Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa
File:                     79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa (raw, json)
Hash identifier:          ADpO5G5WaXXvIEo/+Bd0yMQjdlVJitDiU+TSnnmIDow=
Subject key identifier:   7D:93:3C:BD:EE:D0:A0:88:55:45:5D:C9:02:B7:16:00:D3:01:CB:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52D22F408C2F88D69596C4979BC0C6D2B10EB0A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa
Signing time:             Sat 12 Apr 2025 00:10:18 +0000
ROA not before:           Sat 12 Apr 2025 00:10:18 +0000
ROA not after:            Sat 17 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.215.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:2f:40:8c:2f:88:d6:95:96:c4:97:9b:c0:c6:d2:b1:0e:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 12 00:10:18 2025 GMT
            Not After : May 17 23:59:59 2025 GMT
        Subject: serialNumber=b21e2ebde6b9b4c53a9c4901cbdec84d0b057d7b4555d7897d3a0d19fd8b4f51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:c9:b3:29:e4:da:4d:0b:64:6d:6f:d5:52:
                    b0:44:7e:1c:fd:b7:24:44:97:80:e8:42:cf:5b:63:
                    a6:7d:a4:37:06:8a:87:d7:a5:e6:68:e4:c8:10:37:
                    14:ee:2c:7e:98:49:77:6d:b2:a0:95:19:e9:99:f8:
                    d9:33:2e:63:66:26:44:80:74:ba:42:0e:31:c8:1c:
                    13:81:75:65:71:56:ef:07:9d:95:a7:39:db:b2:b4:
                    bd:b3:d4:8e:d3:2b:9d:d8:6b:6e:de:95:88:67:40:
                    32:12:07:3c:10:1f:5c:10:99:8d:3d:98:80:64:3b:
                    d8:f7:83:81:95:d8:af:a6:1f:76:0c:cf:be:a3:ba:
                    0e:90:2e:a0:dc:90:61:5b:bc:2d:84:19:8d:ce:75:
                    3c:25:65:93:f9:10:89:c5:ee:6c:4c:22:32:a7:3b:
                    8d:b7:26:dd:28:0b:2d:42:3a:78:1f:1f:28:cc:41:
                    85:47:6e:16:82:08:9b:28:06:0d:92:3f:83:6e:04:
                    86:a9:86:6d:39:f8:d8:4e:a3:4b:7b:9e:f7:ca:ef:
                    3e:06:d0:1e:a7:c4:92:ed:9d:42:3b:02:b6:9d:e6:
                    95:88:90:11:e5:d2:49:01:49:c9:4c:14:13:ec:a9:
                    92:1f:b5:c3:b8:cb:e3:e5:3b:91:78:43:69:40:19:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:3C:BD:EE:D0:A0:88:55:45:5D:C9:02:B7:16:00:D3:01:CB:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f98877-e5d7-40ad-bfa7-c7b051a8d155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.215.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:d9:75:1d:4a:df:a9:1f:17:c7:bd:1f:ae:aa:d5:7f:7f:
         b0:dc:84:c8:24:b4:e6:69:94:f7:a0:06:1c:6f:5f:f6:22:ed:
         50:e2:4d:69:3f:b8:2a:cb:44:5b:34:a8:7e:1c:7b:9b:dc:39:
         c9:73:40:fa:be:5e:79:cc:77:35:db:1c:79:26:33:cb:7a:30:
         81:b6:ec:e2:8e:37:2b:82:ec:48:9e:8b:be:fa:10:33:30:c3:
         a9:54:f0:33:ed:8b:5b:f0:bc:7c:9a:e0:ed:69:fd:cf:f3:39:
         f1:23:50:16:18:96:96:93:d7:fe:6d:fe:9c:da:87:56:68:6b:
         55:83:b8:41:79:6e:11:bd:45:05:d5:36:75:5d:d7:7f:73:2f:
         ac:f9:54:1e:a9:cc:50:93:aa:c7:f0:d3:87:71:ba:1b:58:ef:
         aa:06:db:71:77:58:d4:36:d1:c6:65:66:12:ce:85:51:4d:cd:
         f8:1b:26:4e:0e:eb:ab:57:fd:e0:a1:e5:7b:76:80:ca:21:a8:
         bf:f4:45:fc:67:4b:4d:ce:b9:5d:bc:67:10:3c:01:24:25:a7:
         32:ca:0c:89:e7:2b:ce:94:65:6c:64:d1:16:9b:5c:f4:70:ac:
         03:8b:5a:33:98:57:dc:db:2b:13:c5:27:0e:96:98:48:3b:3f:
         a2:d9:14:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUtIvQIwviNaVlsSXm8DG0rEOsKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAxMDE4WhcNMjUwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMjFlMmViZGU2YjliNGM1M2E5YzQ5MDFjYmRlYzg0ZDBi
MDU3ZDdiNDU1NWQ3ODk3ZDNhMGQxOWZkOGI0ZjUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVTcmzKeTaTQtkbW/VUrBEfhz9tyREl4DoQs9bY6Z9pDcG
iofXpeZo5MgQNxTuLH6YSXdtsqCVGemZ+NkzLmNmJkSAdLpCDjHIHBOBdWVxVu8H
nZWnOduytL2z1I7TK53Ya27elYhnQDISBzwQH1wQmY09mIBkO9j3g4GV2K+mH3YM
z76jug6QLqDckGFbvC2EGY3OdTwlZZP5EInF7mxMIjKnO423Jt0oCy1COngfHyjM
QYVHbhaCCJsoBg2SP4NuBIaphm05+NhOo0t7nvfK7z4G0B6nxJLtnUI7Arad5pWI
kBHl0kkBSclMFBPsqZIftcO4y+PlO5F4Q2lAGU8ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfZM8ve7QoIhVRV3JArcWANMBy/kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5Zjk4ODc3LWU1ZDctNDBhZC1iZmE3LWM3YjA1MWE4ZDE1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEs13IwDQYJKoZIhvcNAQELBQADggEBAByq2XUdSt+pHxfHvR+uqtV/f7Dc
hMgktOZplPegBhxvX/Yi7VDiTWk/uCrLRFs0qH4ce5vcOclzQPq+XnnMdzXbHHkm
M8t6MIG27OKONyuC7Eiei776EDMww6lU8DPti1vwvHya4O1p/c/zOfEjUBYYlpaT
1/5t/pzah1Zoa1WDuEF5bhG9RQXVNnVd139zL6z5VB6pzFCTqsfw04dxuhtY76oG
23F3WNQ20cZlZhLOhVFNzfgbJk4O66tX/eCh5Xt2gMohqL/0RfxnS03OuV28ZxA8
ASQlpzLKDInnK86UZWxk0RabXPRwrAOLWjOYV9zbKxPFJw6WmEg7P6LZFDA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:10 2025 by rpki-client on console.sobornost.net