Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4caf432-3931-4c0d-add7-c0706caec685.roa
File:                     d4caf432-3931-4c0d-add7-c0706caec685.roa (raw, json)
Hash identifier:          zSGDv/m2pfZHuNu4KI1dDZEMSwJx8ayV+Kn4K461rss=
Subject key identifier:   3D:98:51:62:2A:80:5D:86:6A:BA:E0:F5:4A:85:65:54:C1:2B:1D:C9
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2EBF0831D171B1CD2D5F386233F8FE569A050D20
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4caf432-3931-4c0d-add7-c0706caec685.roa
Signing time:             Mon 24 Mar 2025 17:51:38 +0000
ROA not before:           Mon 24 Mar 2025 17:51:38 +0000
ROA not after:            Mon 28 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.232.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bf:08:31:d1:71:b1:cd:2d:5f:38:62:33:f8:fe:56:9a:05:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 24 17:51:38 2025 GMT
            Not After : Apr 28 23:59:59 2025 GMT
        Subject: serialNumber=24fd7a9568d01dba58a8be376d0ce4ca4438672d7a14f5569eb5d17c145e648e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:43:b2:b7:54:6e:ed:ee:27:5a:6f:39:c3:
                    f1:80:1e:ef:d5:e1:63:73:96:0e:9d:e6:48:b6:17:
                    28:a1:20:9f:cf:33:55:d5:8b:5c:ee:3b:0c:a4:19:
                    2c:26:2b:5d:09:4d:7b:0a:c9:ac:7e:f4:46:3a:18:
                    72:b2:49:b4:5d:3a:b5:c8:fa:27:8f:67:2b:23:8e:
                    47:bb:8e:c0:29:3e:4d:90:2c:af:d5:26:6d:a7:4d:
                    9d:38:05:ed:8d:e4:bb:a9:e9:d7:f3:42:6d:c6:5b:
                    cc:62:6e:f5:28:0f:fb:1c:08:aa:93:fd:08:53:fd:
                    07:16:ef:36:a0:4f:05:a5:ba:9b:aa:71:68:d1:11:
                    41:09:71:3b:af:86:5d:24:53:ad:19:ee:f3:73:56:
                    f8:5e:5a:37:e6:86:eb:51:e1:9f:f4:64:22:72:9b:
                    45:b5:19:21:69:f8:b9:c1:82:96:f6:ae:e8:0a:f3:
                    f7:6b:a3:7b:87:b1:f5:2c:1e:a3:1f:4e:c3:ad:6a:
                    51:3a:b9:7f:df:74:c5:d7:2c:86:f9:d4:a3:7c:08:
                    aa:0c:08:f3:d6:6d:39:e4:0a:18:54:bd:d6:5e:02:
                    04:42:9c:b6:88:07:b5:7a:f4:0a:af:aa:d3:c2:46:
                    16:1c:d4:76:f2:26:96:e7:07:b9:51:be:4f:29:19:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:51:62:2A:80:5D:86:6A:BA:E0:F5:4A:85:65:54:C1:2B:1D:C9
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4caf432-3931-4c0d-add7-c0706caec685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.232.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:b5:37:bc:df:76:21:dd:10:e9:60:07:bc:9b:4b:12:df:a7:
         f2:de:1d:f9:a6:46:1f:45:5a:53:5d:17:0b:35:53:8a:4f:12:
         af:40:62:1e:10:75:d4:3e:b3:9d:23:6b:93:23:8a:11:76:8f:
         3c:42:2b:6a:28:1e:ef:24:0d:ac:11:02:a1:df:8f:13:76:8b:
         6a:d8:56:89:10:99:23:20:e2:f3:c0:47:f6:d5:3d:b7:92:f2:
         8b:86:c3:4e:32:16:45:4f:7a:c8:72:a0:d5:5a:ce:b0:3d:e2:
         23:33:ab:c8:04:69:c8:23:8f:47:40:77:78:89:13:5b:e4:05:
         10:b1:75:ee:b5:13:f0:69:85:d6:cd:98:f2:80:3b:5d:6c:ef:
         f4:9a:7a:5c:99:69:c9:db:bf:63:36:f0:1e:f6:64:a7:d4:c7:
         39:59:3c:a0:22:16:eb:10:d4:f2:89:ed:70:c7:ac:90:82:ed:
         41:07:30:75:62:3f:a6:a3:fc:bd:35:c0:76:4f:6f:c7:64:b9:
         f7:3a:19:d2:5b:ed:b7:88:ab:9f:ea:97:92:6c:ad:2f:b1:a7:
         1f:85:2c:99:a4:d9:6c:5f:d4:95:12:f1:5c:09:04:1a:e1:0b:
         45:87:87:f1:be:23:23:e2:b8:59:6d:af:d8:a4:71:c9:45:2d:
         2c:df:21:aa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULr8IMdFxsc0tXzhiM/j+VpoFDSAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI0MTc1MTM4WhcNMjUwNDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNGZkN2E5NTY4ZDAxZGJhNThhOGJlMzc2ZDBjZTRjYTQ0
Mzg2NzJkN2ExNGY1NTY5ZWI1ZDE3YzE0NWU2NDhlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt8UOyt1Ru7e4nWm85w/GAHu/V4WNzlg6d5ki2FyihIJ/P
M1XVi1zuOwykGSwmK10JTXsKyax+9EY6GHKySbRdOrXI+iePZysjjke7jsApPk2Q
LK/VJm2nTZ04Be2N5Lup6dfzQm3GW8xibvUoD/scCKqT/QhT/QcW7zagTwWlupuq
cWjREUEJcTuvhl0kU60Z7vNzVvheWjfmhutR4Z/0ZCJym0W1GSFp+LnBgpb2rugK
8/dro3uHsfUsHqMfTsOtalE6uX/fdMXXLIb51KN8CKoMCPPWbTnkChhUvdZeAgRC
nLaIB7V69AqvqtPCRhYc1HbyJpbnB7lRvk8pGd4pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPZhRYiqAXYZquuD1SoVlVMErHckwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q0Y2FmNDMyLTM5MzEtNGMwZC1hZGQ3LWMwNzA2Y2FlYzY4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ26EAwDQYJKoZIhvcNAQELBQADggEBAK+1N7zfdiHdEOlgB7ybSxLfp/Le
HfmmRh9FWlNdFws1U4pPEq9AYh4QddQ+s50ja5MjihF2jzxCK2ooHu8kDawRAqHf
jxN2i2rYVokQmSMg4vPAR/bVPbeS8ouGw04yFkVPeshyoNVazrA94iMzq8gEacgj
j0dAd3iJE1vkBRCxde61E/BphdbNmPKAO11s7/SaelyZacnbv2M28B72ZKfUxzlZ
PKAiFusQ1PKJ7XDHrJCC7UEHMHViP6aj/L01wHZPb8dkufc6GdJb7beIq5/ql5Js
rS+xpx+FLJmk2Wxf1JUS8VwJBBrhC0WHh/G+IyPiuFltr9ikcclFLSzfIao=
-----END CERTIFICATE-----