Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c4526-620b-4572-a2b1-7b2759cb8e7c.roa
File:                     4e5c4526-620b-4572-a2b1-7b2759cb8e7c.roa (raw, json)
Hash identifier:          FZeptPFjpzNyaY+f/fdikBGT6zSB14N+InHWy8chx/0=
Subject key identifier:   4A:E6:FC:7D:67:96:08:3B:81:2C:44:42:44:55:4A:33:43:10:A1:C8
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1861EB79A8A3416864CE869ED812FC955E298AE3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c4526-620b-4572-a2b1-7b2759cb8e7c.roa
Signing time:             Mon 31 Mar 2025 17:00:56 +0000
ROA not before:           Mon 31 Mar 2025 17:00:56 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.156.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:eb:79:a8:a3:41:68:64:ce:86:9e:d8:12:fc:95:5e:29:8a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:00:56 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=b82ec26c6ddafdddfa035cc25f0daa1c3b18c7cd7a3d6b81b97890d8462efd13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:a6:e1:ff:22:31:13:3b:b1:29:19:78:89:
                    7f:50:33:95:0c:bc:63:07:50:cb:a3:a1:2f:12:dd:
                    5d:2f:2b:56:52:6d:1c:e9:e9:ab:0b:50:58:b5:bb:
                    e0:4f:87:99:d8:bf:c7:ea:ef:61:5a:4c:35:d2:8a:
                    ba:35:2b:44:a9:72:58:06:66:8f:ca:1f:20:1b:b4:
                    ee:ff:d3:9a:f8:f6:34:25:a9:05:de:2b:fd:91:da:
                    38:99:58:80:e1:4d:06:3e:6c:2b:19:4b:af:01:4b:
                    a8:32:53:eb:f8:1c:ae:8b:8f:13:b6:a4:00:3e:b0:
                    68:79:93:dc:b3:92:97:09:c0:7a:8d:bd:10:b2:98:
                    36:75:4a:48:b8:93:90:73:af:ea:1e:3a:d4:f8:a1:
                    48:cb:c0:bc:53:d3:c8:07:cf:60:71:45:8a:7c:66:
                    7f:1d:fb:1f:65:b4:c9:e5:0e:fc:89:54:ac:72:e5:
                    f4:65:4b:c0:53:83:3b:7b:ce:ee:50:b5:00:52:20:
                    c1:58:a9:8b:8c:ce:75:1a:99:13:f3:78:52:20:e3:
                    bd:d1:64:44:bf:88:12:fa:f3:c2:96:3c:c3:b6:0d:
                    a8:43:bf:26:6d:49:93:dc:f3:60:bb:45:8e:65:89:
                    a2:6f:14:06:92:4b:4e:f7:6e:c7:24:b7:3e:bc:9d:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E6:FC:7D:67:96:08:3B:81:2C:44:42:44:55:4A:33:43:10:A1:C8
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c4526-620b-4572-a2b1-7b2759cb8e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.156.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         24:39:21:ec:5d:f4:ce:69:1e:02:02:87:3f:19:19:1c:d8:0d:
         b8:b4:80:81:95:f8:4a:a7:d9:49:72:78:1a:4f:57:34:2e:d2:
         62:25:a7:aa:47:8e:b0:b1:ac:20:ba:56:71:02:37:d6:50:ad:
         7c:0f:e8:b4:e1:7b:70:74:0c:91:88:26:12:32:75:de:52:37:
         cc:b5:3a:e4:1e:27:45:66:08:03:3f:2a:68:73:2d:a4:23:aa:
         40:f6:34:5a:09:d5:3d:64:66:eb:6b:2a:2d:3b:88:89:3b:b8:
         68:12:73:b9:19:04:45:fb:69:0e:83:96:a7:04:7d:73:14:18:
         16:f4:c8:75:27:e4:2d:9c:67:06:de:7d:33:23:54:73:ac:5a:
         e1:b3:62:a4:5c:d4:3a:7d:f2:40:2b:0f:b7:ed:c8:3a:1d:67:
         fe:5a:a0:03:7c:87:fb:b3:ad:f3:51:90:08:71:82:4b:71:30:
         fe:da:ed:bd:bd:b0:7a:fe:65:b6:de:8e:39:6c:67:c2:c6:b5:
         3c:2d:27:29:eb:cf:92:62:78:d8:54:51:27:ce:64:ad:b0:20:
         9c:64:0b:c2:5a:65:fd:cc:64:2f:df:05:af:70:dd:f2:e9:f9:
         6e:97:4f:d4:e4:26:4c:c5:0f:f4:34:94:1c:f7:10:5f:c3:93:
         a3:75:c9:be
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGGHreaijQWhkzoae2BL8lV4piuMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTcwMDU2WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiODJlYzI2YzZkZGFmZGRkZmEwMzVjYzI1ZjBkYWExYzNi
MThjN2NkN2EzZDZiODFiOTc4OTBkODQ2MmVmZDEzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz3qbh/yIxEzuxKRl4iX9QM5UMvGMHUMujoS8S3V0vK1ZS
bRzp6asLUFi1u+BPh5nYv8fq72FaTDXSiro1K0SpclgGZo/KHyAbtO7/05r49jQl
qQXeK/2R2jiZWIDhTQY+bCsZS68BS6gyU+v4HK6LjxO2pAA+sGh5k9yzkpcJwHqN
vRCymDZ1Ski4k5Bzr+oeOtT4oUjLwLxT08gHz2BxRYp8Zn8d+x9ltMnlDvyJVKxy
5fRlS8BTgzt7zu5QtQBSIMFYqYuMznUamRPzeFIg473RZES/iBL688KWPMO2DahD
vyZtSZPc82C7RY5liaJvFAaSS073bscktz68nSKLAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUSub8fWeWCDuBLERCRFVKM0MQocgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRlNWM0NTI2LTYyMGItNDU3Mi1hMmIxLTdiMjc1OWNiOGU3Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEPnDANBgkqhkiG9w0BAQsFAAOCAQEAJDkh7F30zmkeAgKHPxkZHNgNuLSA
gZX4SqfZSXJ4Gk9XNC7SYiWnqkeOsLGsILpWcQI31lCtfA/otOF7cHQMkYgmEjJ1
3lI3zLU65B4nRWYIAz8qaHMtpCOqQPY0WgnVPWRm62sqLTuIiTu4aBJzuRkERftp
DoOWpwR9cxQYFvTIdSfkLZxnBt59MyNUc6xa4bNipFzUOn3yQCsPt+3IOh1n/lqg
A3yH+7Ot81GQCHGCS3Ew/trtvb2wev5ltt6OOWxnwsa1PC0nKevPkmJ42FRRJ85k
rbAgnGQLwlpl/cxkL98Fr3Dd8un5bpdP1OQmTMUP9DSUHPcQX8OTo3XJvg==
-----END CERTIFICATE-----