Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12971634-a862-4dc4-8aab-3f56184febdf.roa
File:                     12971634-a862-4dc4-8aab-3f56184febdf.roa (raw, json)
Hash identifier:          rpaOSW8qmfI6RNPx3PHBOeiyiv5xMSs6aAZF8WjTxSQ=
Subject key identifier:   B1:40:C9:04:22:1D:09:B9:23:C7:79:6C:7B:C8:B7:CB:F1:C0:77:60
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5218D05789F32917AD4E4BF95B60D3B16E2BC7D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12971634-a862-4dc4-8aab-3f56184febdf.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     6167
IP address blocks:        155.146.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:18:d0:57:89:f3:29:17:ad:4e:4b:f9:5b:60:d3:b1:6e:2b:c7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=29fdca646789c6aa2146331115db1f1bc4ed540d75d5ee8b352f653349bcb26a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:e8:cd:72:e5:cd:f4:19:ae:ed:3d:89:eb:
                    6c:21:d6:87:b3:ac:1f:88:d0:3e:4d:bc:cf:8d:a8:
                    7d:26:b2:65:2a:b4:94:fa:72:c9:c7:84:89:a5:da:
                    9e:8a:ad:1c:b7:a5:88:fd:f0:49:81:a3:23:2f:e5:
                    14:06:f4:30:d0:91:ae:bf:56:9f:64:b0:5a:d6:b4:
                    b6:cf:39:1a:1a:2f:a4:8e:4a:fa:17:77:9a:7f:29:
                    8c:9e:7c:68:9c:f7:16:76:8a:1e:02:91:51:ad:1c:
                    6a:9c:36:c0:9f:e9:38:7e:68:76:75:cc:17:0c:d6:
                    6e:1a:2f:f8:78:cf:af:b3:ed:7f:4a:f6:c1:f5:b4:
                    6e:9e:3a:78:d1:44:a6:b7:e7:3b:3c:82:f2:45:e1:
                    c8:94:28:f0:db:13:dd:6e:a3:15:3f:19:fd:15:68:
                    a0:d5:28:4d:51:23:05:62:2c:4c:4a:1e:e2:73:94:
                    59:54:46:93:31:8b:8c:02:f6:9e:a9:5e:96:c3:09:
                    de:41:ae:86:69:ab:e1:09:f5:e3:25:ad:42:6a:5f:
                    6c:5a:83:fb:dc:0f:4d:b1:f2:10:df:e6:80:94:64:
                    73:da:14:24:b8:9c:c7:d8:73:8b:1f:06:c0:75:1b:
                    67:67:71:90:d5:65:71:45:2e:a8:c3:d1:3b:fe:2d:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:C9:04:22:1D:09:B9:23:C7:79:6C:7B:C8:B7:CB:F1:C0:77:60
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12971634-a862-4dc4-8aab-3f56184febdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:94:cf:51:48:f5:d2:bb:b6:a1:e3:65:7a:c1:24:81:5c:
         a7:6b:88:6f:32:ce:0f:14:38:27:6b:33:b1:ac:d8:79:f5:e2:
         03:66:58:c7:a6:e8:5d:5c:36:24:bd:51:4d:1f:a4:c3:8c:d7:
         5c:da:74:ab:7a:5e:67:6c:f2:ce:ed:d8:54:60:d0:90:4e:1b:
         57:0d:a2:d8:b7:7d:71:51:60:e5:0d:82:e1:01:0e:6e:5f:20:
         81:42:64:35:0b:ab:bb:11:37:c3:f7:96:1d:59:ce:cf:ea:30:
         c9:0c:33:28:20:c7:0d:39:50:da:f5:6b:2e:6f:2f:ce:53:5f:
         96:db:f5:e4:07:9c:90:af:09:0d:4b:5b:9f:51:6d:2b:23:77:
         61:e0:f1:56:e6:3f:cb:12:59:c4:3a:0f:18:6a:68:91:e0:a8:
         e0:3f:25:1f:e6:25:ff:34:e3:77:c6:0f:48:d9:c0:1c:32:1d:
         89:10:55:ea:c7:e5:36:81:74:63:05:a8:b7:48:ad:d0:70:53:
         5c:7d:83:62:31:9c:3b:a2:29:fa:a9:cf:9c:b4:07:c3:4f:c4:
         99:99:03:51:e3:07:8f:da:eb:71:97:d2:8e:15:d8:8f:08:f2:
         8d:69:f2:45:7e:2d:28:47:b0:8f:67:f0:83:26:c1:1c:32:c8:
         bd:47:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----