Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
File:                     9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (raw, json)
Hash identifier:          zijht/Lg4e2Cw3Sb14BV9ZWEV/buiMCibzQEMmt0V/0=
Subject key identifier:   94:97:54:9B:66:D9:06:74:ED:66:4B:69:75:9B:FB:60:D8:92:D2:76
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       14E74E0B31563484119DDEFB4E12E9073D160595
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
Signing time:             Tue 15 Apr 2025 00:40:47 +0000
ROA not before:           Tue 15 Apr 2025 00:40:47 +0000
ROA not after:            Tue 20 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:4e:0b:31:56:34:84:11:9d:de:fb:4e:12:e9:07:3d:16:05:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 15 00:40:47 2025 GMT
            Not After : May 20 23:59:59 2025 GMT
        Subject: serialNumber=a23545e774f46de5b92b7d3828424910ab95907a87037910561a98790fb4e6d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:c6:60:4c:b9:ff:4f:a1:6d:4b:5b:0f:10:
                    92:60:04:0a:75:bc:c0:5b:db:4b:6f:90:3e:9c:10:
                    09:11:f9:2a:23:28:d4:da:79:49:97:bb:16:fe:2c:
                    00:fa:32:b5:2a:c1:dc:0c:e8:6b:95:7e:16:77:81:
                    2b:24:48:d6:8c:ac:34:58:9c:43:f6:c3:3c:b3:d7:
                    9e:92:59:27:61:12:4b:b3:dd:70:34:05:4e:2d:77:
                    12:6d:af:1b:fb:b7:88:99:20:55:27:18:4b:f0:77:
                    d3:81:3d:8c:7c:0c:87:5e:eb:2b:1c:07:84:87:59:
                    b2:0e:96:c1:f5:62:b6:35:2b:c4:95:25:0a:69:17:
                    3e:4b:81:02:51:b5:62:42:f4:73:56:36:db:fa:ce:
                    c5:4c:19:9e:49:36:aa:fe:4d:84:53:34:0b:66:ed:
                    1b:94:d5:69:80:40:1b:da:48:52:27:aa:2e:87:88:
                    80:8f:07:06:82:28:d1:ed:8e:fc:7e:05:9d:6e:bd:
                    49:a0:3b:dc:0b:4d:34:ca:f7:99:72:ff:ca:fe:af:
                    26:dc:21:70:d0:09:be:ac:7f:ba:b5:f4:e5:34:b2:
                    50:51:f9:f9:49:f5:51:a3:3d:76:d2:cc:47:5c:28:
                    dc:cc:23:e4:5c:bb:a3:5d:d7:a6:a4:9d:5e:24:f5:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:97:54:9B:66:D9:06:74:ED:66:4B:69:75:9B:FB:60:D8:92:D2:76
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:89:51:5e:15:41:ce:70:0a:ef:db:41:10:2d:fe:54:19:
         0e:ea:bd:9b:7d:01:42:29:63:79:1d:91:f2:45:67:5d:ee:fa:
         df:91:0e:53:37:66:b0:46:5f:88:b1:1f:dd:0a:14:69:1b:c2:
         1c:93:17:e9:bb:6d:00:d6:98:04:a1:91:5e:91:24:bd:81:c7:
         9f:3a:a7:40:e2:30:0e:15:53:bc:9f:50:62:20:a8:bc:eb:59:
         df:d6:91:41:bc:a7:6d:56:ed:d4:60:8e:6b:b0:1f:2e:c4:2c:
         c3:44:00:9f:0f:55:91:03:c9:c5:06:b5:17:fd:25:71:73:68:
         59:3b:b5:f8:46:07:a0:8c:28:fc:d7:3b:ec:76:f8:34:67:fb:
         51:2c:a9:c1:f9:98:a9:9e:15:c5:7a:d4:fb:3f:1e:12:a2:a5:
         ae:a9:46:25:cb:78:28:87:64:e9:c0:fc:7b:cf:8d:4f:f4:63:
         1b:67:f0:a8:a4:b8:9c:4d:42:de:d5:77:ce:e8:06:48:8a:b6:
         e0:db:46:2d:85:f9:89:b9:7a:06:01:6d:2f:10:4c:47:ea:17:
         39:54:fe:58:b0:8b:46:88:89:be:b1:c9:3b:29:2c:d2:79:17:
         bf:98:8e:ff:d2:fa:5a:60:91:cb:d4:5f:7f:2a:36:76:42:c0:
         a3:78:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net