:3b:e5:ce:44:95:8e:de:cd:6b:c4:
         c6:32:3c:21:8e:59:c9:b8:f2:df:b6:66:45:d7:62:3e:08:55:
         a3:18:96:5d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSnwA0svIdxDLks9tcYWSUeMCyvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE1MDAwMDAwWhcNMjUwMjE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MDUwMWIxODJmZmJhZjUzMWMzMjk2Nzg3M2MxYmVhNTQ3
NmY3Y2I3ZjkxNDcwNjgyNjk1MTVhOWI5MDEyNjI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbw2cV9MOzKNSFt2wMQIV9E1nPJmTKSh82+cgjvM37FGXl
90ZG9t/PS+HbpV/QaA1bM9DwAPifqaJQjNZK9OTe3HnAFc/g+zKlGLmkWL9HcjS9
n6bOxidsPGspxdoSjRMOYl4qB8+CY5X9C2cdXNC2ji1Y4UoamoJ/pW52RUBAhsXt
z/aSwr/apHHWBKL7kCgT6rPhdsKdbFqSO3ouKW04Z0X/8eBmRs1JHv8txes8uu1t
0ydmq5v5vR/8HmzvYfDkY8tFcO48AT2y+ldebI00OGsdgyYOHD9za2h+zqO57V2W
32Op7rcYQeW0Q184kWhtxTTGgjEYbc1mROVxseaXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUsYHWirlde9a7oUtWhNe1jkQE7dkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VhZDM3YmYyLTdhYWYtNDlhZi1hMmZhLTBkMmZlOTJhMjAwZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAP4DANBgkqhkiG9w0BAQsFAAOCAQEAKX1c3OcFWisO/MwidxJr4bPo4kB/
UxTRzEjz7kkjkC7GMQ4/WYfDY/W2EB+y6Dt0tM2Kh37I+oRRnctRRxTzk2VL3bYI
91zUA+kJ/UDSW3A9tnMGbUNg2/Bf6Iyqos783Qou8wbkS0rH5f5HqGLVcXzYBbWq
TGmL8GDIkh5KOLifNDkGtYF1+ginI1bTYpmyxrpGes0TDX6cms+XQ8UlplvbEmNq
SXmDQOf4bQm2+9ZBW/yyLEVjaRoHunV5qpOiXyB3M7Ds7pMjsRQE7dflxNUKGRG3
WzwFZiuxtAtbu3875c5ElY7ezWvExjI8IY5Zybjy37ZmRddiPghVoxiWXQ==
-----END CERTIFICATE-----