Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
File:                     ef59c634-b428-4d89-99f2-8f22503d93d7.roa (raw, json)
Hash identifier:          jx3OdZxbESbhn3ThpEN8O2JEcy7nQ0nu7uMEIymW70Y=
Subject key identifier:   60:B5:CE:81:F9:D8:C6:8C:45:DE:39:6B:B7:9A:F7:56:55:1B:DE:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40622A378A447F13E69118644854D439684CB11E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        161.193.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:2a:37:8a:44:7f:13:e6:91:18:64:48:54:d4:39:68:4c:b1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=a1aa03844905a123e853421a669b23594f24185119a1edd5dfe42319267c0754, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:c1:bc:b4:67:b7:9c:28:5f:b2:ef:8b:0c:
                    6f:d2:98:ae:58:65:fb:f0:46:21:53:08:ee:96:ff:
                    34:2c:95:39:46:70:5e:fe:a2:35:94:90:5f:87:68:
                    6b:c0:77:51:b1:13:8b:d9:bc:a0:58:ba:64:c2:66:
                    ba:ec:88:f5:62:d0:f6:e5:23:af:7a:ba:c4:df:f1:
                    17:61:36:da:d4:33:fe:9b:e9:ca:35:57:db:65:a0:
                    62:dc:82:59:b5:9f:80:70:03:53:b2:b2:f1:23:0c:
                    ba:9e:f4:ec:ef:d9:6b:11:31:23:bb:ac:94:a4:32:
                    24:3a:6a:7b:42:dc:f8:15:9e:2a:cd:1f:cd:b8:e1:
                    b2:90:a5:91:c4:ad:cd:49:00:f0:22:3b:f3:a7:13:
                    c4:af:fa:a8:b4:80:ca:1f:26:84:b4:1c:1d:fa:7f:
                    10:36:fd:03:c9:fa:61:ea:ea:38:f7:60:91:18:17:
                    33:76:ae:a1:de:7c:0f:f7:1c:7f:aa:8a:bf:15:92:
                    15:a0:63:b7:c8:39:f2:4a:e7:04:df:c1:8e:9f:7d:
                    de:e2:7a:3a:52:30:fb:2b:aa:5d:7f:8a:8e:37:97:
                    c5:f0:fa:fe:45:93:58:2b:b5:4a:ff:e4:15:7e:28:
                    c8:4f:7f:3a:77:92:6d:ee:da:e9:28:45:2a:1b:8c:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:CE:81:F9:D8:C6:8C:45:DE:39:6B:B7:9A:F7:56:55:1B:DE:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef59c634-b428-4d89-99f2-8f22503d93d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:71:34:bd:c3:12:65:1d:4e:e7:71:b6:e6:56:91:bf:f0:
         f7:77:94:9b:d5:b8:cf:e6:bd:8f:81:36:b9:cb:14:3b:82:2f:
         1c:bd:83:44:c1:b3:52:40:62:2b:d8:f6:d4:0b:64:64:1a:e8:
         f5:6d:f5:27:e8:33:93:03:f0:39:ba:e1:24:db:ec:e4:43:5a:
         0f:a4:da:2d:46:c1:32:e6:ff:28:82:38:09:68:a9:fe:2f:87:
         09:81:dc:6a:c7:b2:8d:dc:d1:56:8c:7e:7c:9c:22:e0:1e:15:
         ca:19:f8:c1:4e:66:4c:d5:7f:d1:88:89:de:fd:02:44:a4:5f:
         76:68:51:a6:de:7f:00:3e:11:2d:a6:09:ba:0e:75:b5:0b:c8:
         94:9c:1b:ea:15:21:7f:af:20:7b:cc:a4:67:62:35:8f:b5:33:
         7f:01:7e:25:49:38:93:e8:b5:1f:d4:c2:94:3c:fc:b3:4c:e6:
         24:a5:9d:71:3a:0e:7e:1e:c6:29:2a:1e:51:2b:9e:91:59:0f:
         3b:02:f5:c7:10:7b:f3:67:9f:0d:4a:f0:28:18:55:9d:59:7d:
         46:68:50:21:c2:05:45:ea:58:c3:c4:90:d9:d1:67:05:3d:b0:
         68:2f:de:25:a5:75:b0:26:f7:cc:00:e1:21:98:1c:9b:6f:a6:
         4f:77:ce:62
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQGIqN4pEfxPmkRhkSFTUOWhMsR4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMWFhMDM4NDQ5MDVhMTIzZTg1MzQyMWE2NjliMjM1OTRm
MjQxODUxMTlhMWVkZDVkZmU0MjMxOTI2N2MwNzU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQF8G8tGe3nChfsu+LDG/SmK5YZfvwRiFTCO6W/zQslTlG
cF7+ojWUkF+HaGvAd1GxE4vZvKBYumTCZrrsiPVi0PblI696usTf8RdhNtrUM/6b
6co1V9tloGLcglm1n4BwA1OysvEjDLqe9Ozv2WsRMSO7rJSkMiQ6antC3PgVnirN
H8244bKQpZHErc1JAPAiO/OnE8Sv+qi0gMofJoS0HB36fxA2/QPJ+mHq6jj3YJEY
FzN2rqHefA/3HH+qir8VkhWgY7fIOfJK5wTfwY6ffd7iejpSMPsrql1/io43l8Xw
+v5Fk1grtUr/5BV+KMhPfzp3km3u2ukoRSobjPf/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYLXOgfnYxoxF3jlrt5r3VlUb3uwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmNTljNjM0LWI0MjgtNGQ4OS05OWYyLThmMjI1MDNkOTNkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWhwYAwDQYJKoZIhvcNAQELBQADggEBAHb/cTS9wxJlHU7ncbbmVpG/8Pd3
lJvVuM/mvY+BNrnLFDuCLxy9g0TBs1JAYivY9tQLZGQa6PVt9SfoM5MD8Dm64STb
7ORDWg+k2i1GwTLm/yiCOAloqf4vhwmB3GrHso3c0VaMfnycIuAeFcoZ+MFOZkzV
f9GIid79AkSkX3ZoUabefwA+ES2mCboOdbULyJScG+oVIX+vIHvMpGdiNY+1M38B
fiVJOJPotR/UwpQ8/LNM5iSlnXE6Dn4exikqHlErnpFZDzsC9ccQe/Nnnw1K8CgY
VZ1ZfUZoUCHCBUXqWMPEkNnRZwU9sGgv3iWldbAm98wA4SGYHJtvpk93zmI=
-----END CERTIFICATE-----