Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/529b9429-a63e-4015-896f-d45cfa5e90b2.roa
File:                     529b9429-a63e-4015-896f-d45cfa5e90b2.roa (raw, json)
Hash identifier:          TDOGdZuF1T1FPpS751NXGPYlTfO3iQ+QGIyoInmBmZg=
Subject key identifier:   6E:0F:5E:62:EC:38:55:6F:CD:58:4A:57:BF:CF:BE:DE:C4:56:D7:EE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5DDC3AA6226AAF58A7D07ADD1702FAF874F1BBE2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/529b9429-a63e-4015-896f-d45cfa5e90b2.roa
Signing time:             Mon 24 Mar 2025 16:01:49 +0000
ROA not before:           Mon 24 Mar 2025 16:01:49 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.94.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:dc:3a:a6:22:6a:af:58:a7:d0:7a:dd:17:02:fa:f8:74:f1:bb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 16:01:49 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=4b2dc8b3cf21dc0e32cb0528d515fbcaaff68406c8b835c5b66bc1aadafa2969, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:08:9f:24:87:b7:5b:27:b1:fe:8f:48:e6:
                    75:2f:c8:d4:59:e5:b0:c2:d4:ee:16:a9:b3:23:a8:
                    11:3d:c0:8a:e5:32:27:23:3c:46:63:11:6d:0e:11:
                    d9:9a:4d:18:4f:53:a1:69:ac:8f:b3:80:bd:aa:d2:
                    c5:e0:60:e3:a2:e3:92:c7:c8:24:2b:3d:63:2c:4a:
                    5c:07:9a:ad:97:d7:d7:38:2c:31:9f:9d:fe:9c:82:
                    99:c8:b4:86:93:2a:95:27:f7:04:a4:67:87:fe:83:
                    b0:3d:b6:73:f6:8a:c6:c3:b8:e0:71:bf:63:8b:19:
                    c0:42:6e:61:c7:cb:46:1f:80:ec:a1:2d:3c:c8:0f:
                    77:c8:fa:c0:84:4d:fb:f6:1c:c2:1d:c9:96:a4:40:
                    74:91:45:85:2a:15:33:3d:c8:a8:6e:c8:98:f9:62:
                    dd:cd:e6:21:98:32:e1:9b:27:92:02:f9:89:8c:b9:
                    83:57:c0:e3:48:58:16:0d:ae:5c:48:b0:4e:01:4f:
                    33:14:1b:89:36:cb:54:4c:45:9c:b2:fd:1d:36:f6:
                    60:41:3d:7d:95:b8:f5:2e:e6:9e:8e:59:b0:11:54:
                    1c:57:9f:59:e0:c5:a0:e3:c1:40:a8:75:1d:79:27:
                    72:ae:27:a5:3f:e5:37:cc:9d:d4:b5:de:0b:e5:04:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:5E:62:EC:38:55:6F:CD:58:4A:57:BF:CF:BE:DE:C4:56:D7:EE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/529b9429-a63e-4015-896f-d45cfa5e90b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:17:4c:16:8e:de:ad:ba:df:36:cc:a4:3f:82:b0:a0:8f:a2:
         ce:a3:55:be:fc:43:f1:37:6a:77:eb:0b:ed:40:88:00:20:32:
         41:1d:91:62:7d:f5:e9:9e:3d:30:58:40:ea:6a:26:e6:2a:ae:
         de:7b:7e:65:24:5d:87:61:a2:7a:f1:e9:54:9c:31:30:98:2d:
         0d:ed:37:38:a9:a5:57:ff:41:5e:13:b3:89:a5:f4:9e:9a:ce:
         19:5e:81:ed:9f:29:8a:3a:14:d9:d9:93:5a:3c:b7:70:78:c7:
         7a:06:05:92:5a:55:66:56:77:b8:07:4a:85:36:12:0a:2e:e8:
         f4:cb:91:94:30:03:92:37:4b:1c:06:e3:a2:b4:b4:f0:77:9a:
         09:d7:7b:ca:3b:10:af:39:6f:15:fc:d3:45:9b:96:3e:cb:c9:
         77:9e:77:cf:55:78:58:df:15:7f:ec:ba:e7:3a:6b:1b:72:1d:
         34:19:3c:61:ee:d7:cd:9a:df:92:7e:bb:ed:3b:46:73:7f:d1:
         f6:9a:35:05:e0:92:b8:e4:16:ca:fc:9d:e8:14:61:ab:99:ce:
         73:04:f2:a9:97:3a:78:28:28:65:2c:e4:53:06:8f:14:d8:43:
         f1:4d:ad:ec:df:30:17:bb:b7:49:28:e8:90:21:f6:32:06:7c:
         a2:4e:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----