Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1a0db-c6e7-4578-b508-84b15c96b526.roa
File:                     eeb1a0db-c6e7-4578-b508-84b15c96b526.roa (raw, json)
Hash identifier:          /xG8wLY0jcSfP3he7jUk/fD/GX/nbWdG7zN+l7dKHZU=
Subject key identifier:   7A:74:DF:0E:6C:AE:6C:66:BA:4B:EF:04:A0:B4:71:FC:3E:60:71:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26B680928CA4F0FABF9FDF6BCE861D5EE1A5D3A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1a0db-c6e7-4578-b508-84b15c96b526.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:80:92:8c:a4:f0:fa:bf:9f:df:6b:ce:86:1d:5e:e1:a5:d3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=ad7704644a86d8201fb471e845d6ece88ee67fb95b357732932767cd98f9a47f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:58:4c:ca:e7:8c:6f:f5:de:25:ed:78:13:
                    66:85:ca:c6:d1:8c:c6:95:35:85:42:53:09:3c:bc:
                    16:92:e7:6f:9a:ec:20:a7:62:62:9a:54:8e:c5:39:
                    9c:b2:72:ec:a5:2c:71:ba:6e:b7:9c:79:8a:d7:1a:
                    12:d2:a9:ab:f0:55:17:e6:34:a7:13:0d:c9:ba:ed:
                    e3:2a:37:4d:6b:27:b7:e0:dc:6b:c3:76:62:28:f1:
                    80:6a:f3:f3:28:1f:fe:b9:fb:c6:aa:41:42:bc:e8:
                    45:36:0b:65:f6:f8:f0:e5:e2:b1:52:94:61:73:e8:
                    1f:35:e3:f0:58:32:bc:1f:d3:9c:1e:61:a0:ef:f1:
                    33:5c:f7:f6:0f:ae:70:f0:a2:00:e2:62:eb:19:e4:
                    a1:60:48:06:63:c7:84:a9:1b:69:8d:4a:55:6e:30:
                    1e:86:dd:ab:c9:4c:3d:01:09:75:3d:6a:f0:aa:7c:
                    c0:6c:68:36:ff:ea:37:ec:8b:46:09:fa:fc:e7:0b:
                    38:d2:4d:d9:44:29:35:d3:02:6a:ad:6c:c4:8e:02:
                    5b:fd:29:aa:8b:ef:48:25:b4:08:36:9f:e4:43:b2:
                    31:00:58:f9:43:17:f8:66:96:60:be:68:2a:73:5b:
                    35:fe:ef:f9:57:f6:32:57:b0:4e:65:c1:c2:52:e4:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:DF:0E:6C:AE:6C:66:BA:4B:EF:04:A0:B4:71:FC:3E:60:71:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeb1a0db-c6e7-4578-b508-84b15c96b526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:d4:06:2b:7d:d3:f1:82:20:f9:13:56:09:da:42:45:5f:2d:
         20:ff:57:a2:13:3a:c4:75:61:eb:1d:ec:c7:9e:b7:6f:64:19:
         76:3d:d5:9b:25:3b:65:ef:8e:ea:03:c3:b2:49:a3:7e:61:08:
         f9:bb:d0:aa:7f:07:32:21:12:2d:66:f9:36:53:25:78:f9:94:
         99:75:27:40:b0:70:32:ed:5c:da:60:a5:06:e3:a6:01:74:c9:
         72:3c:fc:e5:be:16:84:6d:1a:69:4a:5d:6d:aa:65:fe:fd:a9:
         ee:36:7b:51:ae:6e:49:06:74:10:b2:4e:8d:d8:ce:3e:eb:8b:
         f1:55:cd:91:5a:62:3f:12:a2:ee:49:87:76:30:dc:e7:76:54:
         d3:94:80:9a:77:15:e9:20:09:56:75:5b:e0:7e:ce:18:3c:d9:
         a1:9f:74:1d:c5:48:73:de:ed:e5:80:19:16:e2:33:4e:f8:95:
         02:47:bf:37:f1:37:ea:9a:66:b0:b1:fe:99:ef:23:14:61:ad:
         a7:43:66:e1:99:bd:cd:c4:cc:cd:a6:4f:45:2e:10:c6:a5:91:
         e0:9f:38:a3:13:85:33:f6:0d:92:50:73:6f:f5:c8:af:20:4d:
         a3:d3:be:71:e2:0b:a8:fc:9c:b7:3c:55:3b:4e:8d:c0:e3:ab:
         17:36:3c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----