Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa
File:                     ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa (raw, json)
Hash identifier:          IknaDZgdKQPeNCDhGmrrEP2N6b0OlJnkc5hZtppa53k=
Subject key identifier:   A5:1A:9A:99:3D:97:78:71:51:FE:81:74:21:01:83:40:05:79:1F:99
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6BB500126B6D71F4C1AB2C4DF2B919023C52E3E9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa
Signing time:             Mon 31 Mar 2025 17:51:24 +0000
ROA not before:           Mon 31 Mar 2025 17:51:24 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.221.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:00:12:6b:6d:71:f4:c1:ab:2c:4d:f2:b9:19:02:3c:52:e3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:51:24 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=8279060aa05a8dd5e78a5d73a755a1acced75865b66239552b37fb4fe6761bf7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:ee:3b:8f:46:0b:5f:b5:a3:6c:27:da:e5:
                    3a:fc:3c:ba:bf:4d:e9:7f:68:25:ab:2b:15:17:0b:
                    54:e0:a0:62:41:0f:19:c2:68:69:d6:d6:6d:d3:ed:
                    b6:58:e9:52:3d:6b:1c:43:7c:02:81:e2:05:60:2b:
                    c7:ff:31:40:5f:7f:17:79:3e:5d:6f:92:ef:cd:fa:
                    ef:40:7a:e1:79:da:cb:b8:d1:d8:dc:89:fd:57:d8:
                    1b:61:3a:41:c5:3d:07:64:af:dc:e7:c1:9b:76:80:
                    17:47:90:d3:cf:a3:fa:1a:da:8b:0e:ed:04:ad:62:
                    d1:92:a3:cc:94:f7:78:a6:fa:45:fc:15:10:c4:a0:
                    80:49:f6:97:a2:e6:e3:b5:70:4a:6f:bd:fd:ad:98:
                    05:66:0a:0c:14:8b:59:13:b9:26:e0:21:ea:1e:76:
                    dd:cd:b4:dd:ed:9e:08:14:fd:42:02:f9:39:1b:12:
                    91:cb:69:0c:37:e6:e7:69:df:32:9a:ac:65:1b:bd:
                    9a:ec:a0:33:57:23:2b:5a:fc:df:14:7a:b4:f8:21:
                    3f:3b:9b:6e:c0:e9:cf:bc:c5:ed:6c:3e:75:04:e1:
                    c0:80:ee:8f:98:9d:49:15:cd:48:2f:66:3a:e1:2e:
                    b3:44:8e:af:8c:a3:ef:9d:0e:b5:e5:f3:f9:9f:11:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1A:9A:99:3D:97:78:71:51:FE:81:74:21:01:83:40:05:79:1F:99
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:47:ac:cc:8c:6f:0e:74:8f:cd:19:17:d0:a2:5d:ea:9e:c6:
         13:15:78:cd:ae:cc:95:e7:af:bc:1e:3c:f4:3d:8a:72:80:09:
         7c:7f:82:13:56:3b:50:03:e0:2b:b2:b2:67:2f:2a:49:a8:8e:
         62:a3:9e:58:aa:37:f2:13:90:6a:ab:eb:fa:c0:6d:c5:f9:31:
         83:01:51:f5:b8:8f:bf:70:97:ba:2f:1d:67:88:25:64:35:26:
         a1:2a:c9:fa:e1:f3:d5:6d:f8:74:b0:24:e2:ab:e8:0a:bf:9b:
         b9:58:b6:92:20:84:56:20:4b:fb:6f:ca:ae:43:51:63:ca:ac:
         46:1d:80:18:85:00:eb:60:02:91:de:4e:43:16:a9:93:60:f5:
         48:0d:18:c7:92:87:a5:bc:91:3a:d9:96:7d:e2:92:3d:c4:a5:
         ff:be:01:1c:55:d7:8c:4c:c9:ee:d6:43:e4:61:20:eb:d2:2b:
         f9:d5:c9:76:89:aa:d6:13:2f:15:ce:ab:bd:00:29:59:8b:1e:
         3b:c7:be:7c:c5:15:c1:4c:c3:b4:1d:62:0b:d1:29:20:58:56:
         a1:22:14:26:e3:5f:92:4c:8b:c9:24:29:1e:d0:4f:ae:2c:25:
         67:ae:19:8e:7c:2f:0d:73:45:3f:4b:43:f4:bf:ad:0a:f7:62:
         1e:7b:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----