Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1f2a34-1769-40a1-8bc7-967fa7c8340c.roa
File:                     ab1f2a34-1769-40a1-8bc7-967fa7c8340c.roa (raw, json)
Hash identifier:          M964uFNNZw4l/q+bksviOk9eyHBZ7sK52Z5OhRuWCoc=
Subject key identifier:   14:2E:E8:3D:0B:4A:0B:24:EE:A5:88:12:87:D9:80:2D:86:0A:74:55
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       33C1010155445E992D0C8F601ECAED98F4F7411D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1f2a34-1769-40a1-8bc7-967fa7c8340c.roa
Signing time:             Mon 31 Mar 2025 18:21:12 +0000
ROA not before:           Mon 31 Mar 2025 18:21:12 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.80.0.0/13 maxlen: 13

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c1:01:01:55:44:5e:99:2d:0c:8f:60:1e:ca:ed:98:f4:f7:41:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 18:21:12 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=942dc11bfb6be7c16c46d8e4deb2fb545683c63e2d836bc128c2ad548ece3f7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:7b:87:2f:64:35:73:71:24:07:ec:b2:63:
                    48:bd:eb:b1:35:33:86:50:9b:00:aa:85:40:f5:13:
                    cb:14:00:56:23:40:e4:86:48:6c:e4:08:7a:ca:02:
                    e6:01:61:1c:47:e4:9e:9c:e6:01:a8:95:de:e9:74:
                    66:31:c8:10:1c:c9:a8:a6:13:ab:1b:1c:20:00:5c:
                    2e:e7:d5:c3:32:2e:b6:2c:21:fa:c7:5b:d2:0f:3c:
                    29:98:d2:69:e7:88:d8:6d:e2:bc:3a:85:d5:3f:21:
                    1f:2e:28:61:27:d6:bd:69:bf:eb:08:6b:d8:e9:75:
                    ab:97:bf:75:02:a2:66:91:f2:79:bf:c4:c3:ef:07:
                    6e:f7:c4:84:50:54:bd:c1:28:bf:4b:e0:b5:6b:84:
                    33:0a:b1:69:81:e0:68:1a:d5:c3:ac:5d:d3:bb:c7:
                    d8:db:24:54:b4:8e:7b:34:ae:a7:9c:cc:60:16:4a:
                    bc:3d:a2:1f:f7:76:a4:60:ed:8a:9a:01:12:a4:51:
                    c9:a8:b0:b6:d3:57:bf:a1:39:fd:71:14:d6:8f:13:
                    59:67:71:be:46:75:06:47:f5:66:85:6e:c9:f1:6d:
                    cd:cd:2e:5b:49:9c:f7:24:0b:4b:87:38:27:47:87:
                    20:31:5d:72:04:f6:21:c3:98:51:5c:5f:0a:7b:9f:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:E8:3D:0B:4A:0B:24:EE:A5:88:12:87:D9:80:2D:86:0A:74:55
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1f2a34-1769-40a1-8bc7-967fa7c8340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:33:7c:05:75:0d:dd:67:17:b9:cf:44:40:93:d4:27:6c:
         44:5a:a6:ba:7f:a8:45:20:b7:97:10:51:25:32:cf:e4:24:00:
         97:a1:69:3e:28:77:5b:c6:b1:f7:19:ce:39:f3:9d:4d:63:70:
         bd:b0:fc:91:71:fc:e6:4a:0b:b7:f3:51:b6:93:5f:fa:ff:6e:
         45:3a:f2:de:25:f0:12:1f:19:5a:27:c3:2f:5b:e8:0f:41:49:
         43:61:dd:f3:cc:23:d1:6c:3c:8b:08:79:ca:1b:5a:76:7c:28:
         a8:84:32:d0:58:92:0e:48:fe:86:bc:73:9d:22:1a:fb:14:10:
         ff:db:28:d3:d3:c9:b9:3f:26:81:0f:1d:80:15:f0:58:73:86:
         6b:41:71:a3:a6:36:7a:47:1f:a1:57:4f:d9:02:f2:de:d7:82:
         b9:cc:c5:94:5e:9a:e7:dc:e2:4c:dc:e8:4d:94:50:d2:93:5f:
         34:95:26:35:ca:c5:84:3e:66:97:b0:d6:55:5c:f1:74:f5:1e:
         23:b1:ce:9f:ec:c7:8a:17:35:1d:36:2b:b1:d3:46:0f:b7:2f:
         27:75:e8:82:54:19:5f:59:67:bd:97:9e:cc:58:dd:6e:01:19:
         79:11:79:07:17:bd:e2:4c:1e:f2:6c:a0:c2:60:41:79:91:76:
         30:bb:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----