Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa
File:                     c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa (raw, json)
Hash identifier:          s85zGmWV5V8NUJzUWpNriCi2aRFdInzUDrUfHgxcHtc=
Subject key identifier:   C0:2F:C9:5C:C4:0F:94:DE:10:89:19:21:E2:3C:59:C6:23:78:F1:B2
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       7E6D2D84162C5DB8223262C3E026E62EBF69DCFC
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa
Signing time:             Sat 19 Oct 2024 00:00:00 +0000
ROA not before:           Sat 19 Oct 2024 00:00:00 +0000
ROA not after:            Sat 23 Nov 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        50.112.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6d:2d:84:16:2c:5d:b8:22:32:62:c3:e0:26:e6:2e:bf:69:dc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Oct 19 00:00:00 2024 GMT
            Not After : Nov 23 23:59:59 2024 GMT
        Subject: serialNumber=51fcb1882036dae3d0afa13d11aee368424a37504bc7c0c128d230777141999a, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:8e:14:c6:7a:1d:7b:40:51:71:79:c6:c4:
                    fd:5c:bf:b3:f3:fc:9f:a0:4c:ab:47:54:70:58:6a:
                    09:70:78:7d:14:8c:74:5b:16:8b:23:03:ae:8d:04:
                    95:e3:6b:48:6e:22:7c:15:d7:2f:17:1d:0f:66:7f:
                    e7:2a:65:ea:ab:ef:71:15:b1:cc:43:91:bd:8d:5f:
                    08:5e:e4:ec:71:fb:a9:df:2a:3e:04:c3:d1:c0:1c:
                    36:94:bf:fd:41:7b:0f:2e:ab:8f:ab:6a:72:a0:42:
                    a1:ba:29:8e:79:82:e0:b9:5f:1e:15:ba:24:20:e9:
                    21:4c:cb:ca:48:bc:6e:38:00:7e:00:b0:e0:90:eb:
                    ee:db:40:75:2b:df:98:ab:d1:a7:67:76:3a:11:9e:
                    86:f4:c8:b9:77:df:bb:a5:e7:04:06:71:6e:81:a0:
                    d9:da:b8:f1:69:dc:b8:cb:85:29:7b:8d:c2:cc:31:
                    84:9c:cb:30:b2:f6:ea:1d:09:0a:e0:de:2d:30:6c:
                    80:de:7b:54:cc:30:0e:3d:39:66:79:42:fa:28:47:
                    64:71:76:4b:bd:52:b4:0f:07:f4:e8:39:19:41:5f:
                    a1:01:cc:c8:59:92:34:bb:24:f9:0a:b3:39:c5:ed:
                    b0:fb:8b:52:43:a7:18:1b:2c:59:a8:7f:13:1e:83:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:C9:5C:C4:0F:94:DE:10:89:19:21:E2:3C:59:C6:23:78:F1:B2
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c0b7a105-2833-47f4-8b51-8a9d1cb6466e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:26:62:47:79:ee:7e:61:1d:07:36:9e:27:6d:6a:55:c6:81:
         e8:42:7b:25:52:76:93:2c:f0:ed:f8:b8:56:5c:5b:2d:a8:01:
         8b:3d:9d:e9:9c:50:69:04:17:b8:8f:89:db:7a:b5:32:2e:22:
         9f:fc:61:b5:2f:44:32:8c:90:3f:8e:13:41:68:f7:f8:79:12:
         a3:18:05:4b:c8:ed:14:93:b7:20:48:52:1a:3d:06:b7:f5:19:
         d4:d8:57:74:3c:9e:d5:fe:10:9d:a4:b7:c6:d6:8a:50:c2:70:
         30:2f:f3:6c:93:5e:f4:c0:4c:1d:b5:74:78:6f:7b:da:eb:42:
         52:39:65:0f:77:da:93:42:12:91:1a:cf:dc:5e:b2:39:fa:56:
         66:84:f2:a0:d8:85:3c:07:0e:c7:4c:7e:9a:8e:d8:6a:47:e8:
         1b:15:25:4c:76:b2:4a:8b:c6:8f:b4:94:dd:7e:37:02:9b:e0:
         d6:2c:ac:e8:35:51:4d:93:c7:ae:ea:69:81:ac:86:89:10:28:
         b8:52:da:f3:95:23:01:fe:18:50:62:dd:ee:fa:17:3e:d4:b3:
         4e:d8:21:ed:86:63:f1:73:c5:3a:56:69:8d:b2:22:24:2d:66:
         4c:45:4e:f8:9d:8e:30:2e:4f:ad:ce:3b:4e:4f:c8:3a:25:ee:
         5b:e7:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:30:14 2024 by rpki-client on console.sobornost.net