Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed89b728-3249-440e-83dd-a091667df360.roa
File:                     ed89b728-3249-440e-83dd-a091667df360.roa (raw, json)
Hash identifier:          C0rUL9gVKQuYBFXLr0POJTyVG7G2RZWerisuigFPU2c=
Subject key identifier:   60:67:F5:6B:1C:AE:B6:7F:56:07:5D:24:18:A0:D4:79:66:00:13:CD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3D77C660181444949BBD2D57407753BF61068753
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed89b728-3249-440e-83dd-a091667df360.roa
Signing time:             Mon 31 Mar 2025 18:10:19 +0000
ROA not before:           Mon 31 Mar 2025 18:10:19 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.87.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:c6:60:18:14:44:94:9b:bd:2d:57:40:77:53:bf:61:06:87:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 18:10:19 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=9c4e2019d37bd4fad59eab3858d4adde24ed2d9850781505df315a66714e69db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:27:9e:15:3c:fa:c4:ce:52:d6:32:b0:7f:7a:
                    a1:9e:1b:d7:05:17:63:c1:21:5a:ef:b8:34:7f:97:
                    b2:87:6f:67:6e:59:39:eb:32:93:5e:12:1e:ba:84:
                    59:32:4a:cb:49:cc:62:a7:ec:3c:f4:da:24:13:28:
                    b0:54:04:93:19:81:c2:31:48:77:98:d5:7a:3a:3d:
                    c2:85:ee:79:f6:97:30:12:9d:4c:bb:de:46:2c:29:
                    3f:64:d4:6a:83:2d:cb:0c:cb:37:a8:70:79:ee:28:
                    6a:04:4a:9a:0e:f8:a2:d4:72:30:b4:ef:a5:d6:b2:
                    a4:63:05:29:98:12:79:28:28:88:35:3a:7f:17:df:
                    b4:04:4a:9d:d2:49:d7:3d:d3:a0:62:1e:4d:85:4c:
                    a3:66:23:c1:61:67:72:56:34:02:41:04:f5:0a:89:
                    91:c7:27:0b:a6:ff:6f:1f:33:d2:9e:60:c1:02:65:
                    87:6e:dd:5c:08:39:eb:bb:e9:46:43:aa:13:40:d7:
                    ae:9a:2a:30:c3:5f:b6:a1:fd:82:bb:90:4c:4c:a0:
                    89:16:4c:15:d8:cb:f0:24:67:03:29:7f:9a:01:a1:
                    81:f7:e9:14:3d:57:49:a6:65:7e:7d:a3:76:e0:c4:
                    d1:1a:5d:89:d2:21:6c:d9:7e:fc:36:ec:ed:98:71:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:67:F5:6B:1C:AE:B6:7F:56:07:5D:24:18:A0:D4:79:66:00:13:CD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed89b728-3249-440e-83dd-a091667df360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.87.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:9b:3a:68:37:2d:87:b0:98:77:d1:f1:2a:0e:37:39:51:
         fe:66:13:b2:73:d0:b4:a5:f4:17:e6:aa:02:d3:07:30:ad:6a:
         95:83:90:3f:0f:1f:ac:86:58:01:73:5b:07:ab:a2:81:b7:0b:
         86:99:a0:5c:76:0f:18:0b:4e:2f:ff:c2:ba:ad:a1:34:f6:64:
         f8:d0:83:8f:54:8a:c6:59:b5:71:86:ef:c3:12:15:a9:27:ce:
         57:cb:c9:3b:ff:5c:9f:6f:fc:29:4b:8b:31:0a:db:98:7d:96:
         3d:af:c2:3c:8c:f9:a0:bc:40:12:bd:f9:21:25:84:5b:72:0f:
         d5:6a:6c:8b:da:27:08:53:f5:6f:20:95:7a:b0:04:4c:5d:cb:
         06:da:0f:f0:a2:3b:7e:8b:96:39:de:52:ef:31:3b:bd:9f:f3:
         77:0d:57:98:98:bb:e1:97:f3:34:99:a0:78:86:b1:a8:45:27:
         a5:27:1f:a2:bb:b3:15:b5:4f:ca:b1:b5:77:9d:d2:c0:1e:05:
         66:23:49:50:3c:29:21:86:83:da:52:34:ac:03:8b:87:ee:6e:
         47:90:f5:45:89:67:aa:9e:0f:a4:13:bf:0c:24:d4:da:f3:fa:
         a2:fb:7c:14:46:9d:d0:1f:7c:11:d2:61:77:44:df:79:71:58:
         3c:1b:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----