Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2403d3e2-d51c-4024-837b-566d9deaa1d5.roa
File:                     2403d3e2-d51c-4024-837b-566d9deaa1d5.roa (raw, json)
Hash identifier:          HmKN1Wskb6og5n1wdSS2qurNG/UUqUlAlp3XNyULqSo=
Subject key identifier:   11:DE:E6:E1:DA:79:F7:A2:8A:20:65:9D:04:4F:33:36:9B:F8:31:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B2330D3CD330DDB4FB801787FEDB501A3B60466
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2403d3e2-d51c-4024-837b-566d9deaa1d5.roa
Signing time:             Mon 31 Mar 2025 15:11:47 +0000
ROA not before:           Mon 31 Mar 2025 15:11:47 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.236.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:30:d3:cd:33:0d:db:4f:b8:01:78:7f:ed:b5:01:a3:b6:04:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 15:11:47 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f9fdfdfba04cdac13adc6072d626141a44632853763adcdf6cb4480ead61324f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:c9:f0:c8:5f:26:05:b1:77:e8:7d:54:69:
                    b8:68:ac:92:b2:c5:fa:0a:fb:9b:26:35:74:47:b1:
                    e3:c3:c6:d8:20:fe:dc:d1:77:b1:35:7e:6b:ec:08:
                    af:06:94:ff:76:5a:57:2b:47:60:be:c5:a1:82:91:
                    33:de:04:06:74:36:71:f9:09:20:54:a2:9c:6f:d9:
                    a0:5e:5d:d4:d0:43:1f:a1:93:22:4d:9e:8b:bf:26:
                    be:8b:69:4a:89:61:e5:1a:0e:d5:08:bf:cc:4a:2f:
                    e2:92:78:47:28:a1:55:09:2b:60:63:fb:7f:6b:2f:
                    b2:94:53:aa:c6:82:9b:46:3f:4b:e2:4c:a9:52:40:
                    42:d7:6f:a1:86:ce:64:0d:3c:e5:0f:a4:23:55:5f:
                    2e:e7:f5:02:e6:ed:af:5e:c4:4a:e4:0f:a5:4d:df:
                    ff:2c:14:48:91:c1:fd:8b:41:72:c6:b8:1e:37:58:
                    01:a5:9e:7c:4d:29:04:53:13:09:9f:bf:14:d6:9b:
                    26:be:cc:3b:b4:59:e6:b9:81:0d:25:2f:1d:a0:b4:
                    4e:fe:1c:1c:f2:71:81:12:d6:7d:03:26:e7:8b:ef:
                    17:ed:9d:dd:9f:6a:bd:77:41:bd:8c:79:e2:ef:9b:
                    d1:93:29:30:c7:50:4c:66:fd:98:b0:ce:fc:eb:69:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:E6:E1:DA:79:F7:A2:8A:20:65:9D:04:4F:33:36:9B:F8:31:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2403d3e2-d51c-4024-837b-566d9deaa1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:ed:a2:97:2e:58:68:8a:62:56:b5:0f:a6:e7:82:08:fa:44:
         b0:c6:1b:9c:12:6d:06:9c:b9:32:99:7e:85:e4:74:b5:ba:6c:
         f3:ff:21:4f:7d:86:3b:81:dc:fb:e7:fe:f8:7a:34:d1:bc:8c:
         1d:49:77:9a:53:9f:36:50:1d:92:90:a7:fe:a3:ba:7a:4d:2f:
         a3:67:2f:7f:f2:16:76:e5:7c:d4:0f:34:4a:9f:4e:14:b2:c6:
         49:91:4b:ee:a8:68:1e:73:44:5f:dd:c8:24:92:15:1c:24:04:
         91:15:bd:c4:ea:a8:8d:a0:f6:e6:2a:30:da:07:a6:40:eb:e7:
         5a:a5:69:4e:84:c5:6e:41:b1:2b:e6:5d:1a:37:10:0e:3e:35:
         4f:84:d2:4c:05:60:2a:0b:53:6e:3d:17:55:46:87:75:81:37:
         35:e7:aa:53:c6:70:40:ea:62:6f:c3:77:86:70:84:d9:0c:4b:
         33:fc:c5:ae:40:65:1f:ef:3e:5e:4f:3c:b2:eb:77:35:c6:94:
         5e:8c:aa:f1:e2:ca:5c:89:8b:f9:f7:82:79:04:85:c9:49:57:
         d4:d3:d8:cd:82:c5:bb:ea:bd:8e:c5:f0:ac:27:4b:c6:eb:bd:
         ff:d8:3e:95:e9:c6:2e:80:72:9e:8a:6a:74:e4:8d:15:82:fe:
         54:18:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----