Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa
File:                     1f33d80b-180b-4303-9aca-60e5a054d749.roa (raw, json)
Hash identifier:          BGT5c5GVdO6+9f9ZPRrXlrthxvHM7G0c9/6TwnC/6vA=
Subject key identifier:   6B:1C:C5:AF:23:A0:04:64:BB:ED:E5:5F:58:9A:DD:B2:A9:1F:84:F1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2E227ADB1B5168C6ABE730C2A264A096C24999E9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        150.222.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:7a:db:1b:51:68:c6:ab:e7:30:c2:a2:64:a0:96:c2:49:99:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=186e1f1f72edd97d554e923e2fb9f6693ddb76d293ef9f489f372511397d35d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:b2:c6:f6:26:f6:70:e6:c8:a1:28:c0:57:
                    ea:05:9a:63:46:73:df:dc:cb:21:16:6b:0d:d6:ab:
                    0e:97:fe:a2:56:d2:72:49:68:55:be:fb:6e:a6:f2:
                    4a:bf:68:c7:f6:05:56:1c:50:15:d3:d0:a4:9e:99:
                    13:c2:48:23:c9:3a:67:6d:5b:4c:d0:04:3b:4e:67:
                    6c:a9:da:9a:5e:c9:30:dd:de:f1:d5:b6:fe:33:4e:
                    94:24:2c:81:91:75:71:9f:87:de:f8:6b:92:21:cc:
                    d7:c2:d4:86:c1:64:a2:00:7f:ff:49:f5:95:1a:10:
                    da:fa:81:36:fd:c8:cc:4a:d4:c3:ce:14:72:eb:0c:
                    1b:f8:22:de:ef:2b:13:4a:92:55:bd:95:cf:a0:8a:
                    23:fc:e4:57:d0:45:d1:a8:8b:3f:71:19:6c:92:e2:
                    9b:c5:7c:d0:55:25:41:d4:94:48:db:5f:0b:5e:7a:
                    75:cd:f7:52:27:92:d6:80:a5:44:77:ed:43:c7:10:
                    bb:6a:5f:d4:1b:47:0d:b9:83:da:a7:79:4c:f0:e8:
                    5e:36:2b:2d:17:ff:9f:a6:81:02:a5:8d:ee:eb:4a:
                    fb:42:7b:2d:a4:fc:28:da:b8:5b:12:e3:e4:cf:e5:
                    82:43:ad:d1:12:e7:9e:fe:f6:4b:03:75:6d:11:ae:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:C5:AF:23:A0:04:64:BB:ED:E5:5F:58:9A:DD:B2:A9:1F:84:F1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:94:b0:e8:a7:95:be:c3:75:c7:74:42:81:50:42:8f:5b:
         b1:b9:99:4b:a0:fe:3e:ea:38:db:16:4e:ef:e7:64:2f:23:90:
         96:e5:1f:5f:e3:26:90:2a:69:ef:02:7d:c5:b5:ea:95:1e:15:
         e6:ee:01:66:b2:33:bd:6d:a9:63:24:fa:d8:cd:79:4e:bd:0d:
         2d:b8:81:83:e5:6e:88:90:5c:68:ec:3a:6c:86:1d:1e:6d:f6:
         51:83:be:86:93:46:96:9c:c2:d8:ab:76:a4:71:e1:ed:f6:0a:
         d1:5d:63:7f:ed:4d:f0:6b:87:0e:53:85:c5:0e:8e:6c:20:03:
         f3:b7:a2:63:f2:92:7e:dc:46:3f:8f:68:7c:9c:c2:41:9c:dc:
         42:bb:7e:81:6c:0b:db:64:da:e8:4f:71:51:8d:bb:9a:23:fa:
         25:69:52:43:46:a5:34:ec:fe:4c:a6:c6:51:61:bd:2a:65:b0:
         b8:5e:c9:2d:8f:e4:88:b8:4c:31:19:dc:05:d3:8e:ba:0b:a9:
         ee:d4:bf:07:82:72:a8:f9:12:3a:6c:fc:6c:51:53:52:02:29:
         47:10:71:ad:4b:7a:0e:7f:5d:75:b7:ff:15:9f:f8:a9:6b:2b:
         6a:97:c3:6d:c3:6a:53:a8:f6:fb:9a:b0:76:2b:63:d4:89:7f:
         32:5f:8c:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULiJ62xtRaMar5zDComSglsJJmekwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxODZlMWYxZjcyZWRkOTdkNTU0ZTkyM2UyZmI5ZjY2OTNk
ZGI3NmQyOTNlZjlmNDg5ZjM3MjUxMTM5N2QzNWQxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjF7LG9ib2cObIoSjAV+oFmmNGc9/cyyEWaw3Wqw6X/qJW
0nJJaFW++26m8kq/aMf2BVYcUBXT0KSemRPCSCPJOmdtW0zQBDtOZ2yp2ppeyTDd
3vHVtv4zTpQkLIGRdXGfh974a5IhzNfC1IbBZKIAf/9J9ZUaENr6gTb9yMxK1MPO
FHLrDBv4It7vKxNKklW9lc+giiP85FfQRdGoiz9xGWyS4pvFfNBVJUHUlEjbXwte
enXN91InktaApUR37UPHELtqX9QbRw25g9qneUzw6F42Ky0X/5+mgQKlje7rSvtC
ey2k/CjauFsS4+TP5YJDrdES557+9ksDdW0RrgXnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaxzFryOgBGS77eVfWJrdsqkfhPEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzFmMzNkODBiLTE4MGItNDMwMy05YWNhLTYwZTVhMDU0ZDc0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACW3t8wDQYJKoZIhvcNAQELBQADggEBAKH4lLDop5W+w3XHdEKBUEKPW7G5
mUug/j7qONsWTu/nZC8jkJblH1/jJpAqae8CfcW16pUeFebuAWayM71tqWMk+tjN
eU69DS24gYPlboiQXGjsOmyGHR5t9lGDvoaTRpacwtirdqRx4e32CtFdY3/tTfBr
hw5ThcUOjmwgA/O3omPykn7cRj+PaHycwkGc3EK7foFsC9tk2uhPcVGNu5oj+iVp
UkNGpTTs/kymxlFhvSplsLheyS2P5Ii4TDEZ3AXTjroLqe7UvweCcqj5Ejps/GxR
U1ICKUcQca1Leg5/XXW3/xWf+KlrK2qXw23DalOo9vuasHYrY9SJfzJfjGs=
-----END CERTIFICATE-----