Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa
File:                     713d60da-dad2-49a0-b57f-6b63365113f7.roa (raw, json)
Hash identifier:          9CiSzXzWziFig3FdsNWjZqiJfxNEkFk6LNoHZ5gKwMM=
Subject key identifier:   16:F8:DD:63:7E:E1:4E:78:31:67:81:5F:05:8A:68:DA:A0:30:5F:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F4D8CE33965DD4298AD267FB52255E765CF126F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa
Signing time:             Mon 31 Mar 2025 15:21:20 +0000
ROA not before:           Mon 31 Mar 2025 15:21:20 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.22.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4d:8c:e3:39:65:dd:42:98:ad:26:7f:b5:22:55:e7:65:cf:12:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 15:21:20 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=3a9f02392df51787eab63012b0607fc35e6f6c4bf77849fc5e821b003dbd5113, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:30:aa:be:8e:de:52:75:af:b9:fb:a4:02:
                    51:63:a7:2f:fb:cb:cb:4f:4e:f9:c9:58:7b:ae:fb:
                    b4:18:ef:52:65:19:a7:35:3c:7e:86:19:3a:55:62:
                    3a:79:d6:79:11:75:e0:77:2c:be:ee:72:3f:a6:2d:
                    09:72:76:3b:f4:e6:eb:2f:0e:b2:01:40:9d:c4:cd:
                    14:7f:ba:1d:be:f5:64:04:99:17:82:ce:82:56:95:
                    a6:bf:15:b0:c6:38:7f:3a:30:7b:65:e4:d1:1f:ea:
                    fe:ab:fd:69:60:93:50:0b:ab:e4:66:5e:77:b7:49:
                    dc:4b:55:5e:91:5d:5b:b6:6a:c6:8d:b7:07:48:45:
                    b2:ce:94:07:35:1c:0b:4d:bc:ae:ee:92:c8:21:d7:
                    3a:1d:01:d8:1f:da:c6:e9:8a:0f:b8:f1:b1:c6:da:
                    d3:05:fc:ce:47:38:56:8e:97:5c:8c:3c:47:b8:bc:
                    6b:ae:8d:b9:fa:9c:82:1a:4a:54:b0:cf:99:54:9c:
                    48:53:66:22:88:5e:44:20:fb:11:36:ca:13:d4:71:
                    c8:3d:8f:7d:4b:36:43:46:1d:0f:6b:7d:c8:d9:cd:
                    1f:19:e6:ef:4b:68:34:ef:52:26:51:01:39:61:dc:
                    50:54:ba:a5:d6:1c:41:17:e3:6f:de:ec:bc:33:81:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:DD:63:7E:E1:4E:78:31:67:81:5F:05:8A:68:DA:A0:30:5F:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:61:8e:be:23:c9:c0:ce:f7:f4:f5:a4:50:37:1c:9f:ab:ac:
         8b:b6:0c:8a:20:f3:14:9b:20:3d:6e:dc:b8:22:b1:ad:91:94:
         53:68:f3:c0:7f:71:a1:d7:ad:4e:bb:43:23:07:ab:90:dd:c7:
         aa:b6:df:50:89:a1:d0:b5:e1:80:eb:33:f7:f9:f7:b3:9d:db:
         95:30:0c:8a:57:f1:44:43:6b:a3:08:02:00:0a:c0:3d:a9:67:
         49:f1:cc:ba:8f:2a:47:d5:c2:26:e5:9b:8d:7d:5b:35:d0:b3:
         6c:48:ee:cf:7f:22:47:fa:7b:cc:c9:fe:76:26:52:57:bc:3f:
         c5:89:0b:ab:10:83:3a:96:64:8f:73:db:c7:04:45:56:5d:0c:
         fc:50:ee:40:bb:d4:d7:92:07:7e:f1:1b:fb:7f:d0:24:aa:47:
         c8:ef:21:a3:97:53:5e:eb:b4:23:e5:8a:fb:92:eb:7c:5a:6c:
         4a:1e:56:3e:49:3b:3b:84:d3:e7:2b:cd:d5:a7:dd:5c:f4:25:
         1b:b6:09:19:f2:c1:1d:8e:e4:f1:4f:8b:2f:0b:ae:cf:8b:cd:
         01:3e:ae:00:97:6e:39:2a:2a:ab:eb:cc:87:4e:f2:1b:bc:f6:
         46:52:7e:4c:62:d3:e3:98:f2:66:c8:d0:1e:8a:0a:aa:3b:2b:
         e9:79:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----