Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa
File:                     f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa (raw, json)
Hash identifier:          yjOq5e3bgHNdG7JSop71Xw2g5lvQFrKSyCp3ORFuaSk=
Subject key identifier:   0A:DC:14:FD:65:D3:C7:D0:A3:42:1B:BE:31:8C:B7:AC:21:0F:9C:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       541D8095BD50A500BF3DAADD182F9B9EF135009B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa
Signing time:             Sat 18 Jan 2025 00:00:00 +0000
ROA not before:           Sat 18 Jan 2025 00:00:00 +0000
ROA not after:            Sat 22 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.156.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1d:80:95:bd:50:a5:00:bf:3d:aa:dd:18:2f:9b:9e:f1:35:00:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 18 00:00:00 2025 GMT
            Not After : Feb 22 23:59:59 2025 GMT
        Subject: serialNumber=76abcf28a69d0b0fa913e6832a0c7a6f06fb7d6685f16ce68b84b8aef0280194, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:37:50:2a:7b:af:00:79:d4:34:06:05:eb:
                    29:a6:c2:9f:ab:46:e8:c3:f9:b0:d6:fe:f0:36:e0:
                    5f:49:19:68:c2:25:b9:f4:2e:c1:3e:9a:ed:29:ba:
                    c2:a0:8d:28:69:de:b0:97:16:9e:16:c0:f9:ee:d2:
                    3a:85:c9:45:68:d9:d3:f1:a3:0e:40:ca:f6:00:58:
                    f4:16:e4:5a:42:c0:e9:7e:59:88:82:c1:1c:c6:26:
                    f3:91:9e:4b:53:7e:cf:13:93:c1:e1:df:4a:0f:e3:
                    91:ad:19:3a:29:a3:9f:1e:3c:df:d7:93:1b:a3:bd:
                    70:a1:36:c0:26:39:71:1a:e6:77:2d:fc:f7:8d:8a:
                    bd:1d:fe:06:de:d4:c9:75:74:a4:30:f8:1d:8e:04:
                    f7:e2:61:31:e9:3d:d0:07:26:3e:86:89:46:84:c6:
                    96:56:31:a1:45:cf:77:43:f6:ad:7f:df:48:0f:4b:
                    ce:ed:a7:7d:29:d6:38:ca:f5:ac:12:25:d8:1f:60:
                    53:21:e9:8c:2f:b8:12:c3:28:a1:cc:f5:5f:80:ab:
                    56:e5:c9:f6:4d:9d:37:5d:2c:a4:4c:ac:9e:40:a5:
                    ce:f3:6b:70:1e:2e:ce:cd:1f:f4:52:5d:05:a8:77:
                    68:ca:af:d9:89:56:e6:66:70:0a:aa:61:66:10:92:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:14:FD:65:D3:C7:D0:A3:42:1B:BE:31:8C:B7:AC:21:0F:9C:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aac29b-3f59-4033-b72e-37b2aab7d1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.156.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:ba:f5:49:22:88:da:3f:12:62:76:c7:09:42:9b:ed:84:
         c5:b1:da:e5:35:e0:e2:ee:16:5b:4e:8a:52:3b:d9:88:a5:0b:
         47:74:93:b7:a8:00:84:1d:79:05:d4:3b:24:42:2f:91:bf:54:
         02:48:da:c6:62:a8:8e:29:14:00:d6:45:87:c3:c6:8d:a1:5f:
         2e:d4:cc:ca:bf:1f:6f:4f:e6:f8:08:f9:af:9a:9f:ae:4a:a6:
         ba:6d:37:ad:41:2e:ea:96:ca:dd:74:07:a5:88:76:6c:72:10:
         f8:3d:27:ba:76:73:5b:2c:63:a5:f1:b5:bf:d7:a8:1e:c0:05:
         32:14:f4:28:2c:85:5a:1e:16:77:7f:e5:5a:96:c2:09:13:a6:
         bc:0f:da:fc:69:58:e3:7a:ac:3e:a2:19:e4:13:f1:c9:6b:c4:
         e4:24:65:67:fc:34:af:2c:89:76:1d:73:f9:e2:f2:d2:db:18:
         11:03:6e:af:aa:ba:68:ed:02:9d:9c:f5:e0:fd:b3:cb:31:d6:
         da:10:96:3c:9f:25:fe:7a:4b:bc:3d:4a:c1:c9:a8:58:55:d7:
         a5:f1:51:5c:4d:5e:b8:b0:77:27:93:25:a3:0c:6e:58:53:8e:
         ef:6e:eb:a4:52:30:79:ce:ab:ff:c4:31:73:fe:27:ca:d7:09:
         d1:3c:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----