Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d5dc0f2-825c-4ab0-99d8-576338ba92a4.roa
File:                     4d5dc0f2-825c-4ab0-99d8-576338ba92a4.roa (raw, json)
Hash identifier:          hoKj9V10c1gLlYczsyVnUvyA3PKdDbd6pawdRsgCq4k=
Subject key identifier:   F4:B3:04:D5:37:4E:4F:4C:71:5F:34:7D:48:CC:D3:42:E5:0A:9B:37
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       68D398B7792B241DF3F3BC26889444193623D8B4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d5dc0f2-825c-4ab0-99d8-576338ba92a4.roa
Signing time:             Mon 31 Mar 2025 17:30:14 +0000
ROA not before:           Mon 31 Mar 2025 17:30:14 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.246.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:98:b7:79:2b:24:1d:f3:f3:bc:26:88:94:44:19:36:23:d8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:30:14 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f3e33feee0950232b3a8a28ef9755e136653a79136d2ec0e1d0033803830555c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:c0:8e:8b:0e:04:9b:bb:08:7d:53:99:5c:
                    4b:84:54:3a:9e:30:a1:6a:8a:0c:66:98:4b:0d:af:
                    09:b5:0c:4f:e3:0e:6c:2e:fb:fe:0a:7d:05:25:3a:
                    4c:ff:41:0e:4c:b3:a0:79:97:b8:66:e0:d6:6a:7d:
                    f9:d3:d0:c9:b3:64:26:be:1d:40:39:a1:06:73:53:
                    49:48:8a:ba:39:03:5d:2c:28:91:70:07:a0:55:97:
                    ab:e0:c4:e1:6d:0b:64:b1:e5:e9:d3:31:09:b7:81:
                    2f:88:ac:d9:d8:f7:d6:9f:63:d1:32:55:cd:f7:01:
                    68:64:93:7c:8a:c3:06:08:dc:98:71:95:44:60:cc:
                    c3:59:63:ef:0a:c8:b4:65:c7:22:26:2f:4d:a6:1a:
                    88:24:6e:dc:0c:31:fe:46:3e:42:64:61:9d:52:5a:
                    2b:34:c8:1b:86:ee:53:a1:37:9e:fc:d9:6f:63:77:
                    60:0b:16:16:52:7a:97:d8:53:f6:2b:75:98:3d:e1:
                    5a:37:54:cb:67:c6:84:03:a9:6e:63:c7:fe:d2:9a:
                    cf:47:a0:a3:56:45:13:91:94:4f:7b:97:e5:b8:bf:
                    52:f6:f1:33:de:2b:9e:8b:fc:bf:fc:42:e6:74:06:
                    ca:72:e5:19:43:d7:3f:3c:e2:86:82:18:2e:cb:a2:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:04:D5:37:4E:4F:4C:71:5F:34:7D:48:CC:D3:42:E5:0A:9B:37
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d5dc0f2-825c-4ab0-99d8-576338ba92a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.246.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:0c:29:03:98:a4:22:d3:e4:75:6e:03:5e:82:34:f0:fe:c0:
         b8:58:5a:fb:ac:da:a1:ea:d1:52:20:b9:1a:d0:46:3c:f7:cf:
         dd:a1:71:6f:14:69:1a:dc:ee:21:a2:05:a6:e2:1f:bf:1b:9c:
         b5:1f:ea:cf:99:b7:f3:d1:e6:22:fe:c4:89:9e:8e:78:29:88:
         08:f6:39:0c:7b:e7:ee:11:c0:ce:c6:19:f8:b9:72:98:1b:ae:
         88:32:e6:98:e5:dd:90:d4:59:bb:58:4d:73:40:42:4b:2c:97:
         72:c1:fd:48:b9:56:4a:17:72:f1:c5:8b:f3:8d:fd:e9:50:da:
         87:4b:7f:03:db:ac:26:bb:7e:51:8a:41:7e:17:f8:da:ac:7b:
         1b:1d:a0:c7:16:fe:78:73:33:7e:c8:30:ed:76:31:37:5f:87:
         11:d3:bf:75:4f:c7:3a:f4:b1:a0:bd:58:00:1b:2b:27:34:1d:
         38:99:ad:27:03:22:8c:8c:e3:78:bd:84:5a:a1:3a:0e:c5:10:
         4c:3c:a2:98:30:60:06:33:75:7f:a3:33:c5:8d:c6:14:45:f6:
         d6:b8:ed:3a:c2:cd:ae:49:2b:99:52:c9:e9:4b:b9:9b:c7:47:
         4b:0e:35:45:85:0b:fa:c4:a7:d4:1d:6c:33:b5:ba:f6:3a:e4:
         93:1e:a3:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaNOYt3krJB3z87wmiJREGTYj2LQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTczMDE0WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2UzM2ZlZWUwOTUwMjMyYjNhOGEyOGVmOTc1NWUxMzY2
NTNhNzkxMzZkMmVjMGUxZDAwMzM4MDM4MzA1NTVjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDStMCOiw4Em7sIfVOZXEuEVDqeMKFqigxmmEsNrwm1DE/j
Dmwu+/4KfQUlOkz/QQ5Ms6B5l7hm4NZqffnT0MmzZCa+HUA5oQZzU0lIiro5A10s
KJFwB6BVl6vgxOFtC2Sx5enTMQm3gS+IrNnY99afY9EyVc33AWhkk3yKwwYI3Jhx
lURgzMNZY+8KyLRlxyImL02mGogkbtwMMf5GPkJkYZ1SWis0yBuG7lOhN5782W9j
d2ALFhZSepfYU/YrdZg94Vo3VMtnxoQDqW5jx/7Sms9HoKNWRRORlE97l+W4v1L2
8TPeK56L/L/8QuZ0Bspy5RlD1z884oaCGC7Louf9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9LME1TdOT0xxXzR9SMzTQuUKmzcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRkNWRjMGYyLTgyNWMtNGFiMC05OWQ4LTU3NjMzOGJhOTJhNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAES9lgwDQYJKoZIhvcNAQELBQADggEBAHAMKQOYpCLT5HVuA16CNPD+wLhY
Wvus2qHq0VIguRrQRjz3z92hcW8UaRrc7iGiBabiH78bnLUf6s+Zt/PR5iL+xIme
jngpiAj2OQx75+4RwM7GGfi5cpgbrogy5pjl3ZDUWbtYTXNAQkssl3LB/Ui5VkoX
cvHFi/ON/elQ2odLfwPbrCa7flGKQX4X+NqsexsdoMcW/nhzM37IMO12MTdfhxHT
v3VPxzr0saC9WAAbKyc0HTiZrScDIoyM43i9hFqhOg7FEEw8opgwYAYzdX+jM8WN
xhRF9ta47TrCza5JK5lSyelLuZvHR0sONUWFC/rEp9QdbDO1uvY65JMeo6c=
-----END CERTIFICATE-----