Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa
File:                     ef9566d5-9096-4d00-ac93-f3df448013d9.roa (raw, json)
Hash identifier:          xFEo8hQFxx5M6ah4ecXbQlfGBOtoFFY2wPtKf5IU2eg=
Subject key identifier:   55:A1:3F:28:4A:13:29:96:7E:45:AF:59:65:EB:84:B3:F1:1E:70:29
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       5C4FD98B783A329FDA5A299CC6883226CE0FA38E
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:3002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:d9:8b:78:3a:32:9f:da:5a:29:9c:c6:88:32:26:ce:0f:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=f6f9249cbd8ed4ec52fd16e1145aee6060ae1cb127f990babe70c3346ca40d77, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:e5:66:31:75:ee:52:90:56:d9:e5:0b:f2:
                    cf:1b:f6:24:c3:98:a1:0e:2d:fe:6a:fd:6f:42:e9:
                    5f:ba:1e:39:8b:37:df:ca:87:93:b7:35:4b:7f:ef:
                    81:f5:00:60:bf:c5:02:5d:d4:cb:23:94:f9:c6:39:
                    c9:34:07:2e:cc:9c:13:84:96:46:57:61:74:a0:03:
                    c2:34:2b:58:8a:81:a8:ee:81:8a:40:ba:9a:14:e4:
                    20:c8:0e:76:f3:dc:87:46:2c:d6:fe:ae:87:8b:e3:
                    f9:c8:aa:e2:72:98:4b:81:d3:63:29:ff:7f:da:63:
                    cb:d1:47:ae:c6:06:da:ca:60:fa:df:a7:39:f5:61:
                    0e:1f:72:14:02:16:6e:c1:32:da:2d:89:8f:97:83:
                    b3:7b:8e:a9:62:ac:a2:de:28:3b:4d:65:5c:bb:78:
                    94:31:2c:3a:bf:9e:c8:46:0f:f7:db:73:48:03:5a:
                    95:42:b3:d1:10:bc:85:a0:cb:32:60:e9:23:07:d8:
                    e3:ee:92:9e:10:e6:78:2f:5d:e0:55:36:c0:d3:91:
                    e6:e1:f0:24:94:5d:21:5b:ce:9c:01:47:5f:11:b5:
                    2a:96:e9:b7:52:bc:3d:0d:bb:27:73:52:a5:4f:95:
                    ab:4e:71:b4:17:14:5d:21:ce:ac:91:2e:c3:83:e7:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:3F:28:4A:13:29:96:7E:45:AF:59:65:EB:84:B3:F1:1E:70:29
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:b3:f3:45:12:f3:ec:af:4d:64:e2:f7:9a:15:05:f0:11:
         8d:96:b3:14:51:6d:20:5c:3d:56:01:54:2b:07:c0:19:b9:46:
         08:41:ec:7f:5c:90:18:84:b1:8b:56:10:aa:fb:cf:9a:2d:73:
         bb:c2:3c:bd:75:6b:dd:81:fa:d1:3d:c9:3e:20:44:05:2b:f6:
         88:1e:4c:d4:8f:49:75:d6:e9:cd:06:63:12:ec:8a:71:45:d9:
         c8:86:e7:a8:0c:eb:86:e7:38:f5:5e:1f:6b:b2:29:db:d0:a0:
         1f:a1:19:76:30:7d:b3:b4:b8:88:82:3a:6e:25:eb:1a:ff:c1:
         fd:9d:69:a9:ad:6e:ab:a7:b3:fc:39:eb:2e:bd:98:b1:a3:75:
         49:45:54:13:0e:fb:0b:4e:32:9b:e4:44:b5:de:39:cd:93:58:
         00:69:63:b5:54:4c:62:09:c3:ff:4a:1c:03:34:84:36:fc:8a:
         54:f6:2d:cd:68:6c:8e:22:35:b6:0b:47:25:a8:b6:ec:5a:a5:
         a1:07:3e:ca:d3:c1:ca:74:48:c3:87:74:6d:d8:65:9d:6b:12:
         4b:c5:8e:64:ea:c8:00:16:00:65:e1:27:0a:7c:6e:1d:1c:0a:
         0e:96:2f:f6:58:a0:c4:dc:9f:ff:f5:41:cd:33:92:aa:c4:ce:
         1a:43:6a:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----