Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a41758-c120-4d76-b222-cc850f088af0.roa
File:                     f0a41758-c120-4d76-b222-cc850f088af0.roa (raw, json)
Hash identifier:          N6cZWZdItQV7xNtvS51JLgs4Fw+TnT4A52d84TStzlU=
Subject key identifier:   A8:11:6C:73:B9:E4:93:B6:05:59:EA:9C:AB:0E:D5:5E:A2:05:03:68
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       16496316D92733EA55048C423DB64D7B3C4787F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a41758-c120-4d76-b222-cc850f088af0.roa
Signing time:             Sat 22 Mar 2025 00:21:38 +0000
ROA not before:           Sat 22 Mar 2025 00:21:38 +0000
ROA not after:            Sat 26 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.181.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:63:16:d9:27:33:ea:55:04:8c:42:3d:b6:4d:7b:3c:47:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 22 00:21:38 2025 GMT
            Not After : Apr 26 23:59:59 2025 GMT
        Subject: serialNumber=f264361a0c6c3ae94f43886a500d028967fcac1843f18a6021f2c2d41471aba3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:7d:fe:bd:5b:03:bd:f2:9a:84:33:fc:72:
                    e7:3f:ad:13:6a:cf:ee:ef:ee:7f:32:d3:dc:f5:ee:
                    df:f5:ac:0e:7c:e5:f3:80:24:06:57:73:01:e9:ca:
                    a8:a7:a4:77:f6:9b:7a:d2:cb:61:6d:bc:6a:e7:db:
                    72:a0:56:84:69:c5:49:aa:5f:35:c6:d2:0c:fa:db:
                    b0:45:de:40:fd:58:ec:02:47:55:ff:12:1d:74:1d:
                    b0:49:78:f7:c1:9e:78:f7:46:df:a4:59:5e:ea:a4:
                    e8:23:8f:b2:c6:e5:c8:e5:e5:fa:0b:f8:c3:59:1e:
                    92:3a:de:39:24:91:f3:74:fb:55:7d:1e:db:f7:a6:
                    87:b6:e5:e7:64:0f:88:10:46:33:2d:9d:48:30:21:
                    65:e0:aa:3d:72:40:e6:65:30:cb:f3:da:1f:91:19:
                    ef:1c:29:59:2e:0a:19:8c:01:f4:1d:92:62:d3:8c:
                    d8:8d:e4:5d:53:52:9b:52:05:7c:df:c7:1a:72:5a:
                    93:0a:b6:de:e7:92:32:c8:d4:20:ae:b9:9f:f6:81:
                    cd:ab:e6:e3:b2:bf:09:cd:23:fa:de:77:57:b1:5b:
                    cf:49:76:19:8a:54:be:20:aa:ed:49:e2:0d:4e:c7:
                    ae:3c:25:6a:4b:ce:d2:cb:4d:45:f8:48:12:8f:34:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:6C:73:B9:E4:93:B6:05:59:EA:9C:AB:0E:D5:5E:A2:05:03:68
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f0a41758-c120-4d76-b222-cc850f088af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:b7:f0:a6:33:d2:52:41:43:d1:19:24:7c:fe:7c:be:0e:
         a0:e8:e6:f8:84:40:c4:d4:53:18:1d:10:d1:eb:8f:cd:a6:5d:
         2f:c0:f3:3e:76:52:e2:f2:26:be:51:a8:b2:db:c1:6b:4c:85:
         0c:0d:20:a3:8a:a7:16:78:dc:e9:e5:e8:a2:c0:88:1c:e9:e0:
         4f:6f:73:9f:c1:6c:ab:a3:0e:f5:75:f0:c1:84:f6:45:31:33:
         c7:29:37:b3:45:85:a6:0b:2d:ff:66:cb:7b:f9:14:c8:a2:21:
         16:48:bf:ba:14:d1:5e:b7:35:d8:45:ef:34:77:f5:9e:a2:51:
         33:4a:4a:d4:ac:dd:60:26:71:30:fd:90:96:c1:be:a2:7b:09:
         ce:f9:83:e1:6a:90:d4:64:c9:f9:38:58:b4:52:13:dd:38:20:
         ea:68:7c:21:a3:f3:b0:a7:9a:69:a6:c5:13:9b:35:7a:6b:1f:
         ba:58:36:41:c4:5b:8a:93:26:62:ba:b7:60:19:94:8c:ef:c5:
         47:70:15:3b:5f:17:3f:37:d5:e9:ba:48:8e:7c:4e:28:d1:d0:
         99:ad:4a:10:58:e5:ec:4a:49:9b:bb:3b:aa:0a:f6:3e:7d:80:
         9c:15:a7:e6:96:c0:7a:d4:0a:d9:de:4b:f8:82:a8:c4:df:03:
         4a:ed:3d:e5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFkljFtknM+pVBIxCPbZNezxHh/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzIyMDAyMTM4WhcNMjUwNDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjY0MzYxYTBjNmMzYWU5NGY0Mzg4NmE1MDBkMDI4OTY3
ZmNhYzE4NDNmMThhNjAyMWYyYzJkNDE0NzFhYmEzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz+X3+vVsDvfKahDP8cuc/rRNqz+7v7n8y09z17t/1rA58
5fOAJAZXcwHpyqinpHf2m3rSy2FtvGrn23KgVoRpxUmqXzXG0gz627BF3kD9WOwC
R1X/Eh10HbBJePfBnnj3Rt+kWV7qpOgjj7LG5cjl5foL+MNZHpI63jkkkfN0+1V9
Htv3poe25edkD4gQRjMtnUgwIWXgqj1yQOZlMMvz2h+RGe8cKVkuChmMAfQdkmLT
jNiN5F1TUptSBXzfxxpyWpMKtt7nkjLI1CCuuZ/2gc2r5uOyvwnNI/red1exW89J
dhmKVL4gqu1J4g1Ox648JWpLztLLTUX4SBKPNEeZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqBFsc7nkk7YFWeqcqw7VXqIFA2gwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2YwYTQxNzU4LWMxMjAtNGQ3Ni1iMjIyLWNjODUwZjA4OGFmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQPtTAwDQYJKoZIhvcNAQELBQADggEBABBft/CmM9JSQUPRGSR8/ny+DqDo
5viEQMTUUxgdENHrj82mXS/A8z52UuLyJr5RqLLbwWtMhQwNIKOKpxZ43Onl6KLA
iBzp4E9vc5/BbKujDvV18MGE9kUxM8cpN7NFhaYLLf9my3v5FMiiIRZIv7oU0V63
NdhF7zR39Z6iUTNKStSs3WAmcTD9kJbBvqJ7Cc75g+FqkNRkyfk4WLRSE904IOpo
fCGj87CnmmmmxRObNXprH7pYNkHEW4qTJmK6t2AZlIzvxUdwFTtfFz831em6SI58
TijR0JmtShBY5exKSZu7O6oK9j59gJwVp+aWwHrUCtneS/iCqMTfA0rtPeU=
-----END CERTIFICATE-----