Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa
File:                     8b4d99c5-89ad-4008-a629-96e00cf5656f.roa (raw, json)
Hash identifier:          nM98UIXoQObx4PpUGgJKcZglbE+0nbDa5aDBeAH2++M=
Subject key identifier:   95:D3:8C:69:38:19:AF:44:50:50:7B:78:32:F1:49:3B:AF:4C:91:F2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       782F2AE622B4F476E27F801C4476EFA1539BD45C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.171.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:2a:e6:22:b4:f4:76:e2:7f:80:1c:44:76:ef:a1:53:9b:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=cd049767019512b0014b98dd5b4de3dbe0223fab1fb787f56d2f8863129d60ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:35:85:2f:b6:53:46:a9:bd:af:d1:52:92:ee:
                    a9:ef:a7:5b:38:44:cb:30:5b:39:40:2e:4a:a3:a4:
                    56:40:5c:33:a3:8d:ff:5b:c1:b4:18:8f:1d:85:6c:
                    d3:38:bf:a2:f8:ca:0d:ae:0f:62:41:f2:f2:a3:be:
                    d7:4f:c3:7a:f2:0f:fc:82:e5:03:81:b7:8f:ae:f8:
                    b8:d7:15:b1:09:45:7f:a9:7b:a6:8e:bb:2c:26:07:
                    07:3e:9f:e6:6a:67:6d:d4:ca:b3:9e:54:a0:77:65:
                    13:3d:f4:c8:9a:fa:6e:fd:4c:ef:98:6c:03:89:f6:
                    30:2f:9d:67:c2:d3:99:c3:0b:5d:91:8f:0a:17:6d:
                    24:64:44:70:c6:40:8e:a6:aa:f8:76:1e:24:cb:e9:
                    d7:ba:5e:e5:cf:f3:91:d8:39:b8:26:99:eb:01:46:
                    fb:a4:35:f0:0a:61:be:a4:43:fa:14:74:ed:53:67:
                    6f:60:d1:74:94:66:2b:ac:db:06:be:78:61:45:99:
                    34:0e:c4:fe:50:03:70:f2:42:21:29:d1:bb:79:53:
                    3f:2d:aa:9b:d4:e9:25:06:24:eb:c8:ce:fc:ae:28:
                    25:57:c0:eb:6d:03:68:90:f1:53:62:9d:2b:c6:80:
                    8b:61:13:dc:25:29:3c:cd:84:62:1f:c4:64:63:ff:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:8C:69:38:19:AF:44:50:50:7B:78:32:F1:49:3B:AF:4C:91:F2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b4d99c5-89ad-4008-a629-96e00cf5656f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:e6:97:ef:ae:61:fb:5d:3c:12:78:f7:73:08:db:38:6d:
         23:e5:0b:27:05:d6:e4:17:3d:92:28:ba:c6:71:b3:87:18:34:
         31:d5:ff:28:3d:31:69:38:8c:86:03:2e:50:52:b1:ac:24:68:
         56:16:97:5a:e9:13:b4:3b:13:6e:04:34:87:0e:33:e7:2b:fd:
         d7:81:1d:ca:09:b0:b4:f8:0d:54:d4:76:c4:b3:96:07:e4:95:
         3a:52:fb:ed:f2:52:db:ac:6d:96:c1:53:92:04:09:24:0c:d9:
         fe:13:c7:11:06:93:10:7a:67:eb:33:76:53:cd:25:3b:64:36:
         2c:a9:2f:e3:59:2e:58:8a:c8:a8:54:74:25:64:e7:43:6b:07:
         09:b0:eb:b0:1a:28:c8:0a:68:2e:8d:8b:db:6a:6c:66:c4:e9:
         05:98:fe:32:8f:21:1a:5c:c0:0b:fa:81:57:37:0e:22:89:cb:
         77:65:e5:48:a5:32:34:fe:45:56:b5:ef:6b:88:e3:bb:86:d6:
         ac:44:32:96:2a:0a:ec:89:ba:24:88:f9:92:63:c9:52:01:9e:
         17:79:27:c7:82:e2:30:09:84:3c:b9:70:2d:c4:2b:c6:29:06:
         b7:b5:e8:f1:62:76:a9:04:85:77:cd:74:16:e9:68:40:04:23:
         5f:ff:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----