Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7e48e9-b334-4d20-9a54-85d54b1f3752.roa
File:                     1e7e48e9-b334-4d20-9a54-85d54b1f3752.roa (raw, json)
Hash identifier:          6EVbfGAEDoTuOWMsBW2hXwN36ppK/egemw5l/p5HTLQ=
Subject key identifier:   12:BD:F8:3C:ED:6E:A3:7B:66:4E:9F:70:95:07:A3:BC:7C:8A:79:C7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       52AB5BD45D70965354CEA1DBE58E90EB4AB0DB7B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7e48e9-b334-4d20-9a54-85d54b1f3752.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        52.46.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:5b:d4:5d:70:96:53:54:ce:a1:db:e5:8e:90:eb:4a:b0:db:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=c83fae9f7047f19517a90b2faae79085e8f5b7a5208be4edb771d979fbc5a5be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:a8:c5:63:c1:6d:cc:ef:c8:1c:25:ea:30:
                    e6:22:98:1f:69:76:78:1e:36:78:6e:5d:96:d0:7b:
                    7e:9e:13:63:f1:c8:81:a5:4f:73:14:f2:5f:23:5a:
                    85:c1:88:21:7e:c1:44:2c:9e:cb:af:df:ff:af:06:
                    cb:97:a6:41:b3:59:11:3c:dc:cc:5a:22:7b:8f:c8:
                    87:21:18:64:34:b3:3e:67:98:ac:8f:e3:e7:34:fc:
                    68:d8:b7:a6:c4:7b:42:da:f5:85:57:d5:b1:62:08:
                    c1:ac:a6:84:77:03:c4:a3:67:d6:60:c7:06:60:60:
                    2d:fd:f9:e9:89:cb:f3:e6:4b:fd:09:28:1c:5d:19:
                    cf:4f:9c:51:77:ce:ff:4c:bc:b6:31:61:7e:c1:61:
                    9d:50:42:e1:a0:3a:8d:19:08:16:0c:78:a4:23:7b:
                    1b:30:0f:af:fa:3b:d2:59:22:d5:13:5f:fb:b3:c5:
                    ba:da:08:19:0c:0d:91:b2:de:c7:9e:8a:b3:e8:b3:
                    f5:8b:0c:f6:96:1c:6f:df:80:91:0c:b5:b2:a4:70:
                    4e:e4:44:c0:f7:fd:27:d6:8f:a7:71:a4:f7:b3:46:
                    31:13:77:5d:54:38:4e:e5:b2:0c:b1:ff:50:b5:be:
                    af:af:6e:a6:b7:ed:19:13:d0:a9:20:88:ae:53:7e:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:F8:3C:ED:6E:A3:7B:66:4E:9F:70:95:07:A3:BC:7C:8A:79:C7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e7e48e9-b334-4d20-9a54-85d54b1f3752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:96:99:ec:73:42:1b:53:af:73:9c:c1:db:df:0d:ec:37:
         5d:b6:c0:fb:c1:5e:72:54:af:7b:4f:ae:ed:49:18:19:e7:3b:
         2a:2e:56:67:28:c1:2d:a0:d0:31:d3:12:29:f7:6b:0b:d5:f4:
         2c:e3:98:1d:d8:e4:62:24:79:fa:e2:e7:65:5e:08:fe:da:95:
         9e:9a:22:e7:0a:4f:c8:c7:34:fc:4d:ba:7f:a3:23:89:e4:2b:
         07:6f:22:fd:34:3c:9b:8d:a8:b6:66:ef:77:08:8b:1a:84:3b:
         95:35:5b:aa:ba:0c:9b:48:df:77:23:3f:27:5f:5c:55:47:0f:
         b9:52:9e:2b:28:c9:23:2e:77:b4:92:2d:59:c2:ba:20:53:11:
         ce:2c:28:bd:26:e7:64:69:29:18:07:4e:c3:6b:2a:21:7d:06:
         bc:a0:4e:f3:01:9d:fa:4a:eb:7c:a5:6b:0c:e7:17:9b:c2:cc:
         d9:83:fc:64:42:42:0a:13:b8:2b:0d:51:91:5a:b7:3a:4c:81:
         21:36:14:bc:1d:64:9c:80:bf:dc:12:74:65:d2:25:98:61:4b:
         64:4d:35:0e:c0:ca:ab:e9:c6:e4:1d:4e:7b:4c:c5:3f:4d:12:
         61:0f:60:b2:86:b4:32:2d:57:34:9c:bf:c0:c2:83:47:09:ea:
         8f:06:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----