Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa
File:                     e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa (raw, json)
Hash identifier:          gI6Jr4sJiwJ/DzO6GEVRc+ItdZDitHdiRphAOywHAiQ=
Subject key identifier:   91:13:6D:72:C6:18:53:FD:88:91:80:82:9B:48:3A:BC:ED:40:31:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50628AA3CF2FD097F608A7AED0A7FFD827ED8F8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa
Signing time:             Wed 12 Mar 2025 00:01:35 +0000
ROA not before:           Wed 12 Mar 2025 00:01:35 +0000
ROA not after:            Wed 16 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:8a:a3:cf:2f:d0:97:f6:08:a7:ae:d0:a7:ff:d8:27:ed:8f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 12 00:01:35 2025 GMT
            Not After : Apr 16 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:2b:f3:9e:05:d6:08:f0:c8:1c:e0:b1:db:
                    6f:f9:c1:c2:c0:7d:5c:c6:d8:03:fa:16:f6:68:92:
                    27:32:74:59:9b:99:f1:ea:b5:7a:61:69:6c:67:29:
                    3d:60:aa:81:84:49:48:d3:ab:0e:0f:a4:f3:78:1c:
                    26:23:f3:31:be:a7:29:86:dd:e0:fd:c9:d2:9c:57:
                    59:d5:0e:6f:13:8d:47:af:8c:db:11:54:bb:6f:13:
                    87:b7:86:30:cb:89:fd:c9:e7:24:ca:c3:e0:4c:b8:
                    95:93:24:3b:35:80:bd:dd:a2:7f:c1:d8:7b:63:14:
                    21:fc:48:c2:b1:fc:f4:ef:c9:82:e5:c5:35:b3:96:
                    2b:66:a9:25:bb:be:48:6d:d4:6b:7b:3f:77:5d:fa:
                    49:7c:23:02:fb:27:4d:3c:b6:29:ca:dd:87:cc:01:
                    8f:37:61:a6:b7:68:0f:1e:af:6c:79:74:74:3d:dc:
                    f4:10:46:c2:55:6b:fe:a9:7e:ff:a3:ad:4b:7d:0e:
                    b6:52:94:f0:4c:61:fb:a8:35:a8:ba:cc:be:b8:17:
                    f3:50:0b:a9:be:ce:47:2e:3a:a8:15:df:ca:bd:7b:
                    df:2e:1a:b5:97:7b:53:24:73:1b:1a:91:a6:e2:62:
                    db:dc:1e:39:7c:60:1a:a0:9e:6b:01:1e:f6:1d:aa:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:6D:72:C6:18:53:FD:88:91:80:82:9B:48:3A:BC:ED:40:31:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e76ba888-e1ac-48a5-816f-85ff90dc2f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:15:b1:90:55:cc:f1:28:16:fe:23:b2:de:00:0b:e9:d3:08:
         83:cb:21:43:f5:37:be:e8:7d:dd:5f:55:04:ba:56:02:5e:07:
         b1:d1:4f:94:a5:69:aa:09:28:a9:3a:c5:d8:6a:8e:a7:05:d1:
         9d:14:66:00:14:0d:29:b0:18:89:c1:e6:96:4a:ac:70:ae:60:
         2c:d6:46:57:df:41:0b:12:b6:21:82:fe:47:e0:58:65:60:1c:
         d3:e4:44:ba:ef:71:ee:3f:2c:7e:ba:d5:a3:9c:e7:96:ab:16:
         99:5e:3c:9f:6d:10:68:13:18:d7:d7:e2:5f:89:0d:3b:2c:ad:
         23:b0:03:24:2e:e5:bd:89:79:dc:60:56:0f:52:76:15:b8:50:
         49:78:e6:1d:4f:db:a6:d6:55:83:98:4f:58:ac:ef:1c:bb:5e:
         8f:81:2f:20:ae:4f:46:33:38:1c:57:ea:4f:7a:3b:19:ff:0f:
         4b:d8:4f:99:9d:f5:a9:56:26:1a:e6:1d:43:d9:fd:2c:3a:71:
         2f:76:36:d7:ea:6a:2c:3d:b1:75:94:65:d1:6b:61:5d:0b:2e:
         51:09:26:7c:38:d9:9b:e0:25:88:3a:b5:a0:ad:74:c2:9c:d9:
         6d:8d:6b:d9:99:37:15:ef:25:32:19:45:bc:c0:24:fd:65:2d:
         ce:a5:21:a7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUUGKKo88v0Jf2CKeu0Kf/2Cftj40wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAwMTM1WhcNMjUwNDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzFiOTZjN2VkNzljNzZlMzQ4OWVjNjI3YWFhYzk5ZWZj
NmRjYWRmNWUyMDEyNWIwMmMyNDNkODhiY2FiN2U0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7DSvzngXWCPDIHOCx22/5wcLAfVzG2AP6FvZokicydFmb
mfHqtXphaWxnKT1gqoGESUjTqw4PpPN4HCYj8zG+pymG3eD9ydKcV1nVDm8TjUev
jNsRVLtvE4e3hjDLif3J5yTKw+BMuJWTJDs1gL3don/B2HtjFCH8SMKx/PTvyYLl
xTWzlitmqSW7vkht1Gt7P3dd+kl8IwL7J008tinK3YfMAY83Yaa3aA8er2x5dHQ9
3PQQRsJVa/6pfv+jrUt9DrZSlPBMYfuoNai6zL64F/NQC6m+zkcuOqgV38q9e98u
GrWXe1MkcxsakabiYtvcHjl8YBqgnmsBHvYdquHpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkRNtcsYYU/2IkYCCm0g6vO1AMbswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3NmJhODg4LWUxYWMtNDhhNS04MTZmLTg1ZmY5MGRjMmY5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCfLzANBgkqhkiG9w0BAQsFAAOCAQEAghWxkFXM8SgW/iOy3gAL6dMIg8sh
Q/U3vuh93V9VBLpWAl4HsdFPlKVpqgkoqTrF2GqOpwXRnRRmABQNKbAYicHmlkqs
cK5gLNZGV99BCxK2IYL+R+BYZWAc0+REuu9x7j8sfrrVo5znlqsWmV48n20QaBMY
19fiX4kNOyytI7ADJC7lvYl53GBWD1J2FbhQSXjmHU/bptZVg5hPWKzvHLtej4Ev
IK5PRjM4HFfqT3o7Gf8PS9hPmZ31qVYmGuYdQ9n9LDpxL3Y21+pqLD2xdZRl0Wth
XQsuUQkmfDjZm+AliDq1oK10wpzZbY1r2Zk3Fe8lMhlFvMAk/WUtzqUhpw==
-----END CERTIFICATE-----