Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
File:                     41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa (raw, json)
Hash identifier:          0ViXQOeRBIKEBIvlJTEyMpdOZC9bDPn4JJ4FfVZTZUs=
Subject key identifier:   0F:D2:71:91:BF:CE:37:C8:00:FE:37:F3:75:C2:87:F8:F5:B9:D0:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E0084981EB08510B778676CE8ACAE8F002F4C01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
Signing time:             Fri 21 Mar 2025 00:10:19 +0000
ROA not before:           Fri 21 Mar 2025 00:10:19 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.19.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:00:84:98:1e:b0:85:10:b7:78:67:6c:e8:ac:ae:8f:00:2f:4c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:10:19 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:c5:06:df:eb:1b:66:f1:50:6e:14:7d:91:
                    fa:22:49:30:64:de:03:04:cb:bb:93:b6:e2:20:b9:
                    bb:72:d4:6e:c7:24:32:f9:44:4f:96:5e:89:09:e2:
                    dc:b7:71:4d:5a:26:b3:51:12:c8:ab:91:98:94:3f:
                    0e:74:f1:04:e9:40:c8:4f:4d:16:e7:5f:78:03:fb:
                    b9:34:82:3d:b9:ae:66:96:06:38:5b:7f:77:6d:3b:
                    83:6d:76:05:9e:df:d9:0b:f5:c8:7b:4d:c0:58:12:
                    bb:df:77:13:4c:16:ba:cf:7e:0e:65:33:a7:7b:dd:
                    f9:e1:b6:39:ad:d3:81:12:89:c5:ab:6e:fa:7e:67:
                    e7:1a:7f:16:b3:ee:db:b0:0c:32:24:2c:63:86:99:
                    ce:21:66:aa:4a:27:70:43:46:59:b7:67:70:28:4c:
                    b3:35:e5:f7:db:fc:29:f4:3d:a4:62:39:f2:5d:3d:
                    a8:95:68:24:14:92:6a:87:64:a3:e8:cd:b7:d0:2f:
                    16:be:37:08:6b:7f:bc:a0:09:5e:ad:fd:e1:fc:cd:
                    15:c3:46:c6:93:b0:65:04:ea:8e:b4:7f:7d:6b:f3:
                    59:26:3f:1f:5b:ed:e9:75:dd:d7:03:86:3c:c0:e1:
                    10:7c:52:a7:93:a9:97:69:56:e5:de:b9:57:95:69:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:71:91:BF:CE:37:C8:00:FE:37:F3:75:C2:87:F8:F5:B9:D0:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:a9:e8:4d:64:a6:57:c8:c0:98:18:ac:13:24:e3:ee:e3:
         b8:b9:81:c7:27:78:5f:d0:94:36:90:f0:1a:ac:b1:81:44:45:
         a0:55:39:ab:06:96:e7:bd:8e:5b:a4:fd:ad:28:2e:e7:f0:9f:
         7f:61:73:15:8c:3b:c7:19:30:fb:e1:e7:85:1e:f7:17:d0:83:
         c7:aa:0f:b3:bb:43:ac:d9:5d:c3:fe:c4:fc:d5:eb:0e:b2:56:
         05:ee:ea:25:d5:d9:24:10:1f:1c:a7:2c:9e:99:c1:3c:b2:a5:
         5f:7d:f0:d8:99:51:4f:f6:df:1d:73:32:b1:c8:23:fe:72:55:
         1e:0b:84:50:c8:46:ac:41:8b:f8:53:c3:4f:48:df:a0:8a:f0:
         3d:dd:47:07:5a:d9:df:86:1f:f4:97:62:11:34:11:e6:5d:17:
         da:2e:08:6d:c4:4d:fa:4e:7a:25:15:07:e1:17:e2:b2:4c:48:
         d5:18:f1:47:3d:e2:62:df:47:63:0e:28:de:c6:77:ee:cf:2b:
         de:77:2e:83:c7:4e:cb:ac:ef:82:61:b4:a4:b3:f0:2f:67:b8:
         c5:1a:06:d8:f1:05:4a:47:97:97:24:a7:1b:62:43:3e:7a:60:
         0a:d1:6e:2a:1c:d1:08:83:e2:d3:80:21:27:cc:11:a5:c6:22:
         3f:94:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----