Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
File:                     a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa (raw, json)
Hash identifier:          sY4979P1hfavQw69LoWTMEcF/kxsgfCfmqoJL0Tm0zg=
Subject key identifier:   C6:00:6A:38:88:85:C1:EA:AC:7A:86:F3:32:E9:2D:20:76:A5:37:10
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       209D363ACCA24B36BEC1034AB50ED23856F31BA3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        193.202.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9d:36:3a:cc:a2:4b:36:be:c1:03:4a:b5:0e:d2:38:56:f3:1b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=46fa9c742dc1563380ceb14c09cd9b52121851846fc36cccdf6a16615a0e9546, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:b4:49:6a:52:87:5e:53:1a:dc:42:54:3a:
                    31:8e:29:a3:64:46:f7:85:80:3c:84:18:19:c3:0c:
                    4d:9a:3e:6f:48:9d:e9:1a:2a:ae:3b:0c:71:c0:a9:
                    aa:eb:21:6b:d6:0e:0a:2a:f9:85:7f:19:e3:2e:da:
                    0b:5d:f3:2f:53:97:d3:12:2f:5f:41:ce:2d:a4:ae:
                    9f:92:b3:74:68:2b:e3:85:ac:f8:29:0e:15:e9:d8:
                    a8:a9:10:bf:f2:99:ed:bc:58:c1:96:f1:3f:1f:18:
                    58:ae:dc:6d:25:2b:64:b2:fa:c3:bf:7d:9a:49:b6:
                    2c:2f:0a:c2:f4:6a:ee:91:bb:63:3d:01:af:e4:a2:
                    fa:11:54:c0:ae:f9:83:d7:5e:98:ed:66:65:ca:21:
                    22:8d:d4:b7:0b:1b:aa:11:f7:b1:c6:25:17:ea:42:
                    bf:88:d5:65:89:62:58:d8:1e:26:2d:ad:9c:54:00:
                    32:1e:1b:52:93:46:4e:52:fc:59:ce:d3:5b:1b:81:
                    43:8e:7f:b1:c9:4a:a7:da:7e:fb:26:16:5b:4b:ea:
                    a5:b0:6c:97:7e:db:53:52:74:f6:49:a6:9f:82:84:
                    8a:c7:23:80:c5:21:e7:04:30:6e:17:c9:e4:9e:1a:
                    be:c3:97:63:8b:32:e0:ee:d3:2d:39:74:cf:b8:d0:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:6A:38:88:85:C1:EA:AC:7A:86:F3:32:E9:2D:20:76:A5:37:10
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1fe62fd-3c9b-4c9a-867b-42c7d6d94fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:b3:52:d2:81:6a:ce:3d:62:fb:b1:01:f4:f4:31:b2:2c:
         a1:eb:9d:b3:e3:6e:16:a1:fb:86:84:1b:63:e0:31:36:cc:6b:
         74:87:ee:c4:08:f7:91:4f:a5:0e:69:74:fa:e8:08:f4:35:29:
         21:a0:c8:68:1d:c1:8b:58:47:56:0d:14:05:19:f5:42:24:1a:
         6d:57:63:ae:72:5b:53:8c:88:e2:f7:57:53:27:f7:54:a5:0f:
         df:2d:1b:47:9d:3d:a4:0f:13:72:9b:f6:e9:09:e9:49:71:5f:
         16:da:7d:9c:3f:08:8c:92:61:71:23:55:01:84:1d:21:a2:b9:
         e6:19:27:61:b5:a1:d0:2d:ae:24:87:5b:d6:7d:ff:ff:1d:14:
         0c:f3:58:fe:0b:05:c0:10:9b:4f:2f:15:b4:0e:91:87:33:11:
         12:c1:b3:b0:26:bd:0b:6b:4b:09:ed:20:1e:03:79:0c:4f:da:
         33:37:06:98:1e:18:22:d7:27:dc:58:f1:f8:0e:38:6d:43:a9:
         cc:78:da:97:e1:b1:16:12:45:be:69:83:0e:c5:fd:0c:4d:f8:
         c0:28:fd:ac:fb:81:37:9e:d6:5e:d2:26:ab:6e:8c:2e:c7:2b:
         49:31:18:48:cc:41:09:e2:b5:be:ef:1c:85:cb:d9:f3:78:09:
         ff:16:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:30:11 2025 by rpki-client