Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ee0d08-4395-4a27-ae73-3c76d7bc8e63.roa
File:                     d2ee0d08-4395-4a27-ae73-3c76d7bc8e63.roa (raw, json)
Hash identifier:          g7YtlH7v17xCGWS+oe55Ms+GH0TsPWfzUKWA/DYRYAA=
Subject key identifier:   4D:56:D2:78:A0:29:78:99:E1:7A:2C:D3:5F:6C:00:D0:F3:84:1F:CE
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3E1919E3E860D1F1D55A250F8DF6AEA47141A8F2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ee0d08-4395-4a27-ae73-3c76d7bc8e63.roa
Signing time:             Mon 24 Mar 2025 19:30:21 +0000
ROA not before:           Mon 24 Mar 2025 19:30:21 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.82.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:19:19:e3:e8:60:d1:f1:d5:5a:25:0f:8d:f6:ae:a4:71:41:a8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 19:30:21 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=c310f4e3ba2e23e8d9681c8f1a33587a62d5ff33fd6509db82b2c7bc9fa8b0cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:a4:2b:df:ae:3a:94:a6:15:a0:7a:db:5b:
                    77:e2:83:7a:b6:60:1f:56:10:22:ab:c0:9c:af:f4:
                    f4:dc:00:b2:16:b2:c2:f3:3d:32:d3:96:f4:35:51:
                    1c:29:e6:ec:81:8f:38:e3:22:30:97:ae:76:92:be:
                    0f:dd:a6:c3:14:68:99:af:49:b2:fd:af:99:a7:2b:
                    61:46:63:d6:81:22:bb:b4:0d:7d:fd:52:e7:9d:fc:
                    2e:99:58:99:ca:94:d6:4f:31:7f:b4:ba:87:1a:0f:
                    9b:b0:d5:a3:fa:d1:0d:de:75:bd:06:43:cc:5d:fb:
                    38:49:4f:8c:48:7f:42:b3:90:cf:c8:1c:ac:05:ab:
                    5e:f5:f0:76:ee:e0:ab:7e:e5:ff:62:82:51:71:e9:
                    ee:a6:c7:76:f9:e7:a5:34:a8:8c:a4:c7:c0:1f:5f:
                    8c:52:4c:74:41:3c:ad:13:0b:63:92:fd:26:17:e2:
                    0c:cd:51:3f:f9:49:aa:7a:26:4c:2f:26:e2:24:b5:
                    ef:00:da:34:d2:69:c7:6f:0f:ef:5e:90:56:32:9b:
                    12:b6:62:9a:e9:9c:49:3a:a1:3f:8e:1c:3d:8d:f1:
                    c3:51:2d:3e:fb:33:2b:32:52:b7:73:2d:92:13:d3:
                    32:37:9c:c1:b4:9f:46:88:af:40:7c:ea:0e:d9:e4:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:D2:78:A0:29:78:99:E1:7A:2C:D3:5F:6C:00:D0:F3:84:1F:CE
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ee0d08-4395-4a27-ae73-3c76d7bc8e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.82.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:46:ce:4e:e8:7b:6f:88:04:ac:88:6d:6d:e7:05:3c:e3:
         21:ea:7a:f6:dc:86:a8:0a:c6:ca:ae:75:80:7e:94:8a:68:d5:
         32:23:1a:9f:a5:ad:f5:77:7a:72:b2:12:3d:e6:c0:12:41:39:
         05:54:d8:61:dd:2e:66:6a:37:36:82:ae:1e:0c:ad:61:f1:8a:
         f0:bb:d1:c5:f8:77:24:28:a0:ce:5e:1e:3a:f0:8f:8e:6e:41:
         75:16:3c:39:f4:a7:f0:fc:6c:3c:ef:70:66:26:d7:27:05:e2:
         74:c6:cc:eb:a3:c3:ad:aa:7a:db:c3:88:09:50:90:74:f4:00:
         af:7a:db:09:dc:00:aa:ad:c3:b8:13:2a:85:59:39:5b:ed:c6:
         c6:04:ef:54:ea:b9:a6:32:31:05:2e:ef:b1:ed:f6:6d:fc:5e:
         3b:fd:70:0f:52:ee:dd:8c:a7:a7:7f:4b:fc:aa:f2:20:b1:fb:
         e3:39:ba:57:b4:e5:79:82:c5:b5:0d:c5:17:4e:68:63:46:d7:
         83:89:f5:0a:2b:87:5b:bf:fc:aa:db:e6:ea:b9:b5:51:db:c9:
         f7:0a:f8:b4:4d:0d:88:b3:38:7c:0b:94:b1:7a:8a:bd:43:65:
         3e:aa:ad:45:02:4d:de:41:47:66:b3:06:39:26:fc:5c:44:04:
         59:f4:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----