Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa
File:                     0624423f-0ae9-4701-8d7b-9f636c543aa3.roa (raw, json)
Hash identifier:          EMk3HGc2FEwG/ET20z9a1calvR0oWWyWlr6ImYUBlDo=
Subject key identifier:   22:7D:F1:43:72:F4:8E:D6:48:9C:65:82:E2:0A:80:CE:E2:BC:A0:5F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       018D2DD614901411359C3C41FAB4522AEFB59679
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa
Signing time:             Sat 29 Mar 2025 00:22:06 +0000
ROA not before:           Sat 29 Mar 2025 00:22:06 +0000
ROA not after:            Sat 03 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.23.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:2d:d6:14:90:14:11:35:9c:3c:41:fa:b4:52:2a:ef:b5:96:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 29 00:22:06 2025 GMT
            Not After : May  3 23:59:59 2025 GMT
        Subject: serialNumber=fcff17b3a35eca98554db4b37c9379bd259342f13b07f0b7606a27658385acfe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:5c:fa:0a:10:1e:b7:e7:f4:cc:7a:e7:41:
                    87:57:4f:ed:f9:cb:1f:67:ca:ed:92:b3:29:b7:07:
                    e7:76:00:90:ab:3f:73:c9:4c:09:3d:c9:bf:ac:0b:
                    61:0c:02:a0:46:42:e6:93:d3:00:2b:4f:13:0d:33:
                    77:df:1b:b4:65:b6:5b:59:fc:4a:6c:53:2c:6b:47:
                    d3:f1:9c:d9:97:bf:b1:c8:66:d8:58:2a:76:4e:94:
                    20:c1:a6:13:57:92:7b:28:c8:48:b7:08:e6:cc:29:
                    8d:a7:ea:ad:1f:21:96:ab:fb:1f:26:1a:4b:bc:36:
                    b7:87:a8:ef:4b:8c:b1:5e:43:c7:47:84:d9:61:6c:
                    20:55:1c:e5:d6:70:2a:da:db:89:f9:81:90:74:e1:
                    4d:48:5a:da:5c:4e:09:db:de:87:07:0a:9f:2c:12:
                    a2:d2:a7:b6:e3:c3:26:2a:b1:5c:98:79:d2:af:bf:
                    3b:eb:80:f2:10:fc:0a:06:1e:e1:5d:65:76:67:0f:
                    82:8b:f6:cb:41:1f:71:67:b5:52:8b:0e:24:40:5d:
                    3b:51:c8:17:2e:d6:e4:f7:a1:12:97:6b:dd:c5:ab:
                    fd:81:bb:6c:e5:a3:7d:09:8b:e4:be:4a:fb:56:ca:
                    b9:35:ad:95:88:9f:e6:5b:72:44:e6:71:7c:db:51:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7D:F1:43:72:F4:8E:D6:48:9C:65:82:E2:0A:80:CE:E2:BC:A0:5F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.23.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:7a:1f:fb:f6:57:b8:77:04:21:c3:5b:f8:0f:dd:0b:8f:
         0f:f0:89:47:ed:1c:b2:42:62:f3:0c:26:8e:39:f7:50:67:9f:
         7d:f6:5c:8f:94:36:ce:7e:00:11:b9:a8:b5:4c:82:f3:14:41:
         40:5a:63:f1:30:c6:68:f2:2a:56:f2:e1:b5:9f:ee:ba:32:15:
         d5:c7:6c:d6:4e:cd:17:d8:8d:00:7a:17:3e:5b:51:8f:d9:b8:
         64:f8:5d:d6:24:30:6b:ff:d2:74:83:86:d3:22:b8:9a:53:eb:
         73:c8:0c:54:8b:e9:78:62:50:dc:21:f5:0b:5e:91:7f:f7:ba:
         d9:6f:09:99:04:4b:d0:d0:41:cb:06:41:69:51:30:02:75:b5:
         32:08:5a:ab:25:ba:85:c0:f6:76:d0:cf:d5:47:97:c4:02:31:
         2b:2c:16:2e:6e:c2:b8:5f:40:98:2f:ef:4c:42:1e:b2:30:6e:
         4d:15:1f:6a:94:7d:58:12:0d:07:46:86:cf:8f:d3:e6:94:e7:
         3e:d5:8b:9b:4c:2b:b2:60:2e:53:55:03:e6:bc:0d:47:3d:db:
         4a:67:c6:95:b9:8c:0b:24:cb:de:19:bf:69:4a:8a:a9:28:7e:
         3f:24:29:77:9b:56:17:0d:09:35:28:c8:c6:cc:ef:d8:03:3b:
         85:e1:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----