Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa
File:                     39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa (raw, json)
Hash identifier:          mBkSHTqFKyGWYkcg6x5ztvCb17EATDg+I02Aq8QAZzk=
Subject key identifier:   79:0E:B7:26:9E:30:8E:4F:55:B8:D6:72:7D:FD:62:6C:A7:1B:B1:03
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       555D4B3484ECD6FBD6453270DDF1D30F1C168F2A
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa
Signing time:             Sat 19 Oct 2024 00:00:00 +0000
ROA not before:           Sat 19 Oct 2024 00:00:00 +0000
ROA not after:            Sat 23 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5d:4b:34:84:ec:d6:fb:d6:45:32:70:dd:f1:d3:0f:1c:16:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Oct 19 00:00:00 2024 GMT
            Not After : Nov 23 23:59:59 2024 GMT
        Subject: serialNumber=509759e8151f04f5c87159f2afe95ddcffd4bf72ee7adcfd45f7ff3d463f3513, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:50:67:99:72:e6:7c:4e:28:bd:dd:2e:4c:
                    43:c8:d3:ca:f0:b3:23:f1:04:66:3e:b8:81:7b:3b:
                    7a:03:8f:ed:4f:51:7f:50:a7:14:c6:d0:1e:d1:de:
                    9b:5f:82:c8:a9:22:c0:7e:4d:8a:c0:df:c0:2a:51:
                    54:27:04:65:c1:77:1b:9c:b7:92:9d:8e:6e:64:0f:
                    33:dd:09:75:60:44:9f:c0:12:82:8d:43:2c:76:2c:
                    30:80:1b:42:f2:eb:99:83:de:1f:98:ac:bc:1f:bd:
                    0a:c4:9e:8d:a7:b1:fe:7d:96:f3:bc:85:32:b1:40:
                    b4:11:e2:cd:6f:c9:bf:9e:77:ee:1d:d4:46:50:30:
                    2c:29:0b:bb:69:bf:b5:99:fb:fd:09:c8:32:a9:b4:
                    32:28:a6:b0:2f:c0:df:10:17:85:23:31:6f:c3:8c:
                    0e:f8:00:40:a7:ea:1d:d3:a4:80:8f:e2:3c:d1:3e:
                    94:92:76:7e:f6:c4:a5:3d:4a:1a:95:e0:d1:ce:97:
                    9f:2f:5e:d1:d0:d7:2b:76:a6:4f:3e:64:41:69:47:
                    bd:b8:b3:39:c1:4f:f3:b2:a3:83:bf:2f:0e:77:aa:
                    8c:d2:70:9c:d1:ed:9d:aa:65:a1:aa:9e:e1:04:2f:
                    1c:8c:a8:a1:56:9c:0f:b1:25:f2:40:b0:9e:63:39:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:B7:26:9E:30:8E:4F:55:B8:D6:72:7D:FD:62:6C:A7:1B:B1:03
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:70:77:25:19:21:dd:9d:d6:e8:fe:28:e0:90:77:24:7f:
         09:28:43:93:ef:d4:ec:5f:0c:f6:ec:d9:7d:f0:eb:1a:d3:47:
         f9:b6:e5:57:64:37:bf:69:0f:4f:c7:b2:d1:aa:e8:8e:99:6f:
         3d:95:37:13:8b:0a:28:41:a6:b7:73:d6:c6:d4:7d:79:7a:48:
         de:53:ae:df:fa:bc:29:2c:49:ff:c0:91:82:01:c7:ed:d0:f1:
         23:e9:e0:bb:38:48:04:f7:b8:d8:ab:ea:31:61:10:0b:2e:e8:
         2b:c8:ce:f5:14:75:e4:78:8c:74:65:f2:69:7e:7d:dd:3f:fb:
         d3:e7:9c:a2:6a:f7:45:3f:d1:21:68:12:25:9b:ff:66:30:32:
         76:9a:a7:33:a4:3e:e7:e6:08:51:4f:66:58:3d:0a:5f:4c:40:
         e7:22:d5:a4:9c:26:14:16:92:08:7b:c3:50:e2:bf:6f:d0:e5:
         5b:61:e9:23:e5:cd:4b:6b:3a:02:49:a0:89:0f:cb:a2:9e:c2:
         2d:3c:2d:7b:5a:c0:50:07:0b:cc:39:54:dd:c5:62:35:fc:6f:
         7f:5c:77:45:9a:f5:40:a0:4e:6e:f4:83:45:89:d4:e6:e8:90:
         49:3a:0b:d4:24:b6:8a:bf:da:00:6f:0a:4f:e7:94:76:62:c4:
         14:de:7a:7c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVV1LNITs1vvWRTJw3fHTDxwWjyowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjQxMDE5MDAwMDAwWhcNMjQxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDk3NTllODE1MWYwNGY1Yzg3MTU5ZjJhZmU5NWRkY2Zm
ZDRiZjcyZWU3YWRjZmQ0NWY3ZmYzZDQ2M2YzNTEzMS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPVVBnmXLmfE4ovd0uTEPI08rwsyPxBGY+uIF7O3oDj+1P
UX9QpxTG0B7R3ptfgsipIsB+TYrA38AqUVQnBGXBdxuct5Kdjm5kDzPdCXVgRJ/A
EoKNQyx2LDCAG0Ly65mD3h+YrLwfvQrEno2nsf59lvO8hTKxQLQR4s1vyb+ed+4d
1EZQMCwpC7tpv7WZ+/0JyDKptDIoprAvwN8QF4UjMW/DjA74AECn6h3TpICP4jzR
PpSSdn72xKU9ShqV4NHOl58vXtHQ1yt2pk8+ZEFpR724sznBT/Oyo4O/Lw53qozS
cJzR7Z2qZaGqnuEELxyMqKFWnA+xJfJAsJ5jOeSDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUeQ63Jp4wjk9VuNZyff1ibKcbsQMwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzM5ODM1YTlkLTFmZmEtNGVjYi1hZDlkLTczZDQ5YjU0MTllMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAycDANBgkqhkiG9w0BAQsFAAOCAQEAp7lwdyUZId2d1uj+KOCQdyR/CShD
k+/U7F8M9uzZffDrGtNH+bblV2Q3v2kPT8ey0arojplvPZU3E4sKKEGmt3PWxtR9
eXpI3lOu3/q8KSxJ/8CRggHH7dDxI+nguzhIBPe42KvqMWEQCy7oK8jO9RR15HiM
dGXyaX593T/70+ecomr3RT/RIWgSJZv/ZjAydpqnM6Q+5+YIUU9mWD0KX0xA5yLV
pJwmFBaSCHvDUOK/b9DlW2HpI+XNS2s6AkmgiQ/Lop7CLTwte1rAUAcLzDlU3cVi
Nfxvf1x3RZr1QKBObvSDRYnU5uiQSToL1CS2ir/aAG8KT+eUdmLEFN56fA==
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net