Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e539df-4a4d-445c-bb2f-bb3a08c52cad.roa
File:                     43e539df-4a4d-445c-bb2f-bb3a08c52cad.roa (raw, json)
Hash identifier:          i5x+PeKfiLlK/+Pfj1SUQObWy4/U3jwS6o9p23JHxzw=
Subject key identifier:   75:7E:63:2B:C1:28:AB:B2:3D:F8:2F:FD:FF:34:B4:AF:71:56:EF:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C39317DDE3FFDDE5400308B2C75EA04FDF6CD73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e539df-4a4d-445c-bb2f-bb3a08c52cad.roa
Signing time:             Mon 31 Mar 2025 15:52:04 +0000
ROA not before:           Mon 31 Mar 2025 15:52:04 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        72.44.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:39:31:7d:de:3f:fd:de:54:00:30:8b:2c:75:ea:04:fd:f6:cd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 15:52:04 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=220c627f37fa376e89b011c2146411b591af666ea3bcb068652447874368e2a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:01:fa:63:6c:ee:1b:a3:ae:6f:40:ba:2d:
                    86:69:1c:77:67:1e:d7:e7:42:d2:7f:09:36:fc:02:
                    14:32:83:7d:72:ea:0f:98:3f:ec:36:d5:71:4e:5d:
                    c3:68:ca:56:52:59:5d:31:0d:a6:ee:2b:18:71:62:
                    8b:80:92:9d:5a:c0:6f:9e:bb:ec:f1:4f:dd:bb:12:
                    db:5c:b8:61:60:68:e3:51:50:82:b6:46:0e:f1:ba:
                    56:99:e2:98:bb:1b:80:d5:11:58:3f:e8:43:5d:13:
                    da:da:7f:4d:41:36:09:9d:42:9b:81:a8:5f:eb:01:
                    56:ae:12:57:39:0d:cd:bf:a1:fe:05:18:d1:4e:96:
                    ae:3c:5b:83:fc:19:b2:5f:9d:cc:b9:4f:1c:ee:67:
                    c8:ab:5c:3c:92:00:93:a6:0d:2b:93:9a:c2:24:c7:
                    82:de:fb:b0:39:0f:8b:07:3d:f3:48:43:36:bf:6d:
                    82:fb:a4:14:da:66:9e:13:15:50:eb:6f:d6:0d:e4:
                    1e:7d:58:4c:ae:6f:e1:38:f3:42:fe:ca:8b:0b:60:
                    d2:6c:25:e9:a4:2b:ff:0f:82:6f:6f:42:3a:d8:75:
                    85:aa:da:01:6f:7e:b5:c3:b7:3b:a8:e0:38:1b:c9:
                    7e:d1:f0:86:78:91:47:3d:24:3f:b5:72:fc:1f:81:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:63:2B:C1:28:AB:B2:3D:F8:2F:FD:FF:34:B4:AF:71:56:EF:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e539df-4a4d-445c-bb2f-bb3a08c52cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:d7:17:d3:4f:b3:5b:44:b1:b4:59:c5:f4:b2:d1:d7:7e:d4:
         8d:e9:2a:df:fc:26:3e:d7:15:65:5c:30:45:ab:3a:3b:be:b8:
         40:c0:79:84:20:dd:fb:b9:f2:dc:94:6f:b4:1a:4f:bc:6d:86:
         9c:a3:85:80:b4:6a:dc:18:a0:01:63:f4:92:5f:39:1a:21:85:
         63:dc:48:6f:61:ec:6f:8e:74:74:12:ed:40:f8:75:d0:5e:96:
         ad:1c:70:b7:6a:e9:9e:69:66:b6:c2:60:de:20:7a:4d:1f:94:
         3d:e2:94:ac:11:d6:e3:f5:3a:05:96:76:72:e4:74:0c:1e:a4:
         e0:ac:c3:94:be:a8:c6:a8:70:32:50:63:b8:07:2e:61:5c:53:
         9b:00:ed:f1:7a:e5:c8:24:8b:da:92:4d:43:f1:ad:b6:57:5d:
         2d:97:40:c3:6a:49:af:29:b4:65:2e:75:c9:d8:f3:63:12:59:
         69:2a:60:82:54:9c:4e:49:90:79:dc:b0:70:6d:96:ea:dd:48:
         be:3d:de:a7:10:4d:b7:b4:d5:82:07:81:8e:1d:75:bb:3c:c0:
         71:ff:c6:a4:8b:c7:06:3f:90:66:63:e9:1d:f6:5c:61:76:94:
         26:ef:3c:2d:a0:f5:30:32:3e:ae:d2:5d:9b:c2:b5:e8:e2:bb:
         5e:97:90:53
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbDkxfd4//d5UADCLLHXqBP32zXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTU1MjA0WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjBjNjI3ZjM3ZmEzNzZlODliMDExYzIxNDY0MTFiNTkx
YWY2NjZlYTNiY2IwNjg2NTI0NDc4NzQzNjhlMmEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpgAH6Y2zuG6Oub0C6LYZpHHdnHtfnQtJ/CTb8AhQyg31y
6g+YP+w21XFOXcNoylZSWV0xDabuKxhxYouAkp1awG+eu+zxT927EttcuGFgaONR
UIK2Rg7xulaZ4pi7G4DVEVg/6ENdE9raf01BNgmdQpuBqF/rAVauElc5Dc2/of4F
GNFOlq48W4P8GbJfncy5TxzuZ8irXDySAJOmDSuTmsIkx4Le+7A5D4sHPfNIQza/
bYL7pBTaZp4TFVDrb9YN5B59WEyub+E480L+yosLYNJsJemkK/8Pgm9vQjrYdYWq
2gFvfrXDtzuo4DgbyX7R8IZ4kUc9JD+1cvwfgTa9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdX5jK8Eoq7I9+C/9/zS0r3FW71AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQzZTUzOWRmLTRhNGQtNDQ1Yy1iYjJmLWJiM2EwOGM1MmNhZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVILCAwDQYJKoZIhvcNAQELBQADggEBAK/XF9NPs1tEsbRZxfSy0dd+1I3p
Kt/8Jj7XFWVcMEWrOju+uEDAeYQg3fu58tyUb7QaT7xthpyjhYC0atwYoAFj9JJf
ORohhWPcSG9h7G+OdHQS7UD4ddBelq0ccLdq6Z5pZrbCYN4gek0flD3ilKwR1uP1
OgWWdnLkdAwepOCsw5S+qMaocDJQY7gHLmFcU5sA7fF65cgki9qSTUPxrbZXXS2X
QMNqSa8ptGUudcnY82MSWWkqYIJUnE5JkHncsHBtlurdSL493qcQTbe01YIHgY4d
dbs8wHH/xqSLxwY/kGZj6R32XGF2lCbvPC2g9TAyPq7SXZvCtejiu16XkFM=
-----END CERTIFICATE-----