Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6036b94-52cc-4209-acfb-01794204d5ab.roa
File:                     e6036b94-52cc-4209-acfb-01794204d5ab.roa (raw, json)
Hash identifier:          D2IX8xtnhyx7aHXXHOJVMcndIWZj5bK7wWCcYLtkOJI=
Subject key identifier:   24:F0:FA:10:7C:C0:E6:7C:D9:FD:92:F5:9C:A4:A1:07:70:E5:AE:81
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1416CD6D11702AB5740F390B2E84F435EECD37C8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6036b94-52cc-4209-acfb-01794204d5ab.roa
Signing time:             Mon 31 Mar 2025 17:31:54 +0000
ROA not before:           Mon 31 Mar 2025 17:31:54 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.84.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:16:cd:6d:11:70:2a:b5:74:0f:39:0b:2e:84:f4:35:ee:cd:37:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:31:54 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=597d7196bf43f02b6284b8ce6f05e91c426cf3f3236fdeb014b9733e7da686db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:fb:0c:df:ac:dd:04:51:aa:6a:e5:38:80:
                    4c:b0:7b:e7:97:b8:ca:1a:86:e6:e5:3b:a7:61:ee:
                    e0:32:37:ae:5a:2d:2a:e0:00:a6:b3:4f:36:6f:b7:
                    4c:2e:96:5d:6c:16:05:ac:37:21:de:1e:83:9f:27:
                    0a:16:e5:86:d8:2b:32:6b:ee:4b:6a:55:cd:28:09:
                    8d:00:52:8b:bf:1d:ba:c5:de:af:1d:0d:11:a0:47:
                    2c:0c:ac:6b:83:7c:f6:36:4b:46:0e:90:81:0c:26:
                    de:f7:7b:b9:02:e2:88:d2:f1:aa:3b:fa:b1:f6:b4:
                    c4:fb:f0:70:99:3a:19:b0:51:dc:68:6d:65:5f:f1:
                    0d:99:b8:66:1f:dc:3b:09:91:90:6c:85:31:72:24:
                    b7:8a:f3:a3:49:a8:c1:17:32:8b:f7:24:86:01:f3:
                    a4:1d:a0:61:ae:75:07:d5:0f:dd:b8:a2:fc:6b:08:
                    d2:41:83:c7:b6:a2:ae:10:1c:c9:61:00:49:85:2d:
                    99:0a:dd:2f:67:02:0c:e6:a3:86:15:4d:bf:95:22:
                    56:50:55:55:38:67:79:46:20:97:2f:fc:70:f9:a0:
                    26:e4:37:de:43:03:0d:18:91:82:e0:22:4f:45:3d:
                    ef:2c:19:f1:31:db:3c:48:fc:61:b5:ca:7d:00:66:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:FA:10:7C:C0:E6:7C:D9:FD:92:F5:9C:A4:A1:07:70:E5:AE:81
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6036b94-52cc-4209-acfb-01794204d5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:67:c2:ce:c6:94:ed:f7:ce:c8:19:31:70:ff:65:34:93:
         c4:76:a4:14:5b:ac:7b:90:69:fe:d3:0e:02:53:c9:0a:31:8d:
         7d:ef:06:c5:42:16:18:ab:47:e2:6b:2b:55:44:aa:9f:f4:ba:
         f9:f8:c8:d2:47:13:74:d1:3a:97:31:25:13:0d:07:ae:43:01:
         0b:71:c2:66:30:8a:93:79:3a:bb:63:7f:a9:fb:a2:fb:3d:65:
         70:32:0c:f9:b8:96:8c:f7:03:25:63:72:db:f5:ee:98:98:7a:
         4d:14:d0:2a:f6:f2:0a:3f:c9:5d:06:f0:78:5b:77:06:a6:69:
         1b:3f:20:eb:31:b1:e5:44:51:81:de:9d:27:a4:be:19:68:2b:
         90:63:10:2a:b3:ee:de:46:76:7c:d6:eb:2a:43:10:72:80:8a:
         d3:47:db:75:a7:17:e9:e4:2b:b8:8a:96:6d:6f:18:e2:64:1d:
         69:f5:87:5e:96:d2:48:30:1e:ee:3e:1c:53:ad:e0:d4:ac:d6:
         0e:84:45:e5:c3:4d:bb:cf:27:96:93:13:c1:f5:d9:94:31:44:
         68:f9:51:f2:d5:6b:34:ef:db:ac:a9:bb:9b:28:ac:82:da:a2:
         76:78:63:70:e6:34:c6:7f:77:12:b6:6e:85:ed:4c:15:e5:a6:
         02:81:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----