Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa
File:                     706605b1-d013-4cfc-8d02-b36908000843.roa (raw, json)
Hash identifier:          42xj121n5UF4v3aYZm6Tu9VCccYy2MjbuxfxF9E6o3g=
Subject key identifier:   D8:99:68:8C:B4:77:C6:17:14:FB:AA:2D:20:40:28:4A:48:5E:9A:16
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7D8608DC2333435775935617BF99EFD56E8671FF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa
Signing time:             Mon 31 Mar 2025 18:20:47 +0000
ROA not before:           Mon 31 Mar 2025 18:20:47 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.89.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:08:dc:23:33:43:57:75:93:56:17:bf:99:ef:d5:6e:86:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 18:20:47 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=664ed8b5ccb2cbfda0393e98ab88752acd930078b43cecf528941bec821020f3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:d0:52:7d:c4:e8:4c:e5:5e:32:52:bf:ae:
                    e1:c7:4b:53:21:54:fa:b4:7d:c5:83:7b:64:a2:02:
                    4e:82:df:66:7c:9d:de:e9:81:8a:23:04:78:35:c9:
                    69:ae:b0:d7:01:6e:ae:c7:37:68:a5:13:43:64:f6:
                    21:70:7c:41:ef:fd:10:00:4f:85:8f:d2:c7:96:35:
                    73:f3:72:53:cd:2e:85:7c:2c:0d:bd:d8:81:37:69:
                    d2:9b:20:00:f0:46:af:be:3e:45:6d:20:5c:70:8a:
                    0b:a6:c7:1e:f1:5d:f1:4b:82:ce:75:a9:82:d4:77:
                    da:d6:e7:a1:05:dd:91:03:ea:74:2e:87:63:86:f4:
                    d6:71:22:1e:37:61:ea:a7:71:0b:94:e5:f1:e1:b2:
                    c1:23:0c:23:49:b1:1b:ed:09:75:8a:97:ed:1d:11:
                    96:b5:f3:b3:a6:3d:e8:33:55:e3:6e:b3:09:8c:ab:
                    1c:4c:73:ff:8d:19:29:b1:42:91:e0:72:28:2b:2c:
                    a3:5c:87:a2:80:b4:d2:44:eb:4c:28:e3:cb:11:08:
                    19:e2:bc:a4:2c:89:44:9e:6a:42:ad:95:25:55:8a:
                    3f:0b:7e:04:af:e4:8c:80:83:22:84:9c:8a:80:31:
                    1d:84:76:b3:87:f1:49:35:a1:53:d2:2f:86:8c:66:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:68:8C:B4:77:C6:17:14:FB:AA:2D:20:40:28:4A:48:5E:9A:16
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.89.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:98:31:17:fe:2e:ce:15:4e:79:24:50:23:3e:e5:2f:63:9d:
         6d:c3:72:a1:cb:1c:48:eb:3a:4e:6a:ba:24:2c:12:91:07:6d:
         c1:35:0b:68:b7:52:58:2d:1e:1c:9d:53:b6:de:8a:51:7c:da:
         40:7e:b6:ac:e7:93:67:de:74:68:de:45:ff:b7:fb:d4:4a:5e:
         0e:50:a3:f2:50:ce:96:4b:27:fd:64:f0:60:3a:8f:59:1d:35:
         a4:dd:83:8d:cd:e5:e8:6b:00:87:58:b2:3d:b8:52:b1:ef:61:
         db:a5:ce:01:09:68:af:ec:32:25:f0:f4:a9:10:c6:03:d2:b3:
         dc:d7:ab:55:77:e5:3b:65:67:4f:f2:c4:22:82:80:34:44:ed:
         89:84:ad:b8:2e:7e:6d:ac:cb:04:d0:a1:ed:d7:76:6d:2f:cc:
         6a:9f:96:61:32:32:b1:24:6e:19:72:e5:74:78:f9:a3:26:5c:
         85:85:3f:cb:7c:1d:a0:75:63:a2:79:09:5c:6e:5b:25:2f:6b:
         29:14:e8:66:dc:1d:06:89:47:e6:f2:20:d9:32:28:cb:d4:3f:
         ef:9c:78:84:09:ea:6f:b1:99:42:d6:37:34:9d:1f:4e:6d:3b:
         50:16:3c:13:e0:ff:5c:84:7d:1d:05:96:22:26:34:d6:6b:7d:
         8b:57:56:62
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfYYI3CMzQ1d1k1YXv5nv1W6Gcf8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTgyMDQ3WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NjRlZDhiNWNjYjJjYmZkYTAzOTNlOThhYjg4NzUyYWNk
OTMwMDc4YjQzY2VjZjUyODk0MWJlYzgyMTAyMGYzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXrtBSfcToTOVeMlK/ruHHS1MhVPq0fcWDe2SiAk6C32Z8
nd7pgYojBHg1yWmusNcBbq7HN2ilE0Nk9iFwfEHv/RAAT4WP0seWNXPzclPNLoV8
LA292IE3adKbIADwRq++PkVtIFxwigumxx7xXfFLgs51qYLUd9rW56EF3ZED6nQu
h2OG9NZxIh43YeqncQuU5fHhssEjDCNJsRvtCXWKl+0dEZa187OmPegzVeNuswmM
qxxMc/+NGSmxQpHgcigrLKNch6KAtNJE60wo48sRCBnivKQsiUSeakKtlSVVij8L
fgSv5IyAgyKEnIqAMR2EdrOH8Uk1oVPSL4aMZpuJAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU2JlojLR3xhcU+6otIEAoSkhemhYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzcwNjYwNWIxLWQwMTMtNGNmYy04ZDAyLWIzNjkwODAwMDg0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2WTANBgkqhkiG9w0BAQsFAAOCAQEAmpgxF/4uzhVOeSRQIz7lL2OdbcNy
ocscSOs6Tmq6JCwSkQdtwTULaLdSWC0eHJ1Ttt6KUXzaQH62rOeTZ950aN5F/7f7
1EpeDlCj8lDOlksn/WTwYDqPWR01pN2Djc3l6GsAh1iyPbhSse9h26XOAQlor+wy
JfD0qRDGA9Kz3NerVXflO2VnT/LEIoKANETtiYStuC5+bazLBNCh7dd2bS/Map+W
YTIysSRuGXLldHj5oyZchYU/y3wdoHVjonkJXG5bJS9rKRToZtwdBolH5vIg2TIo
y9Q/75x4hAnqb7GZQtY3NJ0fTm07UBY8E+D/XIR9HQWWIiY01mt9i1dWYg==
-----END CERTIFICATE-----