Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa
File:                     1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa (raw, json)
Hash identifier:          C7uyUQcwWoMkDBOCleYB5RTGI2galMxhigWoGCKrSL8=
Subject key identifier:   01:5C:1C:F2:00:FC:C9:DF:22:98:79:4C:F4:EE:EA:B9:B8:E8:14:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A093078A0CB7AA5140B9901E3AB1519D7F4BBAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa
Signing time:             Mon 10 Mar 2025 15:11:17 +0000
ROA not before:           Mon 10 Mar 2025 15:11:17 +0000
ROA not after:            Mon 14 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:09:30:78:a0:cb:7a:a5:14:0b:99:01:e3:ab:15:19:d7:f4:bb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 10 15:11:17 2025 GMT
            Not After : Apr 14 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:8c:1c:3c:dd:00:b0:0f:42:de:68:b0:1d:
                    3a:2e:d6:b7:bf:d4:ff:f6:b1:42:1c:cf:80:a7:a4:
                    a6:34:75:05:1f:a2:ff:09:50:97:ef:38:6f:59:ba:
                    99:b9:75:a1:7e:87:e6:be:e0:41:cf:0c:3c:0f:2a:
                    67:6e:be:db:d9:4a:47:b5:2e:ee:67:49:2c:46:88:
                    f0:62:cd:27:75:af:56:4f:5d:c2:11:6b:df:78:60:
                    8d:3b:c6:dd:5d:1f:5f:85:89:79:1f:5a:cb:6a:cb:
                    18:81:8b:31:42:ce:90:c2:ba:77:d6:54:4c:3a:92:
                    e3:9c:ac:1f:3e:58:7f:6e:11:a5:b3:61:66:4d:d9:
                    e4:48:d5:e1:84:3a:b6:44:c7:aa:f6:86:c2:a7:f9:
                    9d:b7:1f:5e:1c:b2:b2:eb:53:81:28:6d:21:7c:23:
                    59:50:33:d9:77:12:cb:26:a8:68:3a:20:5b:a6:b0:
                    b5:2b:d8:a4:be:d0:cc:4d:28:9a:69:24:70:7c:92:
                    56:56:1b:f6:c8:35:f4:72:71:83:c2:64:d3:69:af:
                    f7:37:2d:a3:73:c6:69:b3:5e:79:23:e0:e6:fb:70:
                    df:06:82:41:42:64:32:8e:12:3e:e5:42:ec:c9:ac:
                    dd:32:79:95:ad:15:89:f1:8c:20:70:81:94:ed:f5:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5C:1C:F2:00:FC:C9:DF:22:98:79:4C:F4:EE:EA:B9:B8:E8:14:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:ac:80:51:7a:cd:1f:b4:59:b8:b9:78:49:69:50:18:14:
         1b:c5:ce:31:28:62:3e:7c:75:35:93:c5:87:2d:2b:06:39:35:
         fd:1e:ce:b5:21:a8:42:87:35:5e:4a:1e:2a:f6:b2:37:01:b5:
         65:b3:62:e5:e1:99:60:40:67:21:b8:2b:4b:c5:4d:96:e0:21:
         e4:6a:5b:e1:3f:06:0c:21:24:b4:8b:36:a6:de:cf:dd:9e:69:
         60:8a:72:55:c7:d7:97:e2:9e:d1:02:01:82:ee:b6:fc:ba:7b:
         55:b7:77:9b:d1:1e:46:59:bc:e8:39:f1:e8:f7:34:87:97:35:
         f9:9f:53:1d:35:af:52:ac:ff:e3:36:fb:7b:bb:c8:08:5b:be:
         ca:48:95:56:69:15:ef:5c:60:26:53:5a:c0:d8:e6:13:75:06:
         c2:6d:b0:df:db:36:a8:7e:fe:5d:2c:e3:bd:01:d6:ec:90:a9:
         e1:25:4b:85:9a:a4:12:c9:48:11:9e:1d:d8:53:a5:79:14:59:
         f2:be:9d:ac:3e:84:72:fe:d5:e6:04:b7:23:8a:fd:4b:b9:00:
         18:bd:fb:4a:86:0f:03:c2:40:ba:c6:f4:53:df:ef:cc:d0:44:
         25:c9:34:d5:40:54:ca:18:f6:d3:9d:34:ae:4f:b9:2b:6f:69:
         19:42:84:6e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOgkweKDLeqUUC5kB46sVGdf0u68wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEwMTUxMTE3WhcNMjUwNDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NDUxNGUwMTNlMzkwMjVkYmQ1MGRmZTI1YmU2ZDI0OWU4
NTQyODdmN2JiZDZjZWJiYTZkMTZiOTgwMDFjZWQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYmowcPN0AsA9C3miwHTou1re/1P/2sUIcz4CnpKY0dQUf
ov8JUJfvOG9Zupm5daF+h+a+4EHPDDwPKmduvtvZSke1Lu5nSSxGiPBizSd1r1ZP
XcIRa994YI07xt1dH1+FiXkfWstqyxiBizFCzpDCunfWVEw6kuOcrB8+WH9uEaWz
YWZN2eRI1eGEOrZEx6r2hsKn+Z23H14csrLrU4EobSF8I1lQM9l3EssmqGg6IFum
sLUr2KS+0MxNKJppJHB8klZWG/bINfRycYPCZNNpr/c3LaNzxmmzXnkj4Ob7cN8G
gkFCZDKOEj7lQuzJrN0yeZWtFYnxjCBwgZTt9QP/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUAVwc8gD8yd8imHlM9O7qubjoFCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiMGZmMWY5LTY2YzYtNDIzOC05MDhkLTc4ZWY1YmFiMjBiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2BTANBgkqhkiG9w0BAQsFAAOCAQEAODqsgFF6zR+0Wbi5eElpUBgUG8XO
MShiPnx1NZPFhy0rBjk1/R7OtSGoQoc1XkoeKvayNwG1ZbNi5eGZYEBnIbgrS8VN
luAh5Gpb4T8GDCEktIs2pt7P3Z5pYIpyVcfXl+Ke0QIBgu62/Lp7Vbd3m9EeRlm8
6Dnx6Pc0h5c1+Z9THTWvUqz/4zb7e7vICFu+ykiVVmkV71xgJlNawNjmE3UGwm2w
39s2qH7+XSzjvQHW7JCp4SVLhZqkEslIEZ4d2FOleRRZ8r6drD6Ecv7V5gS3I4r9
S7kAGL37SoYPA8JAusb0U9/vzNBEJck01UBUyhj20500rk+5K29pGUKEbg==
-----END CERTIFICATE-----