Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa
File:                     af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa (raw, json)
Hash identifier:          g0xZRPwop/XIfWkwuxQjiXsH0DBFv1IUtC5xH+P5OtY=
Subject key identifier:   F8:3E:EA:D7:44:A2:C5:69:00:4B:BC:25:84:56:92:A2:21:91:D7:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B4AE400B30E823296040133576242F9CA3FB45E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa
Signing time:             Fri 21 Mar 2025 00:00:20 +0000
ROA not before:           Fri 21 Mar 2025 00:00:20 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.114.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:e4:00:b3:0e:82:32:96:04:01:33:57:62:42:f9:ca:3f:b4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:00:20 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:81:05:7e:18:47:c9:60:17:04:ed:e5:db:
                    56:75:c8:71:01:6a:af:cc:d5:dc:6f:28:f1:78:bc:
                    3a:d0:67:74:21:e5:08:a2:0a:1e:5f:8e:2a:ad:b9:
                    73:b1:3a:c4:ee:29:af:d9:5a:cc:87:5f:da:f5:60:
                    f7:53:43:76:08:33:1f:d2:69:79:40:36:2a:b0:58:
                    68:c2:8e:9f:de:e2:76:73:0c:da:d3:38:43:25:75:
                    2b:fa:c9:2e:b7:f5:71:6e:8c:5e:ea:32:fd:f4:48:
                    99:0d:78:17:80:21:8c:89:b5:48:89:ec:1d:56:66:
                    e1:a1:d0:e8:d5:c8:8a:ee:05:9f:86:bd:eb:86:ed:
                    b6:5f:45:29:42:f9:89:54:c6:88:90:27:6e:30:5e:
                    09:92:a4:ed:21:f9:1b:a9:5e:84:2d:b8:4a:88:64:
                    1c:b4:e7:1e:d0:12:b6:2e:f1:49:7f:1a:82:17:f4:
                    05:0a:e7:89:99:60:8d:30:10:35:ba:56:eb:fc:7d:
                    c8:03:7b:5a:e1:b9:31:51:ce:79:11:7e:08:1d:c4:
                    c7:3d:a7:27:16:d8:35:91:e8:fe:a7:7b:1d:da:d6:
                    a9:53:1c:57:12:42:a8:cc:13:ff:fb:65:55:f1:4a:
                    55:a0:5e:28:56:e6:d9:45:8a:19:9c:14:7e:55:75:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:EA:D7:44:A2:C5:69:00:4B:BC:25:84:56:92:A2:21:91:D7:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:df:8c:a8:38:12:51:79:1f:d8:73:f4:a6:cd:86:9b:65:d7:
         a4:da:3f:86:bc:84:bd:94:fc:86:cb:25:f4:36:57:57:fc:f3:
         36:de:e4:3c:95:35:4f:81:c9:6e:e9:c5:ae:b3:36:43:51:50:
         86:fb:54:39:43:51:62:aa:cb:e9:f3:80:11:27:4f:96:d0:4c:
         0b:3e:6f:15:4b:aa:8b:e5:ca:d2:93:cb:36:22:d2:a8:f8:38:
         74:c8:09:64:e8:bf:b3:bc:50:dc:2a:0c:73:1d:eb:d2:7e:78:
         10:91:89:68:e9:f9:d6:67:95:27:55:01:a5:f6:63:f5:7a:73:
         d7:df:42:5b:60:31:ab:32:de:fe:b2:ad:38:9e:76:6d:0c:68:
         9e:18:d0:f8:50:e4:1e:f9:b1:98:9d:95:b5:c7:75:42:e0:97:
         56:d2:bc:15:1c:0d:ea:99:b3:10:5f:fe:9d:f0:72:a3:17:61:
         16:37:9c:5f:a3:5b:30:a5:58:78:7b:18:82:21:32:8b:84:4b:
         9d:1f:cd:75:55:0b:26:fc:de:25:6d:f7:80:dc:1f:77:3e:ec:
         a6:8e:f7:eb:8f:92:1e:9f:13:ff:26:24:03:c4:42:31:cb:99:
         d7:f7:27:c1:8c:36:f1:28:4c:38:13:8e:c8:12:80:37:18:85:
         c3:10:cc:b7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUe0rkALMOgjKWBAEzV2JC+co/tF4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAwMDIwWhcNMjUwNDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YjU3OTdkY2UxNzE2YTI2OWVjNmJmODAzMDlkOTM4MDA1
ZjI3MmY3ZmUzYzM3N2E5Y2NlZmZhZTJkOWZjNmJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBiYEFfhhHyWAXBO3l21Z1yHEBaq/M1dxvKPF4vDrQZ3Qh
5QiiCh5fjiqtuXOxOsTuKa/ZWsyHX9r1YPdTQ3YIMx/SaXlANiqwWGjCjp/e4nZz
DNrTOEMldSv6yS639XFujF7qMv30SJkNeBeAIYyJtUiJ7B1WZuGh0OjVyIruBZ+G
veuG7bZfRSlC+YlUxoiQJ24wXgmSpO0h+RupXoQtuEqIZBy05x7QErYu8Ul/GoIX
9AUK54mZYI0wEDW6Vuv8fcgDe1rhuTFRznkRfggdxMc9pycW2DWR6P6nex3a1qlT
HFcSQqjME//7ZVXxSlWgXihW5tlFihmcFH5VddE7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU+D7q10SixWkAS7wlhFaSoiGR12EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FmNzFiMGNiLWRkNDItNGMyNC1hMTNkLTk1MjRlOWVlMTI5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQcjANBgkqhkiG9w0BAQsFAAOCAQEAAd+MqDgSUXkf2HP0ps2Gm2XXpNo/
hryEvZT8hssl9DZXV/zzNt7kPJU1T4HJbunFrrM2Q1FQhvtUOUNRYqrL6fOAESdP
ltBMCz5vFUuqi+XK0pPLNiLSqPg4dMgJZOi/s7xQ3CoMcx3r0n54EJGJaOn51meV
J1UBpfZj9Xpz199CW2AxqzLe/rKtOJ52bQxonhjQ+FDkHvmxmJ2Vtcd1QuCXVtK8
FRwN6pmzEF/+nfByoxdhFjecX6NbMKVYeHsYgiEyi4RLnR/NdVULJvzeJW33gNwf
dz7spo7364+SHp8T/yYkA8RCMcuZ1/cnwYw28ShMOBOOyBKANxiFwxDMtw==
-----END CERTIFICATE-----