Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa
File:                     b1a9d485-3494-46cc-b104-fcee651d4b2b.roa (raw, json)
Hash identifier:          9D9MSvMdWt8YYpHRdVv507VyGxCH8RXWaNGAT1Y8qCc=
Subject key identifier:   18:56:C2:6A:71:46:39:D0:27:5F:DB:C1:22:92:DA:03:B6:59:07:99
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       6EC8E43AC49B4974D3906206B5785636D75186B6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa
Signing time:             Mon 31 Mar 2025 18:00:14 +0000
ROA not before:           Mon 31 Mar 2025 18:00:14 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.79.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:e4:3a:c4:9b:49:74:d3:90:62:06:b5:78:56:36:d7:51:86:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 18:00:14 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=e97f231f249acec0237c3d83a51b9b76d885bbd9da51e5288719394c6c4318c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:32:6d:f5:c2:c3:bb:ba:2e:2f:c6:8f:69:
                    d6:5d:d1:57:5e:e2:1d:1b:9f:a4:3a:96:90:f5:bd:
                    cc:33:0c:84:19:7f:59:55:42:75:a6:6a:9c:e5:60:
                    9a:d0:9e:e4:31:e0:ae:a9:67:71:96:d0:b1:e7:c5:
                    a9:4f:a8:c4:ff:4f:84:71:81:96:e5:f5:66:e4:d1:
                    c3:98:2d:d6:3a:b8:93:d7:e3:02:0b:6d:82:a1:46:
                    46:32:9b:7b:20:c4:66:75:73:d9:48:ee:05:fd:ef:
                    92:95:98:82:d7:f3:6d:44:7f:cc:82:fe:a7:fe:b4:
                    38:3b:c9:4f:2a:1f:bb:24:68:69:91:41:0f:07:ff:
                    02:4d:5f:63:94:f0:b2:46:fb:04:39:cc:0f:4e:d1:
                    5b:96:cd:36:2e:1c:86:f6:f4:ae:c8:82:a9:3b:dc:
                    ce:9b:a0:31:e6:63:7d:f8:2b:4e:be:04:10:fc:c6:
                    1e:11:32:74:a4:07:a0:c0:d3:4e:24:25:fd:7c:96:
                    75:42:9c:6b:e3:21:6c:7b:e7:1d:0e:83:ec:69:14:
                    c5:48:6b:eb:ac:78:21:55:b7:a1:22:6a:eb:13:e2:
                    e8:0b:22:6a:66:b2:02:a6:e2:b3:3b:3f:01:a1:19:
                    8b:4f:bb:b7:41:cd:88:05:97:cf:de:67:e1:92:70:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:C2:6A:71:46:39:D0:27:5F:DB:C1:22:92:DA:03:B6:59:07:99
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.79.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:98:45:bf:21:83:61:e3:89:05:40:b2:7c:50:52:8a:ae:a8:
         85:7d:53:50:71:06:16:8a:c0:e8:3a:62:42:75:7a:fc:b7:77:
         4c:cd:54:21:1a:3f:e7:cc:6b:39:af:e6:7e:a7:ca:21:b4:d4:
         10:f9:e9:b4:aa:a1:7c:a1:39:13:a7:43:4e:e9:80:4e:3c:47:
         43:86:95:0a:66:9f:a0:2b:a4:3f:37:72:9a:a7:d6:76:87:e7:
         84:70:1d:4b:bd:97:2a:54:7e:06:48:c7:f8:a1:ea:7a:27:67:
         1c:aa:61:ba:7c:08:b3:40:34:5e:89:b7:7e:03:94:ce:f0:a2:
         73:12:39:f4:2a:e1:79:ae:61:03:8c:33:2f:7e:51:65:4e:ac:
         71:1d:25:cf:d5:c0:c0:4d:ab:0a:7b:dd:40:fd:91:8f:63:9f:
         e3:b3:9d:50:74:00:e1:8e:f5:3d:6e:3d:4e:cd:00:55:5b:e6:
         25:bb:78:c5:f2:8d:ef:72:f9:00:eb:cf:a3:f4:bb:57:a7:d5:
         00:ea:10:5a:b1:20:6c:35:ab:a1:be:d6:df:85:67:12:71:ed:
         3a:a2:91:5d:ae:81:99:ec:4c:70:4a:e9:d8:47:9a:7c:64:8a:
         a8:9d:d3:41:b2:fc:5c:f5:c7:f5:91:90:f1:e0:e7:96:17:b5:
         da:1f:8d:f8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbsjkOsSbSXTTkGIGtXhWNtdRhrYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTgwMDE0WhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTdmMjMxZjI0OWFjZWMwMjM3YzNkODNhNTFiOWI3NmQ4
ODViYmQ5ZGE1MWU1Mjg4NzE5Mzk0YzZjNDMxOGM2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm/TJt9cLDu7ouL8aPadZd0Vde4h0bn6Q6lpD1vcwzDIQZ
f1lVQnWmapzlYJrQnuQx4K6pZ3GW0LHnxalPqMT/T4RxgZbl9Wbk0cOYLdY6uJPX
4wILbYKhRkYym3sgxGZ1c9lI7gX975KVmILX821Ef8yC/qf+tDg7yU8qH7skaGmR
QQ8H/wJNX2OU8LJG+wQ5zA9O0VuWzTYuHIb29K7Igqk73M6boDHmY334K06+BBD8
xh4RMnSkB6DA004kJf18lnVCnGvjIWx75x0Og+xpFMVIa+useCFVt6EiausT4ugL
ImpmsgKm4rM7PwGhGYtPu7dBzYgFl8/eZ+GScKg/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGFbCanFGOdAnX9vBIpLaA7ZZB5kwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IxYTlkNDg1LTM0OTQtNDZjYy1iMTA0LWZjZWU2NTFkNGIyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc2T4AwDQYJKoZIhvcNAQELBQADggEBAIaYRb8hg2HjiQVAsnxQUoquqIV9
U1BxBhaKwOg6YkJ1evy3d0zNVCEaP+fMazmv5n6nyiG01BD56bSqoXyhOROnQ07p
gE48R0OGlQpmn6ArpD83cpqn1naH54RwHUu9lypUfgZIx/ih6nonZxyqYbp8CLNA
NF6Jt34DlM7wonMSOfQq4XmuYQOMMy9+UWVOrHEdJc/VwMBNqwp73UD9kY9jn+Oz
nVB0AOGO9T1uPU7NAFVb5iW7eMXyje9y+QDrz6P0u1en1QDqEFqxIGw1q6G+1t+F
ZxJx7TqikV2ugZnsTHBK6dhHmnxkiqid00Gy/Fz1x/WRkPHg55YXtdofjfg=
-----END CERTIFICATE-----