Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa
File:                     118dcde3-a891-420a-8178-70f11115d6c3.roa (raw, json)
Hash identifier:          LkeOFu4+Y58d187cqo2Vzh2X96PARm2ZlQ35HTEtlko=
Subject key identifier:   10:1E:3B:E4:B3:47:A5:3F:DD:9A:DC:DB:E4:B2:AC:F4:4A:3F:39:E4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       725E3C82FF502AA75234C4140BA566F6C50B5624
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.236.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:3c:82:ff:50:2a:a7:52:34:c4:14:0b:a5:66:f6:c5:0b:56:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=e505e940d824143d316c7c84d85e8afa6d9a367ed63ab0f34fd6b48cdf3bbc51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:7f:0f:bb:f9:a9:c2:92:f1:98:4b:c0:6b:
                    87:89:34:86:55:e6:70:5d:81:4a:8e:b8:a6:17:d2:
                    59:03:9e:ad:35:b6:02:99:68:39:22:87:af:28:d3:
                    88:6f:1c:5a:83:ef:5c:e6:eb:ff:77:1f:ef:57:e4:
                    5e:19:be:47:93:ef:1a:d8:d1:26:b4:0f:68:c0:18:
                    94:c4:20:ae:c5:b0:1f:b0:f7:96:2c:2e:0e:51:15:
                    a6:d3:c7:3a:e9:8f:de:03:11:4f:de:df:35:6d:47:
                    c1:2f:4e:ad:6f:9e:9c:60:33:7f:e4:a2:98:fe:48:
                    8b:3e:40:37:85:e4:89:81:8f:7f:3f:4f:78:b1:60:
                    e9:ad:db:03:93:a9:67:9c:f4:cb:19:f5:62:83:f0:
                    20:9d:68:66:4c:ee:83:6a:26:55:f5:0a:bd:8e:0b:
                    2d:a3:17:54:ce:a0:66:15:d9:8f:84:27:4e:e5:0c:
                    65:e4:bc:71:b8:8d:b4:87:7d:7f:cd:25:b8:0f:8d:
                    78:bf:b3:b1:dd:cb:ee:83:f8:16:c7:a8:08:c9:e0:
                    cc:e7:62:3c:1d:2c:bb:55:5f:50:14:76:74:68:68:
                    ab:10:ff:0d:1d:fe:1a:b6:76:92:2c:d0:e2:ef:ea:
                    bd:da:a3:a3:8d:2a:a3:cc:6b:44:d8:8a:4d:a6:69:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1E:3B:E4:B3:47:A5:3F:DD:9A:DC:DB:E4:B2:AC:F4:4A:3F:39:E4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.236.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:4a:15:34:9a:f9:e3:65:93:ad:38:f3:82:5a:b4:e7:9a:
         d6:f6:a3:6a:79:35:2b:07:73:67:cf:71:a5:5f:1d:6b:55:cb:
         14:1d:46:a1:83:ab:29:c1:fa:5a:3a:59:ff:21:2a:ab:a1:d6:
         7e:86:79:9c:cc:13:72:76:15:ae:a7:14:13:1e:02:16:25:fe:
         a3:82:80:80:3f:57:99:ee:a9:61:07:21:10:06:cc:b5:38:6b:
         be:f3:25:83:52:55:3b:92:35:a0:30:10:8f:4f:ef:5a:e0:45:
         ac:de:a7:7b:7d:cf:9a:2e:62:55:82:8a:e1:8a:e9:3f:21:a9:
         b2:1f:30:2e:b5:84:18:fd:a1:85:df:b8:2c:b9:c3:a6:d9:98:
         96:e6:7e:8d:43:f5:f8:6c:d3:35:7c:1e:1b:8d:cd:c3:1e:97:
         74:54:17:0c:a4:11:81:a2:18:21:a8:08:c1:5f:91:d6:5c:f3:
         61:43:78:52:2f:cc:85:c9:59:42:5c:2e:41:cf:77:5b:18:b8:
         23:4f:8b:91:47:dd:40:d7:e8:f4:20:66:eb:29:f7:c1:27:fa:
         87:28:54:7f:d2:cb:80:ee:8a:7e:90:f6:bc:60:1d:a6:a4:4a:
         27:bf:8a:35:be:c6:44:ba:e2:a0:63:b6:c3:ec:86:c5:3c:36:
         04:60:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----