Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
File:                     cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json)
Hash identifier:          +fes0mtciQ8VR+Gi13SbfpTeWfvzc7V0lc90PM5xQvQ=
Subject key identifier:   B2:F1:D7:1B:5D:E7:68:BF:C7:D1:49:17:1C:82:33:B2:3A:06:83:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59A2AFB17BCE34D9C9AB5D00CF3371EE45FD6EDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa
Signing time:             Fri 21 Mar 2025 00:10:32 +0000
ROA not before:           Fri 21 Mar 2025 00:10:32 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a2:af:b1:7b:ce:34:d9:c9:ab:5d:00:cf:33:71:ee:45:fd:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:10:32 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:ab:c2:5e:8d:b7:5a:f5:5d:b9:9e:3f:4a:
                    42:1a:a2:08:0a:77:77:ac:f5:cf:23:b4:d1:2b:98:
                    3a:ce:32:5a:97:7a:37:05:00:e5:a2:e5:52:d2:fc:
                    83:38:cc:a7:65:b1:ab:f3:b4:07:b3:f8:ef:93:97:
                    0e:15:ee:d8:6c:e9:54:cc:14:89:15:79:25:8c:01:
                    ed:e8:0e:4b:99:2d:f9:fc:6e:7d:dd:8f:72:fe:00:
                    64:0c:73:1b:30:78:f2:ba:a4:fa:4b:7c:7e:d7:fd:
                    34:e4:d9:eb:f5:19:c5:6c:f9:c6:26:ab:d4:12:6d:
                    1e:c5:73:a6:62:8a:72:f4:9c:57:4e:14:3e:f4:e7:
                    70:6b:0e:ea:92:fc:5a:07:0a:c1:f1:b8:8e:f1:35:
                    f6:8f:fc:57:64:cb:14:f7:e5:eb:e8:26:e2:65:75:
                    66:be:11:b9:be:d0:73:39:e2:1e:60:d6:5d:8c:74:
                    50:ce:a5:38:27:39:78:9b:cb:6c:e2:e5:2c:68:a1:
                    1e:0f:f0:f7:2d:2d:12:54:e5:33:9d:c0:83:83:d4:
                    4b:d8:7e:97:cd:82:78:c3:93:bd:20:b6:7f:bc:a2:
                    f1:2e:c6:83:68:e4:d4:57:80:ee:a4:f4:69:e6:37:
                    05:72:9c:b5:2a:6b:5f:9a:f4:80:68:29:42:01:8a:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:D7:1B:5D:E7:68:BF:C7:D1:49:17:1C:82:33:B2:3A:06:83:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:86:a3:a4:aa:45:70:19:06:2b:92:cd:cf:1d:bb:0a:bf:c4:
         6a:38:fa:90:44:ce:0e:a2:3b:32:c8:93:8a:a0:c2:3b:b9:a0:
         26:3d:1b:43:56:8a:85:9a:50:e9:0c:22:33:b9:09:8a:96:af:
         89:01:ea:9e:8f:8d:27:96:cf:d9:85:13:eb:84:42:a6:19:e0:
         20:12:7e:d6:f1:91:2c:26:01:42:d1:a3:85:b3:34:1e:f9:2e:
         a7:d1:9e:2b:47:47:ce:d3:13:97:20:e3:69:ea:4f:c0:e7:cf:
         4b:17:6b:33:3b:00:d3:5f:50:8d:4f:15:bd:3c:4c:82:4f:56:
         9e:33:71:96:21:4f:0b:8e:60:cf:01:1f:12:c7:84:2d:00:37:
         68:8f:2e:5c:64:9f:03:67:83:e7:6c:a3:03:db:bb:58:b9:38:
         92:bc:56:69:ad:7e:56:69:aa:c2:d9:0a:3a:80:95:1d:6b:1c:
         f6:12:0e:3b:1c:13:b0:c1:88:6f:3f:44:cd:de:7e:7d:58:2a:
         88:d0:a6:7d:f1:7a:56:2b:18:66:f4:1b:ff:5f:38:9b:62:8f:
         57:8e:c2:f2:24:57:c9:2f:7c:e3:37:44:fc:dd:24:34:14:fc:
         70:6f:b5:ff:4a:a3:e8:9d:12:e8:92:6b:12:f5:20:d1:88:f7:
         d0:35:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----