Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
File:                     7c53740e-7300-4028-b024-414ad3814267.roa (raw, json)
Hash identifier:          P1gpc3ASvd6bogyPQmoP63xTwbhOujQns3R8Td9+twM=
Subject key identifier:   8F:86:6C:A4:35:B4:A3:22:91:3C:A1:8A:18:15:2D:FE:F1:85:2D:E6
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       238AE6CFA4A1B867CB6919AA3B7DB3CC11D3FFBC
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa
Signing time:             Mon 31 Mar 2025 16:11:05 +0000
ROA not before:           Mon 31 Mar 2025 16:11:05 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8a:e6:cf:a4:a1:b8:67:cb:69:19:aa:3b:7d:b3:cc:11:d3:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Mar 31 16:11:05 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f5b8916401c4ac16505010b1facdef218c245d19abdcb5a11744a8fbf3d382e8, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:84:00:79:dc:0d:38:8b:49:a3:6c:ff:8a:
                    52:82:f2:16:b4:f0:cb:7a:5d:56:56:7e:8f:39:d2:
                    8e:27:5f:fb:07:5e:85:b9:0b:b2:b1:ac:39:7f:83:
                    f9:cf:24:1b:e4:e1:1b:91:ab:6d:e4:86:96:f6:3d:
                    cd:45:ab:7f:e5:1b:8e:20:93:90:20:4d:0a:a3:1f:
                    5a:1d:d4:38:b1:a5:a0:9a:43:5a:54:6c:f0:57:34:
                    4a:c6:b1:04:64:c7:cf:30:0d:99:da:f9:1f:13:d0:
                    70:e6:7e:c8:3b:b8:9f:c6:bb:9a:38:13:cd:07:6c:
                    49:b8:1d:d7:14:fa:6e:8e:ff:23:67:92:9c:ac:35:
                    12:cc:63:94:c9:ad:d5:ff:9f:26:9c:7d:21:01:ae:
                    3c:a9:24:fb:99:79:ee:09:e6:2e:9d:3b:b7:91:d5:
                    fe:ed:04:49:01:f9:bb:28:27:db:aa:2e:b6:cc:11:
                    be:45:ab:1a:0e:8f:ff:66:6e:96:be:b0:40:2d:eb:
                    6e:c7:51:8a:75:64:fa:f4:03:14:02:ac:22:2f:69:
                    94:81:8c:b0:d8:61:5c:cf:4e:5e:3a:66:ec:01:60:
                    ba:fb:76:40:7a:4c:79:0e:0d:73:54:48:25:24:75:
                    54:2d:76:af:4c:2f:60:3c:8f:70:6f:2a:28:3c:3c:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:86:6C:A4:35:B4:A3:22:91:3C:A1:8A:18:15:2D:FE:F1:85:2D:E6
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/7c53740e-7300-4028-b024-414ad3814267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:74:a6:c1:5c:4d:cf:68:2b:88:a0:c7:51:f9:cc:2c:7e:d4:
         20:06:da:3a:fc:50:98:3a:19:be:c9:fd:67:1e:f1:31:7a:a1:
         0f:16:aa:c0:12:97:02:cb:59:c4:a0:a3:ed:1e:1e:64:3f:08:
         6a:e0:ea:e0:14:08:2f:a6:46:86:c4:d7:a4:3a:7b:8c:01:65:
         f4:27:b1:9b:8b:8e:2d:d5:31:e6:e7:8c:8b:af:32:46:10:61:
         64:ef:78:3e:98:97:ce:8b:b3:d0:4b:c6:fd:c5:8c:98:cf:a8:
         96:b1:a7:42:32:80:ec:b6:2e:ae:1f:95:a0:46:f6:76:ac:73:
         3e:2c:c6:3b:46:60:a2:43:62:2a:70:90:89:0b:71:5a:25:8a:
         df:65:3d:59:03:f6:34:5e:98:da:54:86:f2:78:ec:cb:a2:4f:
         10:19:c5:7d:dc:cf:ec:ed:c4:d6:ed:7e:69:bd:0f:22:6c:6d:
         5f:df:fa:92:29:94:39:f9:7f:74:c3:a0:a2:75:7d:9a:07:b8:
         90:7b:5b:5b:00:b5:78:19:5c:f8:8a:28:06:8c:9c:9e:cd:29:
         b2:bd:ee:48:fe:80:94:c4:42:86:6e:27:f1:9b:bd:ff:07:62:
         26:e8:65:fd:ca:fc:a8:00:42:a1:4e:da:df:2a:45:5f:e0:6c:
         5b:03:4c:74
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI4rmz6ShuGfLaRmqO32zzBHT/7wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwMzMxMTYxMTA1WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNWI4OTE2NDAxYzRhYzE2NTA1MDEwYjFmYWNkZWYyMThj
MjQ1ZDE5YWJkY2I1YTExNzQ0YThmYmYzZDM4MmU4MS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbBYQAedwNOItJo2z/ilKC8ha08Mt6XVZWfo850o4nX/sH
XoW5C7KxrDl/g/nPJBvk4RuRq23khpb2Pc1Fq3/lG44gk5AgTQqjH1od1DixpaCa
Q1pUbPBXNErGsQRkx88wDZna+R8T0HDmfsg7uJ/Gu5o4E80HbEm4HdcU+m6O/yNn
kpysNRLMY5TJrdX/nyacfSEBrjypJPuZee4J5i6dO7eR1f7tBEkB+bsoJ9uqLrbM
Eb5FqxoOj/9mbpa+sEAt627HUYp1ZPr0AxQCrCIvaZSBjLDYYVzPTl46ZuwBYLr7
dkB6THkODXNUSCUkdVQtdq9ML2A8j3BvKig8PBJBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUj4ZspDW0oyKRPKGKGBUt/vGFLeYwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzdjNTM3NDBlLTczMDAtNDAyOC1iMDI0LTQxNGFkMzgxNDI2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIycAQwDQYJKoZIhvcNAQELBQADggEBAAV0psFcTc9oK4igx1H5zCx+1CAG
2jr8UJg6Gb7J/Wce8TF6oQ8WqsASlwLLWcSgo+0eHmQ/CGrg6uAUCC+mRobE16Q6
e4wBZfQnsZuLji3VMebnjIuvMkYQYWTveD6Yl86Ls9BLxv3FjJjPqJaxp0IygOy2
Lq4flaBG9nascz4sxjtGYKJDYipwkIkLcVolit9lPVkD9jRemNpUhvJ47MuiTxAZ
xX3cz+ztxNbtfmm9DyJsbV/f+pIplDn5f3TDoKJ1fZoHuJB7W1sAtXgZXPiKKAaM
nJ7NKbK97kj+gJTEQoZuJ/Gbvf8HYiboZf3K/KgAQqFO2t8qRV/gbFsDTHQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net