Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa
File:                     fe143ca3-bcfc-4814-a843-040ef14905bb.roa (raw, json)
Hash identifier:          +cOV9yeI6wqAt+JbRN/JRMayVb7mpnWi6BRPCLS/YSI=
Subject key identifier:   E2:55:53:50:73:79:74:F1:FD:F4:AC:45:8A:11:94:5B:65:11:DC:32
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1E63FE7B7FB503AF76EE92FA597BFAC0FC0A4928
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa
Signing time:             Mon 31 Mar 2025 17:00:13 +0000
ROA not before:           Mon 31 Mar 2025 17:00:13 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.141.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:fe:7b:7f:b5:03:af:76:ee:92:fa:59:7b:fa:c0:fc:0a:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 31 17:00:13 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=8c1ad2d4d3dae583bb6a402638583cb727035b8f70215235cd5cf4005ad88dc1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:4e:5d:8c:77:f2:bd:b2:4d:b1:22:fa:99:
                    49:7f:10:2c:bd:e3:fd:35:ae:f7:f0:34:c2:03:cf:
                    06:3d:d9:92:d0:90:5f:1e:f2:c0:3a:10:70:b6:ef:
                    3f:7f:8d:d5:42:96:eb:70:68:6c:00:78:08:33:cf:
                    50:7b:b2:0a:36:6f:94:a2:c5:07:26:a5:9d:50:f8:
                    51:4b:4d:9c:54:20:e9:a4:d0:db:08:75:5f:c8:79:
                    00:a5:18:34:68:d9:4b:2a:92:69:ce:39:3f:df:4d:
                    6f:56:da:ed:a8:12:37:e6:0d:fe:89:de:80:d0:8c:
                    2f:cd:ef:dc:28:c9:d4:5f:37:e4:72:b9:1e:54:41:
                    08:07:f7:b6:b4:22:df:1a:4b:79:f2:30:82:2e:f4:
                    9d:dd:1a:99:29:13:03:fa:88:6a:2e:1a:7e:21:cd:
                    7b:aa:51:3c:87:0f:c5:0a:85:e9:70:2b:04:e1:74:
                    7c:a6:fa:72:59:49:4d:83:dc:a3:e4:27:9d:9c:57:
                    5f:38:88:4c:de:b2:62:eb:30:a1:26:db:2a:b9:a4:
                    8e:90:de:71:c8:ec:24:4d:93:bd:13:9c:c5:74:7a:
                    b9:14:81:02:39:29:89:bf:c2:c7:4a:06:61:c0:ba:
                    9f:d0:15:fc:52:3d:09:01:df:72:66:92:3e:0e:91:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:55:53:50:73:79:74:F1:FD:F4:AC:45:8A:11:94:5B:65:11:DC:32
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.141.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:37:32:14:02:e2:1b:2f:6a:4f:23:6f:66:0b:b8:57:8e:
         87:cc:eb:a3:44:57:63:ee:ca:7a:2f:da:de:ed:9a:1a:9c:d3:
         39:1c:32:46:89:d2:76:35:c6:9a:a5:12:1c:31:8f:65:aa:14:
         e1:d4:59:ef:c9:df:6d:c2:4a:64:d2:5f:94:c6:6a:34:49:40:
         61:0b:71:74:4b:68:d7:18:93:59:67:2d:7f:da:21:b4:eb:ad:
         55:f1:14:e9:2f:f5:e9:5c:02:ff:83:e1:f9:f8:40:7e:48:c7:
         95:82:87:3e:0d:b9:4b:25:6a:fd:ae:ed:f4:2c:69:ed:8e:c9:
         3d:a3:ac:08:74:3e:4e:65:b1:43:a0:3a:bb:0a:9c:76:1c:f9:
         93:3f:b3:d4:13:c2:bc:81:9d:0a:75:8e:36:fd:2d:20:47:82:
         21:a7:ae:f6:17:58:2e:f4:9d:19:f3:5e:71:fb:eb:a9:ef:e9:
         8d:f6:b1:38:e8:55:29:b6:a4:4d:e1:d5:8e:67:c4:4c:b9:96:
         76:ea:78:0d:f5:9c:a5:0d:fe:78:e0:5c:22:b5:50:92:8f:b1:
         f1:b3:85:80:36:1e:4e:2d:52:b9:b3:ab:84:11:ef:b8:be:16:
         d0:84:42:2f:ab:aa:75:60:77:ad:7d:9a:4f:16:7f:95:ec:ac:
         b6:48:84:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHmP+e3+1A6927pL6WXv6wPwKSSgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTcwMDEzWhcNMjUwNTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzFhZDJkNGQzZGFlNTgzYmI2YTQwMjYzODU4M2NiNzI3
MDM1YjhmNzAyMTUyMzVjZDVjZjQwMDVhZDg4ZGMxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs/E5djHfyvbJNsSL6mUl/ECy94/01rvfwNMIDzwY92ZLQ
kF8e8sA6EHC27z9/jdVClutwaGwAeAgzz1B7sgo2b5SixQcmpZ1Q+FFLTZxUIOmk
0NsIdV/IeQClGDRo2UsqkmnOOT/fTW9W2u2oEjfmDf6J3oDQjC/N79woydRfN+Ry
uR5UQQgH97a0It8aS3nyMIIu9J3dGpkpEwP6iGouGn4hzXuqUTyHD8UKhelwKwTh
dHym+nJZSU2D3KPkJ52cV184iEzesmLrMKEm2yq5pI6Q3nHI7CRNk70TnMV0erkU
gQI5KYm/wsdKBmHAup/QFfxSPQkB33Jmkj4OkbnVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4lVTUHN5dPH99KxFihGUW2UR3DIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ZlMTQzY2EzLWJjZmMtNDgxNC1hODQzLTA0MGVmMTQ5MDViYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYSjcAwDQYJKoZIhvcNAQELBQADggEBAJwcNzIUAuIbL2pPI29mC7hXjofM
66NEV2Puynov2t7tmhqc0zkcMkaJ0nY1xpqlEhwxj2WqFOHUWe/J323CSmTSX5TG
ajRJQGELcXRLaNcYk1lnLX/aIbTrrVXxFOkv9elcAv+D4fn4QH5Ix5WChz4NuUsl
av2u7fQsae2OyT2jrAh0Pk5lsUOgOrsKnHYc+ZM/s9QTwryBnQp1jjb9LSBHgiGn
rvYXWC70nRnzXnH766nv6Y32sTjoVSm2pE3h1Y5nxEy5lnbqeA31nKUN/njgXCK1
UJKPsfGzhYA2Hk4tUrmzq4QR77i+FtCEQi+rqnVgd619mk8Wf5XsrLZIhBs=
-----END CERTIFICATE-----