Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed6d900b-23ee-4a21-87d6-2be668848027.roa
File:                     ed6d900b-23ee-4a21-87d6-2be668848027.roa (raw, json)
Hash identifier:          5/rCpQSk1JyEFbkQq4Ioo4/tnTM1Y0+Fhbwp/Nfq9to=
Subject key identifier:   84:A1:5C:8C:28:20:E9:66:B0:1A:D8:E4:65:B0:8C:CC:7F:2C:F8:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B09271E8FB032CA81FF504D43733A0F35B256AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed6d900b-23ee-4a21-87d6-2be668848027.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.112.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:09:27:1e:8f:b0:32:ca:81:ff:50:4d:43:73:3a:0f:35:b2:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=1e01da18459103ac478c1d6ab16a77b839884d88a7e120ad2f914ca138b91bc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:7c:f4:85:79:2f:17:9c:cf:a3:86:c0:9f:
                    6a:69:26:dd:b0:e5:ea:72:15:82:5f:ab:36:26:c6:
                    13:17:98:67:2b:df:0c:9e:3c:51:c9:87:72:45:e3:
                    f9:4b:2c:14:3d:0b:5c:6a:2f:cf:fd:70:73:24:31:
                    61:a9:c2:51:c5:0e:7f:ba:67:d8:ad:3f:4c:18:12:
                    05:c6:d3:d0:29:5b:4f:2c:9f:b6:32:a7:b3:f7:d0:
                    66:c5:da:5e:c5:ed:d1:8a:df:ec:05:2e:d3:3b:54:
                    ed:ef:30:1b:bf:a5:fb:c3:0e:ea:f8:84:90:04:e5:
                    be:47:40:5e:ce:f8:d7:40:6e:b5:10:8f:2b:6c:c0:
                    f2:6b:18:d4:9c:68:39:3e:c3:08:6c:0e:74:00:11:
                    6a:a8:84:f4:26:a5:ec:28:c3:53:54:83:48:96:31:
                    4d:51:73:50:bf:12:0e:9d:11:dc:16:14:9e:3e:2a:
                    a7:9b:ad:12:0f:1c:f7:89:5f:bc:91:32:7e:d4:eb:
                    8b:0e:99:f5:e5:0e:f4:5a:2c:37:4a:84:35:e5:b2:
                    0c:25:6e:b4:85:7c:67:96:e1:8c:55:27:dc:23:00:
                    23:2c:55:18:ab:5e:04:e2:e7:a2:0d:ba:f5:f0:bd:
                    c5:3b:f2:81:e2:ac:dd:6b:74:b9:66:0c:84:9e:6b:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:5C:8C:28:20:E9:66:B0:1A:D8:E4:65:B0:8C:CC:7F:2C:F8:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed6d900b-23ee-4a21-87d6-2be668848027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:35:47:46:ea:f5:c6:65:81:b8:13:1d:96:d2:12:bf:75:1d:
         3f:c6:28:07:9a:04:13:e0:97:49:33:0b:d0:25:1b:3b:a8:fd:
         d3:ea:43:6e:1a:3c:8c:03:3c:06:a2:98:1f:45:d2:a8:70:92:
         0a:32:10:66:57:23:b4:f0:f2:1c:09:6e:04:45:bb:a3:6c:72:
         a6:b4:c6:ef:4b:f8:70:6d:e7:95:db:85:b2:d7:78:25:62:cb:
         48:f6:4f:11:88:f8:9e:7c:b0:f1:41:d5:ed:21:50:22:44:c3:
         4c:bc:32:3f:0b:cf:b8:72:db:20:0a:e2:ab:b4:1b:a2:03:4a:
         e4:22:75:c6:de:60:a8:06:ea:28:dc:56:21:d0:a4:9f:30:6b:
         7d:46:3a:97:d5:5a:e7:ce:55:d2:d4:8c:3f:1c:14:9b:36:87:
         ec:b4:3e:57:64:06:a6:ac:02:66:22:8a:a5:b2:b4:f6:ac:90:
         d3:75:75:a1:cd:ff:0f:0b:63:24:01:e2:2f:45:9d:39:f4:04:
         50:69:de:be:23:3d:26:60:ea:99:3c:87:d1:45:48:34:86:42:
         34:ed:c5:83:83:93:19:12:00:af:00:25:65:4d:f4:e1:27:10:
         04:2d:49:7c:d5:34:c9:91:d0:0e:c9:b6:e7:41:70:39:88:9c:
         05:07:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----