Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa
File:                     64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa (raw, json)
Hash identifier:          KlIjWElZhrkpFxSbYBpOv8nQDWWWaPPdHlljg7iOLpY=
Subject key identifier:   36:D5:1D:5E:82:B4:70:F2:B7:9D:F2:8C:F3:C5:58:8C:0E:FE:B0:AB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3600C422982D44658B43A698F82E6DC53BD16C24
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa
Signing time:             Mon 31 Mar 2025 17:30:24 +0000
ROA not before:           Mon 31 Mar 2025 17:30:24 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        18.252.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:00:c4:22:98:2d:44:65:8b:43:a6:98:f8:2e:6d:c5:3b:d1:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:30:24 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=0d355a5901fbda457f6cb080f70cfb5579c21f602c7cde907a6b5364752fdb38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:55:4e:70:f9:4d:0c:4a:58:e4:d3:b4:92:
                    f8:a4:f3:3d:cc:45:26:41:2f:b0:9c:ce:6f:e8:5c:
                    79:ea:96:a8:cb:7b:1d:13:54:65:a1:40:8d:9c:2b:
                    f9:9a:0c:f3:41:db:e6:66:ee:09:3a:5f:88:36:2c:
                    ca:bb:07:ff:bb:ae:fb:b2:b4:95:83:5c:4c:1d:7a:
                    b5:34:49:e6:ab:cf:d7:e3:d5:1d:df:ba:10:a8:25:
                    db:86:27:65:d8:88:b3:84:2f:2e:dc:ed:ce:24:5e:
                    8a:ec:b8:d1:aa:a8:c6:cc:a8:b2:d0:75:7f:cb:d0:
                    27:64:5d:b7:a7:cd:ef:9c:07:56:e8:4c:69:f7:16:
                    fb:88:34:0c:ec:e4:d2:4e:27:93:79:1c:fe:ea:b1:
                    9a:da:dc:d8:85:77:3d:6a:5d:e1:aa:4f:eb:87:1c:
                    fa:2d:61:89:34:f2:8b:14:ab:9f:80:54:6b:b0:78:
                    67:59:3b:c6:0c:33:82:dd:8b:15:ab:13:fb:22:41:
                    54:0b:97:6c:81:b5:9d:03:8b:bd:56:17:c5:fa:43:
                    7e:af:3c:49:2c:f4:92:9a:e7:04:99:43:06:c7:76:
                    25:9f:e6:1b:ba:ba:79:92:c0:3a:0b:b8:cc:4a:57:
                    ca:ee:fe:51:ed:ae:01:99:f1:53:39:cb:a3:ec:1d:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:1D:5E:82:B4:70:F2:B7:9D:F2:8C:F3:C5:58:8C:0E:FE:B0:AB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:13:4a:33:01:6b:6d:29:70:47:16:38:25:92:97:15:81:
         9e:9c:61:5a:6d:d0:a2:4b:9d:24:9a:46:b8:e6:af:dc:fe:eb:
         1b:69:e4:8c:28:95:ff:18:27:21:e8:65:f4:f3:b2:19:63:92:
         23:25:6d:75:fd:f2:10:44:66:af:23:da:6b:fa:2b:2f:09:1e:
         d8:71:bc:b2:1e:08:e1:b7:ec:14:b7:be:95:09:b0:a6:5a:81:
         5c:eb:f8:0b:72:02:28:fc:e7:c2:22:15:ab:86:14:4d:83:99:
         54:b5:ec:12:b3:d2:0d:a4:54:18:c8:d4:5c:40:f1:0d:9c:65:
         f7:3c:c6:4e:fe:a6:78:54:d3:7c:7a:45:f4:f6:33:bf:6a:84:
         cd:0f:ba:64:32:61:93:a3:37:17:07:fe:ee:39:f7:f3:e3:4a:
         82:d3:7e:e6:20:db:72:3d:e9:fc:c2:da:0d:a2:3e:66:b1:91:
         46:a6:bd:88:8a:37:42:58:2a:80:ca:45:77:ae:dc:48:b4:cc:
         0d:97:a0:6d:f1:3a:b9:22:ef:b8:af:95:b5:7c:0a:90:6b:38:
         b1:14:d1:08:41:89:e5:e5:3d:8b:ea:52:8d:3d:53:fb:bd:45:
         e8:6a:9b:f4:82:1e:b0:94:f0:94:98:73:8c:4a:9b:89:d6:90:
         6b:d2:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----