Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2980a6-c5e4-4f10-b9be-4e8e298ca5d0.roa
File:                     cd2980a6-c5e4-4f10-b9be-4e8e298ca5d0.roa (raw, json)
Hash identifier:          NdfMyWWmfAE0xSYBaNShtxEdkdC3seRO4RGD+AV5F3E=
Subject key identifier:   20:2A:F2:A6:16:AE:D6:25:B9:8F:50:02:CD:88:E2:32:B1:09:59:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6789434B19BC078AD061EC92CD74DC0C67E8B790
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2980a6-c5e4-4f10-b9be-4e8e298ca5d0.roa
Signing time:             Mon 09 Dec 2024 00:00:00 +0000
ROA not before:           Mon 09 Dec 2024 00:00:00 +0000
ROA not after:            Mon 13 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:89:43:4b:19:bc:07:8a:d0:61:ec:92:cd:74:dc:0c:67:e8:b7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec  9 00:00:00 2024 GMT
            Not After : Jan 13 23:59:59 2025 GMT
        Subject: serialNumber=c17f97f1b9a32a2de433587a57d9426f163dd94db572d0b87756ce5387a489c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:33:3d:08:c2:3f:fe:d6:9b:44:a5:1d:6c:
                    5c:5e:7f:e1:d4:73:3f:34:ad:7a:07:23:cd:e6:fc:
                    9b:3e:bc:1f:db:40:fe:1d:aa:21:70:04:10:c0:9d:
                    e7:d3:8c:d4:08:b7:0d:b2:14:5e:55:97:06:14:4b:
                    7e:27:eb:cd:a6:d2:4b:5b:73:23:49:3f:f8:b9:8c:
                    a7:56:74:ae:27:39:95:56:e9:ec:f8:04:a3:62:e5:
                    90:b3:8b:4a:e9:b8:30:ee:f6:be:86:43:e7:17:af:
                    60:dd:b6:5f:9e:c5:05:aa:fc:cd:47:94:91:44:0f:
                    d0:6d:a4:d5:a0:78:55:ed:d6:ab:9c:37:87:59:9d:
                    ac:82:ca:88:c7:7e:84:9c:6b:62:5d:2a:d7:de:c9:
                    c2:f1:59:34:5c:da:0d:88:d7:4b:c5:c5:31:67:89:
                    f6:e7:10:29:cf:0e:cb:e5:6a:4d:9a:20:88:4e:74:
                    a3:9f:65:65:8b:41:3b:25:ea:6c:96:de:32:cb:73:
                    cf:ba:c2:7d:30:2c:15:8f:b2:f7:03:2d:bb:cb:e9:
                    48:05:c4:2e:37:36:d3:d8:48:63:f0:e8:c3:e9:cf:
                    c4:c1:16:bd:f6:47:29:c8:53:d4:ea:b6:7a:77:37:
                    94:f1:54:5e:e0:d5:18:b2:52:51:99:0f:1b:01:e6:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2A:F2:A6:16:AE:D6:25:B9:8F:50:02:CD:88:E2:32:B1:09:59:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2980a6-c5e4-4f10-b9be-4e8e298ca5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:f0:57:2c:94:cd:ae:2c:73:80:40:0f:7f:e1:46:25:3d:
         5b:58:97:91:c9:24:ea:bc:6d:f8:50:08:e6:8a:b6:a2:f7:3c:
         95:ca:f4:79:27:f2:e2:d2:3c:36:0b:ab:98:39:20:62:f9:28:
         60:7e:dd:31:47:dc:87:56:ac:ba:4c:a7:9e:e9:76:d8:fc:f2:
         d1:0c:e0:ff:9b:f8:1b:cc:e2:2c:4b:6d:e9:0a:ea:99:b6:bb:
         1a:8b:fc:1f:ed:f5:c7:71:99:49:a1:fe:ed:9e:31:9e:7b:71:
         e8:db:31:fb:18:8a:dc:84:bf:ba:e3:52:85:1e:74:46:07:54:
         4c:70:26:9d:2d:6a:28:2f:5b:38:e6:f3:e4:60:68:db:f8:fa:
         7b:5b:2b:68:18:5f:b8:42:67:de:c6:34:73:bc:e6:08:b9:39:
         a7:d5:90:73:cd:fc:cb:b8:d0:50:63:70:8b:f7:7a:44:19:70:
         25:97:81:0e:7d:62:df:d0:86:61:5e:38:c3:0e:7b:2a:bc:a3:
         91:53:9e:90:51:8b:e6:ec:cb:5e:da:1c:37:04:f1:83:c4:39:
         1f:2c:31:4d:26:1e:1c:6c:4b:a5:fa:52:e3:28:02:e2:68:40:
         42:07:c0:5f:c4:d7:16:22:5b:4b:8f:4b:19:d8:c3:b1:c3:12:
         13:90:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 02:31:26 2024 by rpki-client on console.sobornost.net