Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
File:                     bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa (raw, json)
Hash identifier:          bL0pGPpfmx7WvuTVMpE358BmhTU0WM+nzQPYjl9LzcM=
Subject key identifier:   EA:1D:A9:14:56:DD:D9:5D:5F:DC:8C:86:CE:C4:1E:4C:F3:78:35:5C
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       6093540FBF76C1F55FBD40B2FCD878A1D7A4710A
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:93:54:0f:bf:76:c1:f5:5f:bd:40:b2:fc:d8:78:a1:d7:a4:71:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=20fd31b19c58c1cf188ad7ceb9ee5b81b182765acba2d4a34efa92e21f77ac12, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:f0:3b:4f:9e:ba:4d:5e:63:a2:c8:7d:4f:
                    35:f4:e7:4b:a9:83:00:8b:07:6a:ce:e0:06:8c:48:
                    9a:2e:ec:c5:1d:92:25:04:1e:07:1f:b6:8c:60:47:
                    d0:06:13:e4:09:12:4d:5a:52:57:30:c0:e2:fd:25:
                    1a:2c:a1:96:d0:8f:f4:c1:22:09:f7:ea:a9:3f:e6:
                    42:99:d5:9d:9d:06:e0:29:c5:be:75:43:d7:b8:92:
                    75:ea:a8:a3:f4:01:d2:af:21:87:22:75:b5:d7:df:
                    d3:7c:0e:c8:29:70:7d:28:58:c9:f7:26:1c:6e:ef:
                    8e:af:42:1d:d6:96:1f:8e:e6:f7:ab:f3:9c:26:fe:
                    f0:27:e5:31:f9:71:09:2a:1c:e3:58:b5:e0:9d:5d:
                    4c:a5:2b:1f:e3:42:89:17:cc:80:52:8a:8a:48:98:
                    1b:06:9f:26:67:ef:d5:1f:29:7d:41:15:f6:a5:dd:
                    c2:b7:b9:4d:37:b0:71:fb:73:0d:e1:41:57:af:f6:
                    66:c2:c5:2d:74:60:a9:58:85:2a:c9:71:b2:da:98:
                    24:48:5f:b3:57:53:4a:43:8d:3a:56:d4:22:ce:1e:
                    a2:01:f5:13:1f:78:7a:e6:98:3d:2b:dd:e0:2d:bf:
                    1d:0f:e7:c6:95:30:11:dd:04:e6:c8:30:58:d7:2c:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1D:A9:14:56:DD:D9:5D:5F:DC:8C:86:CE:C4:1E:4C:F3:78:35:5C
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:52:b5:b5:04:84:7e:86:95:7b:6e:ee:ee:f6:53:e9:f8:d2:
         4e:98:fd:13:2a:6f:6c:b7:58:55:40:f8:82:cf:28:cf:e5:96:
         41:94:57:e9:ac:f7:28:13:3e:85:7c:e0:7e:16:ce:fb:af:94:
         f0:38:c0:3f:20:21:2c:cd:34:af:23:3d:bb:6e:e0:0f:a9:44:
         a7:2b:fe:13:04:0a:ad:d6:83:9f:4a:84:6e:3e:c1:9f:7e:23:
         1d:4f:cf:30:23:1d:9d:bc:26:c2:58:a1:24:b5:97:a2:80:8c:
         98:14:50:54:59:73:7a:26:91:5d:81:33:bf:5a:f0:83:e0:a0:
         97:5e:04:d6:78:90:60:ad:a4:8d:3f:7a:56:41:80:0b:e1:7a:
         3c:e3:f9:53:80:de:7c:26:c1:5c:54:6d:31:ea:3e:10:95:3b:
         06:0a:4a:04:68:4f:b5:e5:f5:1e:ab:f0:77:93:5a:b2:54:e7:
         2f:b3:58:03:db:ac:ba:e6:95:29:fe:93:e9:f5:89:55:6b:78:
         99:51:d2:6b:f4:bf:e6:71:79:ea:8b:36:0b:b8:b7:43:5c:2c:
         ac:1b:d4:42:e5:7d:94:02:96:20:c3:c1:71:f0:0e:5a:b1:ec:
         32:42:ac:8e:79:79:9f:42:d0:07:7c:5b:48:c5:37:5b:5a:5d:
         8b:4b:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----