Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa
File:                     69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa (raw, json)
Hash identifier:          qADVvqwwGCxVldnvv9URCfD6jGHtNHJy/81ZolhtsrI=
Subject key identifier:   9D:25:25:31:12:D6:22:42:B2:00:E2:FC:05:61:9E:79:53:37:A2:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16834F7A8197189996540E0BC4EBE13976BB84CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa
Signing time:             Mon 14 Apr 2025 15:21:17 +0000
ROA not before:           Mon 14 Apr 2025 15:21:17 +0000
ROA not after:            Mon 19 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:83:4f:7a:81:97:18:99:96:54:0e:0b:c4:eb:e1:39:76:bb:84:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 14 15:21:17 2025 GMT
            Not After : May 19 23:59:59 2025 GMT
        Subject: serialNumber=5506365a72408611fc7cdc40612fc89c0b4cad7c63caa359625e0e14a9856441, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:5a:c2:4d:a3:fc:f6:20:13:2e:de:b5:b8:
                    ab:ce:ca:66:b9:42:8e:fe:e8:ee:08:d2:49:6d:c0:
                    08:92:3d:29:57:f3:73:e8:63:b8:d0:f4:10:92:a6:
                    a3:55:e2:ae:c8:ce:40:51:2a:7b:03:48:a8:46:99:
                    e8:71:1e:8d:a7:8e:53:ae:f9:f2:a4:9c:d8:80:24:
                    e9:54:f2:fd:24:4f:cd:05:c4:49:fd:39:4a:23:f6:
                    d6:8d:d2:bc:b7:56:5c:0d:25:85:9d:01:ae:43:e2:
                    02:1a:70:b8:bd:3d:e8:9f:d3:65:f1:da:4e:6d:78:
                    ea:83:c1:41:c6:65:e7:af:dd:97:eb:44:2c:61:1a:
                    2c:0f:86:45:b7:60:46:16:4e:05:bf:9b:d0:20:95:
                    59:fd:83:2d:d3:32:b9:73:b6:38:87:a2:b8:71:97:
                    58:e3:48:dd:be:72:9b:f1:67:e1:f7:d1:9d:36:0f:
                    eb:bb:9c:0e:07:43:81:6e:7b:2d:fe:24:ba:dd:d7:
                    19:f8:1c:93:04:d9:56:92:2c:b7:78:83:0d:83:97:
                    e5:43:eb:c3:14:7c:2c:d4:74:c0:07:9b:04:dc:43:
                    21:85:79:de:e7:1e:6c:39:3c:5f:30:08:b6:8f:36:
                    2c:d8:97:cb:48:0f:eb:09:82:c0:27:92:47:32:0b:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:25:31:12:D6:22:42:B2:00:E2:FC:05:61:9E:79:53:37:A2:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:77:4a:b6:ed:09:41:38:50:17:11:3f:3c:34:1a:7a:cd:91:
         fb:64:e1:e8:80:bc:9a:e3:d0:bf:20:8d:4f:ec:b5:ee:58:fa:
         47:1e:ed:e0:8a:4a:86:6f:86:3b:23:bf:bf:c4:b6:ce:fb:a4:
         ae:2d:bf:36:31:0c:8e:be:8c:fb:cc:0a:88:6c:67:5b:3d:80:
         08:69:95:1d:cb:e9:ec:33:9d:5d:39:37:15:ac:47:6b:82:fb:
         d8:5a:2d:ae:82:40:0f:71:3c:a4:c8:75:fe:e3:46:8a:16:94:
         eb:6d:b8:0c:03:a1:d3:e9:d1:99:b2:13:3a:19:c1:44:d7:16:
         bd:52:21:d5:cb:7f:63:25:83:87:3c:bc:ee:3e:af:dc:7b:86:
         fe:89:ae:1a:09:7f:d3:50:b3:f9:9f:df:4b:2e:d9:fa:e2:0b:
         f6:83:51:65:96:13:78:74:4b:fc:b8:41:a8:e0:fc:40:50:57:
         9a:4a:fd:ca:9c:a2:8c:e8:40:7e:60:25:cb:ec:33:ff:2c:41:
         54:72:7f:2f:ac:c8:19:67:10:3b:cb:32:a5:27:9e:85:e4:97:
         9e:80:92:c6:6b:18:df:bd:f0:d1:2b:d0:75:d7:07:b9:3e:e9:
         46:25:0c:2b:91:eb:b3:ca:96:fb:f1:a1:1b:2c:83:9a:89:fc:
         30:25:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----