Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dd7a87c-eb71-4b17-ab03-cc946d1a30d6.roa
File:                     9dd7a87c-eb71-4b17-ab03-cc946d1a30d6.roa (raw, json)
Hash identifier:          7lToMGS9DDD5YZWt9bMDGZyUMbwpvzZcEFIym8QUAjU=
Subject key identifier:   B2:02:BD:3A:06:3D:3B:A8:50:4F:29:74:89:A8:95:98:F3:8D:C4:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DB00209DD7D1A859107BAC11C43BD4E70EE6AC6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dd7a87c-eb71-4b17-ab03-cc946d1a30d6.roa
Signing time:             Mon 09 Dec 2024 00:00:00 +0000
ROA not before:           Mon 09 Dec 2024 00:00:00 +0000
ROA not after:            Mon 13 Jan 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        207.171.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b0:02:09:dd:7d:1a:85:91:07:ba:c1:1c:43:bd:4e:70:ee:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  9 00:00:00 2024 GMT
            Not After : Jan 13 23:59:59 2025 GMT
        Subject: serialNumber=398bf08680a6ebe0d075076477d5a60e9e7d67426823f3b34ed4283698dcb7fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:29:fe:77:31:6b:0d:ae:a9:09:67:9f:e5:
                    18:ec:f7:58:48:d5:df:d1:3e:e6:ff:f0:b0:a4:ff:
                    ec:2c:17:f2:0b:9d:59:2d:4d:df:8a:2a:ef:47:9a:
                    1e:b7:92:d5:bb:18:f3:2a:47:74:89:0f:3d:19:10:
                    b3:28:f5:41:b1:d6:31:40:f2:b5:48:34:83:53:a7:
                    92:3b:64:c3:35:c6:c5:c0:e1:8e:ca:c8:cd:a0:4f:
                    89:b4:35:ed:87:ac:86:d6:13:6e:80:39:db:e2:94:
                    32:86:f0:19:59:4b:46:50:a9:16:6d:8a:fa:3d:f1:
                    29:4a:73:d5:7e:68:54:9a:e1:b7:6a:9c:7c:27:30:
                    04:c4:17:9c:cc:2c:7f:ed:a7:5a:ce:9c:64:8e:e0:
                    f5:0f:bc:6b:ce:95:37:69:fd:f0:15:97:66:a7:da:
                    c9:03:bb:78:87:eb:a9:cb:7b:d1:11:fa:e9:78:c0:
                    7a:a0:dc:75:45:f1:6e:25:67:c6:dc:e0:61:a2:8d:
                    9f:43:e1:1e:5e:3e:ca:b8:a7:45:55:60:8b:2f:ad:
                    34:5a:dc:32:9c:a6:2b:62:38:b6:40:3a:22:35:06:
                    18:84:6c:79:93:63:8c:2f:25:86:4c:69:20:7c:d3:
                    ad:3f:03:e0:6a:d7:f8:e8:d0:6e:94:9d:83:04:31:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:BD:3A:06:3D:3B:A8:50:4F:29:74:89:A8:95:98:F3:8D:C4:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dd7a87c-eb71-4b17-ab03-cc946d1a30d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:f1:17:b9:53:3c:cb:30:27:0e:a4:f2:80:89:2a:6d:dd:da:
         56:11:df:a8:f5:c1:62:2f:d3:bf:b6:a6:f0:3f:7a:a4:03:44:
         de:5a:6a:e1:7e:9e:15:1d:04:59:4d:ef:fb:12:b6:87:c3:f3:
         29:2a:93:86:9e:dc:bd:1e:10:5e:b6:24:cf:8d:e3:74:c0:62:
         b5:bf:1c:e3:18:7f:0e:f8:f8:37:76:a0:86:49:9f:1f:bb:73:
         bc:ef:c0:7b:8b:25:36:04:7b:7f:d7:56:d2:4a:ea:cc:1c:8f:
         7d:34:34:b5:ed:1a:51:cc:25:3c:d9:b2:71:a9:28:c3:36:15:
         50:c2:1e:29:3d:b4:12:98:ff:80:51:3c:f3:a3:0e:ae:1d:42:
         6b:05:63:65:2f:d8:ec:16:8f:d3:43:35:ab:95:ca:80:20:74:
         bb:f9:52:1c:3b:d0:29:44:5b:22:e6:c9:be:49:ef:3e:c6:a4:
         8e:89:07:e1:9a:af:44:7e:24:cd:23:56:0c:26:be:da:12:28:
         19:ae:da:90:4b:05:3b:60:8e:38:11:90:38:52:3b:c9:9d:94:
         d5:e6:99:a0:a4:a5:c9:39:4b:fe:51:16:f6:fc:00:e7:4f:88:
         b1:1c:f8:b6:07:ac:9b:80:a5:1a:f6:bf:96:e9:51:1c:92:ae:
         5b:bd:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net