Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ea43bb7-9b25-4f1d-8b0e-5f5720a2b924.roa
File:                     4ea43bb7-9b25-4f1d-8b0e-5f5720a2b924.roa (raw, json)
Hash identifier:          JTWVeRz2qm9TZb/YmzzhiJ1m5WexhDk7pYXnXKEk6Ok=
Subject key identifier:   1C:BC:F8:6E:28:29:7B:63:6F:BB:BE:1A:BF:A1:12:72:0E:AC:5B:98
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2D630343E37A9E55B303C663C1E819CE5AA1EA42
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ea43bb7-9b25-4f1d-8b0e-5f5720a2b924.roa
Signing time:             Mon 24 Mar 2025 17:21:48 +0000
ROA not before:           Mon 24 Mar 2025 17:21:48 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.204.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:63:03:43:e3:7a:9e:55:b3:03:c6:63:c1:e8:19:ce:5a:a1:ea:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 17:21:48 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=1716bb79f9c00c177013a972ec90648a9e1be9c1cf1e00cd5c75489b94be29da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:e3:e7:a8:b1:fd:71:83:5f:23:08:6f:db:
                    5e:c8:5f:cd:7e:72:ff:95:d4:22:9e:49:78:63:27:
                    d7:13:40:3c:25:47:54:9a:3b:d8:6d:fe:3f:21:cf:
                    41:7d:74:c9:c6:26:22:83:dd:a4:e0:7b:d8:93:c5:
                    00:e3:b1:fa:25:09:6b:7b:7c:c4:c8:96:fc:cf:51:
                    84:84:8b:e7:ab:c0:4b:9e:11:db:c8:d4:6d:cd:2c:
                    6a:b5:fb:88:6f:4a:b4:1d:ea:db:4b:d5:97:19:9a:
                    19:9c:07:12:3a:de:15:7b:dd:48:56:da:ac:0b:9a:
                    a5:3f:27:69:7c:49:e4:f0:03:5d:49:7b:ca:98:eb:
                    25:92:ba:5a:d7:9e:e4:22:da:c0:24:bb:ab:f5:41:
                    4f:37:da:9e:fb:53:0a:2f:14:5c:eb:34:e9:42:34:
                    fd:5c:eb:ac:c7:72:0d:76:3f:93:a2:44:c5:4f:a2:
                    59:a6:17:e6:50:8b:fd:1e:94:97:1d:a5:2f:d7:f5:
                    be:25:1c:11:53:b1:b9:13:53:d3:77:ac:7c:02:ad:
                    b5:4d:f2:04:5f:de:45:51:ae:35:a2:58:ce:d6:66:
                    a4:bb:7f:9e:79:d1:e4:a4:81:7d:6b:4d:57:44:c2:
                    57:6f:c3:42:79:ba:eb:46:ed:de:49:45:c5:60:1a:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:F8:6E:28:29:7B:63:6F:BB:BE:1A:BF:A1:12:72:0E:AC:5B:98
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ea43bb7-9b25-4f1d-8b0e-5f5720a2b924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.204.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:5f:54:d0:6b:e8:cb:67:69:3d:4a:d8:43:33:fb:d1:2c:
         3e:da:2b:10:64:97:21:fc:e9:f8:a0:ff:2f:35:df:a9:82:e8:
         85:94:f5:fe:5e:dd:0a:48:29:49:f3:3c:7c:78:ea:3b:ec:72:
         81:85:9b:0b:2d:30:4a:d6:fa:33:2a:d1:65:0d:3d:1a:70:89:
         60:7e:da:ee:94:23:5a:ae:c3:76:7c:47:9d:db:be:59:3c:f2:
         00:37:a6:a7:a5:e3:0c:b4:a9:03:78:44:36:8b:d9:c1:83:ce:
         7a:24:c7:0a:c4:ea:d9:c8:dd:f4:5f:02:61:a4:74:f7:fd:99:
         f2:44:b9:0b:e1:08:de:67:a0:c3:90:33:bb:34:c6:7e:f6:f1:
         99:7a:40:fc:65:3a:82:e8:ad:3b:99:4c:99:d3:cd:6d:7d:33:
         1d:27:c0:04:b9:85:09:e3:75:df:b6:f2:74:82:ae:e0:d2:4d:
         e7:72:1b:a6:91:d9:76:a4:d5:cf:a0:63:e8:1f:15:b3:8e:4f:
         b4:94:45:a1:8a:51:e0:45:a7:fe:6a:66:95:d0:97:50:2f:b6:
         98:db:6f:6e:77:91:d1:08:c5:0d:94:57:1c:1d:7d:c7:07:bc:
         06:41:0e:05:1d:05:54:15:ff:fd:2a:f4:31:05:a8:7c:93:4e:
         01:30:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----