Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
File:                     161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json)
Hash identifier:          sHfJhii4qndCY6yAAq3PY/Sm7/hoyJETjuJQ9caiPf0=
Subject key identifier:   D2:94:F4:40:75:B4:9D:D5:15:4A:95:8A:91:E5:B0:E8:19:E6:B4:27
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       221A44AA3BDDFBA75BEB30754DE161BE064F858E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1a:44:aa:3b:dd:fb:a7:5b:eb:30:75:4d:e1:61:be:06:4f:85:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=b64f90d33bb16fc75b8c12fdad504e8d63a750cccd4fd452835e7d436e873a26, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:39:cd:46:85:86:25:cf:2a:96:a8:a0:23:
                    72:4e:a0:d5:71:c2:f3:05:d2:d8:83:83:74:35:20:
                    6d:5a:ce:0b:35:9c:dd:f7:e7:c8:b5:7a:9f:89:15:
                    0b:81:c7:03:fb:db:8e:18:2f:dc:2c:3d:d6:2d:e9:
                    de:06:d9:76:8b:e8:99:f5:51:c8:16:64:32:55:e2:
                    ff:45:56:1f:37:b2:23:5d:02:b7:cd:02:e1:c3:28:
                    2d:39:8b:d5:ed:0d:66:9b:da:09:12:8e:30:51:ef:
                    33:ae:fa:85:c7:85:9d:e0:8c:10:30:29:08:e3:5d:
                    86:6d:61:31:6f:9e:82:f8:84:7b:3d:59:78:85:d5:
                    c8:ab:e3:d8:97:dc:d6:c0:05:65:64:39:39:37:0f:
                    60:47:25:53:37:65:20:c1:4a:33:fa:61:18:0b:1f:
                    e3:be:ae:e8:34:c4:33:13:4a:24:ae:50:36:e9:d6:
                    16:c0:25:99:58:a5:7b:65:56:f6:71:5e:19:73:3b:
                    0d:52:28:a4:45:5f:ba:ce:c6:b6:e0:3c:fe:a6:58:
                    94:63:9e:86:f1:aa:18:52:d3:53:c9:45:c9:c7:4d:
                    62:25:8d:9f:c8:1c:2e:90:57:80:40:29:6e:a8:7e:
                    57:a8:e2:d3:09:92:e8:11:67:2d:7b:13:a5:44:76:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:F4:40:75:B4:9D:D5:15:4A:95:8A:91:E5:B0:E8:19:E6:B4:27
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:80:9c:7e:65:f3:8a:79:ad:25:f3:f6:be:60:f1:54:3f:
         c8:59:bf:c5:c5:ec:97:a1:c3:42:91:12:bc:51:be:df:73:c0:
         c7:29:23:76:7b:de:dd:2f:06:e6:61:80:60:1c:21:4a:ac:73:
         07:00:dd:48:c7:82:00:14:52:35:9b:3e:c6:9e:e5:be:e2:38:
         7b:c4:30:17:bf:87:4e:4c:da:43:76:b8:38:c4:a7:64:9c:91:
         5a:99:c9:51:df:18:8a:f8:89:39:0e:8d:d1:9a:e4:3d:2a:2a:
         29:27:d5:2a:ea:4c:1b:5c:e4:cf:23:fe:c0:15:34:82:93:9d:
         87:ae:6d:ca:4e:81:da:e5:b6:f1:88:83:09:d0:c3:c4:2d:7d:
         18:1e:a2:e3:15:66:27:73:2a:84:14:90:87:02:c0:c1:cb:b2:
         2b:ee:1a:e5:02:21:4f:14:a0:3b:e6:81:3a:54:11:ef:a7:85:
         26:4f:f6:97:ab:13:59:4b:2b:87:99:46:46:b2:43:a1:88:1f:
         58:ce:e6:b5:a5:8f:a2:d1:6d:d4:fb:91:b3:ae:03:32:48:25:
         d3:e6:f3:fa:63:a3:26:ec:da:7f:55:bc:d1:71:1f:d1:9d:84:
         57:86:87:b8:73:7e:c4:53:74:ee:a3:7f:b5:53:a8:62:72:e7:
         ab:98:6f:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIhpEqjvd+6db6zB1TeFhvgZPhY4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjRmOTBkMzNiYjE2ZmM3NWI4YzEyZmRhZDUwNGU4ZDYz
YTc1MGNjY2Q0ZmQ0NTI4MzVlN2Q0MzZlODczYTI2MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGLTnNRoWGJc8qlqigI3JOoNVxwvMF0tiDg3Q1IG1azgs1
nN3358i1ep+JFQuBxwP7244YL9wsPdYt6d4G2XaL6Jn1UcgWZDJV4v9FVh83siNd
ArfNAuHDKC05i9XtDWab2gkSjjBR7zOu+oXHhZ3gjBAwKQjjXYZtYTFvnoL4hHs9
WXiF1cir49iX3NbABWVkOTk3D2BHJVM3ZSDBSjP6YRgLH+O+rug0xDMTSiSuUDbp
1hbAJZlYpXtlVvZxXhlzOw1SKKRFX7rOxrbgPP6mWJRjnobxqhhS01PJRcnHTWIl
jZ/IHC6QV4BAKW6ofleo4tMJkugRZy17E6VEdkAnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0pT0QHW0ndUVSpWKkeWw6BnmtCcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzE2MWZjMWIzLTM1ZTYtNGUwYi05NzgxLTYyYzViNmY2YTViZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEX+/QwDQYJKoZIhvcNAQELBQADggEBACWMgJx+ZfOKea0l8/a+YPFUP8hZ
v8XF7Jehw0KRErxRvt9zwMcpI3Z73t0vBuZhgGAcIUqscwcA3UjHggAUUjWbPsae
5b7iOHvEMBe/h05M2kN2uDjEp2SckVqZyVHfGIr4iTkOjdGa5D0qKikn1SrqTBtc
5M8j/sAVNIKTnYeubcpOgdrltvGIgwnQw8QtfRgeouMVZidzKoQUkIcCwMHLsivu
GuUCIU8UoDvmgTpUEe+nhSZP9perE1lLK4eZRkayQ6GIH1jO5rWlj6LRbdT7kbOu
AzJIJdPm8/pjoybs2n9VvNFxH9GdhFeGh7hzfsRTdO6jf7VTqGJy56uYb64=
-----END CERTIFICATE-----