Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa
File:                     6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa (raw, json)
Hash identifier:          x3jAEYdIs9w2PQOPUWDTTf0FP73TppqIhRRAfvwuG+c=
Subject key identifier:   2D:84:8D:14:4D:19:33:E9:4F:71:E2:73:78:F6:3C:EB:87:6C:FD:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E90069F4685B2CAD13357C00974483B95A7944F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa
Signing time:             Fri 14 Mar 2025 00:31:17 +0000
ROA not before:           Fri 14 Mar 2025 00:31:17 +0000
ROA not after:            Fri 18 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:90:06:9f:46:85:b2:ca:d1:33:57:c0:09:74:48:3b:95:a7:94:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 14 00:31:17 2025 GMT
            Not After : Apr 18 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:0b:de:d6:48:fd:b0:0a:45:bd:90:58:3a:
                    97:af:9a:a7:72:09:d9:1b:4e:5c:7d:0b:8f:b0:01:
                    bc:91:a5:86:8f:9c:3c:66:df:53:1b:5d:08:c7:db:
                    fc:3f:32:81:f8:07:7f:b9:91:8a:36:d1:f2:63:da:
                    1f:38:63:9a:3e:b9:93:00:40:fd:c7:c5:8d:de:d3:
                    3d:23:ef:45:78:45:b9:58:c6:1b:66:3f:c8:25:76:
                    9b:69:e5:d1:0b:2a:5e:1b:db:7e:8b:47:08:ad:33:
                    43:87:1d:9c:3f:1f:5d:58:8c:db:d1:9e:99:14:3a:
                    cd:73:c7:d1:99:bc:90:7e:66:e2:21:f7:41:31:97:
                    04:c0:58:d9:a3:4b:ef:91:ea:4a:09:b3:75:49:ed:
                    09:f5:aa:81:39:0a:ff:bf:d7:5d:c1:18:98:e7:68:
                    8c:fd:bc:5c:f8:41:42:16:59:a1:ae:64:a0:19:7d:
                    c8:a7:7e:0c:42:dd:a5:96:fb:2b:8e:f6:5c:87:dd:
                    2c:d9:d4:f1:a2:6d:c2:64:16:07:dd:f6:db:2e:f3:
                    f4:69:4e:0c:bf:fe:9a:9e:cf:da:db:d1:4d:b4:03:
                    73:0e:45:99:da:80:11:0d:65:e7:69:6f:e9:b3:3a:
                    7b:19:48:6f:ba:2f:90:ce:16:c3:64:43:a1:27:76:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:84:8D:14:4D:19:33:E9:4F:71:E2:73:78:F6:3C:EB:87:6C:FD:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cc5e8d9-cf30-4383-8b63-0d0d47ac6942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:ca:15:b2:b4:f5:f1:6f:d2:dc:ee:37:c1:ea:5d:22:3b:
         03:84:64:11:61:f3:7c:5c:78:42:29:19:7e:7b:c5:f0:fb:1e:
         c0:e1:dc:f2:3b:f6:83:30:18:27:21:8a:68:5a:4f:45:14:92:
         fa:ad:02:2b:b1:d4:96:15:f0:40:cc:a4:09:fc:45:94:16:19:
         75:b9:8d:6a:c6:a8:09:eb:71:82:04:4d:1d:20:6f:83:54:73:
         ac:88:9a:1c:c8:ed:a5:44:4c:ac:3b:07:49:e0:50:1c:7a:7e:
         19:48:f5:d7:6d:01:a7:ae:58:39:95:b5:23:f2:cf:3d:4c:5d:
         b4:df:e5:42:9f:b6:2a:ab:43:67:a4:73:0f:f8:5e:b3:70:db:
         6f:9b:02:22:c3:59:4e:f4:7e:60:b0:6c:df:5a:25:13:cb:1d:
         1f:93:63:6c:e6:85:5d:59:52:9d:25:f7:c1:12:c6:72:20:8d:
         c3:23:22:c0:39:8f:45:9a:18:a1:13:2f:c6:f8:da:ca:b7:d3:
         f2:78:8c:d2:ea:91:e4:38:97:05:3c:b1:a1:dd:b2:a5:2f:86:
         40:0a:c2:6e:8d:c3:f3:db:0f:9d:36:76:49:d5:f9:25:31:9b:
         2a:aa:b4:b0:97:0c:58:20:55:fb:3d:4b:0e:c1:49:f7:7c:71:
         77:7a:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----