Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa
File:                     34c1c8bd-1bca-454e-a751-21737abd6aee.roa (raw, json)
Hash identifier:          jesZUDVPUGKjDhLtxk3kErobt8ov+UK8dnM1qf74YAA=
Subject key identifier:   C5:27:AD:F1:12:C3:B9:DE:5D:84:3D:C6:38:A8:C6:7A:30:3F:28:FA
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       471D3BC596C86C99086A6A3A2ED3A12F4BCEEB5E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.82.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:3b:c5:96:c8:6c:99:08:6a:6a:3a:2e:d3:a1:2f:4b:ce:eb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=73684867f8f7a7dd53428af22172900c863080970327c2d9685ceede99ff6895, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:ef:e5:1d:4f:81:57:4b:88:2a:6a:19:ad:
                    9a:6e:63:0b:99:dc:1a:04:ab:fd:a2:98:81:09:ec:
                    c3:6d:93:59:4d:b5:72:fc:47:e0:d7:ac:96:96:5c:
                    2e:c1:33:2a:b0:89:7f:d3:c3:b8:1e:ae:8d:16:ee:
                    94:39:06:f9:d1:18:77:29:9a:0c:cc:ff:f8:7a:58:
                    ea:c1:a6:0f:e6:0c:8d:ee:99:dd:0c:65:02:f6:11:
                    da:35:2a:ad:dd:7f:80:ad:fe:1c:15:9d:e9:40:ba:
                    75:8f:15:99:e3:c5:81:2c:6d:51:1a:d2:a0:29:a0:
                    94:db:24:d6:b3:70:49:a8:46:62:87:2f:f2:f9:8a:
                    ca:4a:9c:39:67:93:9a:a2:0d:07:ef:98:cd:19:0f:
                    c8:c2:e5:29:f6:e5:99:49:3b:a6:55:4a:ff:b7:d6:
                    7a:f1:99:31:0f:2b:05:13:95:42:ce:82:b3:1a:a1:
                    3c:af:b1:74:10:2b:fe:2e:1e:1f:3b:c5:1a:10:38:
                    d2:31:a8:31:d5:9b:2c:d1:a9:0e:c6:1f:34:6e:44:
                    ed:70:48:ba:69:7e:a5:6f:46:28:06:a2:b0:08:dc:
                    f9:bd:5b:09:d7:ad:e7:0e:54:be:dc:5e:85:e8:8a:
                    32:17:be:48:db:c6:75:50:93:fa:cb:65:82:27:1d:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:AD:F1:12:C3:B9:DE:5D:84:3D:C6:38:A8:C6:7A:30:3F:28:FA
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34c1c8bd-1bca-454e-a751-21737abd6aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.82.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:77:af:1a:79:87:93:3e:0c:74:2e:b1:7e:45:cb:a1:49:
         8f:b9:8e:c2:92:d1:bf:9c:c9:ad:1e:79:15:ab:9c:21:07:60:
         44:80:99:b9:d9:1a:9b:b5:54:f1:91:1b:c6:c8:cd:8d:83:2e:
         be:e7:33:ff:18:ca:4d:1a:7b:07:82:ec:db:45:de:07:9d:70:
         65:bd:b7:24:e3:bc:78:6d:e5:e4:b7:1b:99:7c:2e:f2:1b:b2:
         ae:11:ed:f2:23:ce:0d:47:21:6e:dc:56:d3:35:a0:6c:77:94:
         ac:5a:e1:d8:52:93:f0:50:80:97:60:6c:9d:a5:f2:91:cd:09:
         7c:5b:cb:8e:68:1d:7c:e4:47:33:b8:a3:16:e1:4f:6b:2e:86:
         80:f2:c2:4d:69:6b:cb:64:5c:f5:ba:f8:7d:64:72:d6:79:de:
         ff:7a:6b:e4:3a:59:30:56:19:1e:bb:bd:60:4c:63:e4:1c:c8:
         80:f7:ab:9f:20:41:93:fe:e2:00:3d:ba:87:4b:80:24:21:31:
         f8:8b:df:af:1d:c9:b7:00:81:4f:44:09:07:78:a4:73:ed:51:
         dd:e0:7b:13:3e:9a:0b:61:29:fe:53:b3:e1:01:14:0f:00:fe:
         08:07:d5:ac:f5:05:19:af:75:62:7a:d7:2d:f1:be:9f:ce:f4:
         e6:e3:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----