Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa
File:                     cd6ba133-317d-4331-bd93-2eabe2658e7d.roa (raw, json)
Hash identifier:          H3wtvgzgc1aygkjOkV9nODxg31XdD1roJM9MzEXLC2o=
Subject key identifier:   37:13:E8:A7:57:79:CA:55:01:06:9D:87:C5:CF:6C:7A:22:84:8C:FD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       46E89939E58CA15F0296AB1C53C2F1BED37BFDC0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa
Signing time:             Mon 24 Mar 2025 16:21:44 +0000
ROA not before:           Mon 24 Mar 2025 16:21:44 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.150.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e8:99:39:e5:8c:a1:5f:02:96:ab:1c:53:c2:f1:be:d3:7b:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 16:21:44 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=d0c345a24f791eccf2cafd3426e846f5e9b478aee55ea76f8df2ab3132097359, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:51:04:e8:a8:c4:68:38:d2:bb:6e:36:a0:
                    ca:5e:62:2f:1c:21:68:63:27:78:e5:c2:d4:db:a4:
                    84:0d:f7:55:0c:36:6f:fe:a6:d8:21:04:d0:58:2c:
                    80:c2:fc:fe:c2:b4:be:84:99:b2:8f:5d:c0:ef:6f:
                    ea:b5:fb:4e:2e:5e:a8:81:dc:53:be:5d:4b:53:bb:
                    0d:67:b2:96:34:d5:91:23:04:0f:69:a5:f9:1c:64:
                    ff:6a:ad:62:43:f4:e7:34:6b:51:78:f3:61:09:b0:
                    52:5c:eb:e1:a1:18:16:3f:cc:d6:4e:21:2f:f7:93:
                    7b:e4:01:87:41:a2:df:4f:c1:88:25:16:b9:e5:05:
                    52:d1:10:c2:f5:da:bc:34:a0:5d:cc:02:f6:8b:6a:
                    d1:35:dc:7a:ea:ae:d2:f1:e5:28:9d:5a:6c:b6:3a:
                    89:0e:90:92:47:89:fb:7a:c4:58:ab:87:b6:78:48:
                    3c:59:79:07:4d:c7:12:ee:b5:a0:c7:49:1b:82:50:
                    22:0c:30:f2:6b:21:68:9f:97:5b:5f:fe:c4:77:74:
                    e6:b1:2b:7a:44:d8:5a:47:b5:2f:e6:e5:8c:d1:05:
                    60:c9:c4:eb:f9:c7:ad:91:db:fa:9c:f6:1f:09:e7:
                    1d:8c:c6:c2:24:ad:a7:8a:b6:a5:38:5c:0c:6c:3f:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:13:E8:A7:57:79:CA:55:01:06:9D:87:C5:CF:6C:7A:22:84:8C:FD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd6ba133-317d-4331-bd93-2eabe2658e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.150.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:7d:3d:34:92:4c:07:fc:e0:f2:e0:3e:27:50:20:d6:ab:
         24:02:27:2a:0b:b3:46:2b:8d:34:1f:59:a4:bc:eb:2f:bc:6e:
         cc:5b:06:1c:51:fa:24:31:ce:f0:0c:9c:25:e1:fe:68:32:55:
         f0:c1:79:b8:98:80:97:70:c1:5f:37:e6:f4:c9:06:b2:af:d3:
         35:11:93:59:be:ba:c5:45:f1:10:b9:b7:98:19:9e:8d:8b:d4:
         a7:e4:6f:e7:aa:87:34:98:75:20:63:7f:44:be:73:79:01:dc:
         13:33:b1:16:0d:af:da:dd:b7:4f:40:64:cf:b0:82:a9:86:64:
         fe:2d:2d:e6:e7:56:b1:b2:80:2a:13:19:d7:4b:3b:8c:7b:39:
         66:21:80:45:b8:eb:88:74:ec:cf:6e:f9:e3:c3:b5:9b:cc:54:
         79:47:25:cd:af:81:af:b9:28:d8:e5:40:50:0f:19:69:58:6f:
         75:ab:05:20:48:44:ab:f1:7e:33:41:a0:e0:9e:6a:f7:62:c4:
         83:5d:b7:da:3e:5b:43:7e:6a:1c:c3:50:56:8a:37:87:66:eb:
         39:a0:b0:48:94:7d:90:53:c7:01:f7:78:b8:26:ba:45:b4:33:
         1f:42:41:57:7d:5d:78:72:d8:4f:89:92:a1:67:ba:c0:00:ab:
         1f:ba:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----