Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b998032-f341-49ab-9269-2f14c7743f9e.roa
File:                     8b998032-f341-49ab-9269-2f14c7743f9e.roa (raw, json)
Hash identifier:          uWPTa7z2t2VxqU8tXmJbx0McH6RHTM3mhnqBPCXZ84Q=
Subject key identifier:   C8:65:E1:39:F9:21:EC:47:27:A3:25:C2:60:4C:E3:A4:C9:74:6E:D7
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0594404760C49AFC5D917D09DE7FFDCA383A9294
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b998032-f341-49ab-9269-2f14c7743f9e.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.88.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:40:47:60:c4:9a:fc:5d:91:7d:09:de:7f:fd:ca:38:3a:92:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=70457513580bd43f9a6aab0d8e41a0ad79a8010bdd3932525aaa4f30678310c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:35:7f:3f:04:74:08:73:b6:73:a7:ff:ed:
                    e0:74:1a:f2:cf:77:a9:63:da:71:d8:bf:a3:8b:2b:
                    98:97:87:4b:af:e9:c1:f8:e2:f6:62:cb:82:3e:68:
                    8b:26:83:33:ef:69:42:24:76:2e:81:5a:d3:97:1c:
                    25:9c:5b:22:32:ea:5d:00:40:d4:00:97:2a:68:6e:
                    10:f2:10:43:47:ef:ae:1c:d5:04:fe:ec:ce:3a:3a:
                    a4:ae:39:71:74:22:a1:3b:c0:fb:e9:45:cc:9b:9a:
                    02:7f:6d:2f:ed:f9:dd:5a:70:0f:c0:a7:96:4b:63:
                    e8:2e:29:a0:c4:7d:d2:d1:5e:17:8f:a9:00:fa:77:
                    db:3f:ef:af:dd:32:20:d1:31:cf:70:c4:05:e0:7a:
                    99:f5:be:eb:00:2d:b3:05:a8:a3:08:01:e1:36:f0:
                    2f:18:4f:86:6c:47:a6:a7:e3:2a:6b:76:54:14:51:
                    2d:e5:1e:aa:ef:64:f4:c5:99:cc:3e:18:77:e6:19:
                    d9:48:46:fe:1c:6a:a2:b6:b6:46:78:7b:eb:cf:16:
                    14:96:f1:b8:d9:62:49:ba:06:23:8a:35:64:9d:e6:
                    1c:d1:42:28:38:8c:4e:71:ec:7d:66:a7:bc:fe:20:
                    11:82:ba:3e:9c:22:6e:45:e1:cd:42:69:e8:a4:bb:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:E1:39:F9:21:EC:47:27:A3:25:C2:60:4C:E3:A4:C9:74:6E:D7
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b998032-f341-49ab-9269-2f14c7743f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:58:ac:cf:14:c2:51:e0:e4:81:16:21:1a:9e:77:81:78:cc:
         bd:ac:3f:77:53:c4:76:8a:ff:67:5e:1b:6d:0c:ca:2d:4d:4a:
         2d:00:9b:48:7b:64:04:85:90:a7:4c:a3:e2:c5:2c:87:a7:38:
         89:f8:7d:a7:36:00:e9:6b:5b:b8:1b:11:7c:c1:6f:5b:4a:4f:
         69:79:2d:61:5b:77:3e:67:b7:60:ea:29:a8:e9:1b:ba:3c:95:
         40:ec:a3:9d:db:20:73:de:96:3f:1d:5f:13:7d:c0:55:3e:e7:
         9a:64:9d:a2:8f:20:f4:aa:6e:4b:af:ad:30:02:6d:84:cb:b7:
         b7:4f:a7:38:22:8e:c3:07:70:88:35:bc:97:77:72:e0:95:2e:
         ad:fa:9d:68:40:d1:6d:67:71:bc:7f:59:f7:9c:00:7d:ff:56:
         5d:6c:b5:e1:41:4e:22:e3:eb:1b:fb:29:28:f5:00:67:06:56:
         f3:21:0d:e8:b8:40:18:94:e1:61:7a:a9:a5:3b:ed:57:0e:2a:
         31:aa:29:96:b9:22:4a:88:65:ef:ca:5a:f5:8e:5e:db:c8:6d:
         86:03:2d:58:95:2b:d0:d8:7c:f5:1e:d7:d9:6d:19:c4:f4:96:
         af:4c:31:17:b2:58:07:7a:bf:c5:71:a1:93:d0:75:cc:26:29:
         b1:33:0f:05
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBZRAR2DEmvxdkX0J3n/9yjg6kpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MDQ1NzUxMzU4MGJkNDNmOWE2YWFiMGQ4ZTQxYTBhZDc5
YTgwMTBiZGQzOTMyNTI1YWFhNGYzMDY3ODMxMGMzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjyDV/PwR0CHO2c6f/7eB0GvLPd6lj2nHYv6OLK5iXh0uv
6cH44vZiy4I+aIsmgzPvaUIkdi6BWtOXHCWcWyIy6l0AQNQAlypobhDyEENH764c
1QT+7M46OqSuOXF0IqE7wPvpRcybmgJ/bS/t+d1acA/Ap5ZLY+guKaDEfdLRXheP
qQD6d9s/76/dMiDRMc9wxAXgepn1vusALbMFqKMIAeE28C8YT4ZsR6an4yprdlQU
US3lHqrvZPTFmcw+GHfmGdlIRv4caqK2tkZ4e+vPFhSW8bjZYkm6BiOKNWSd5hzR
Qig4jE5x7H1mp7z+IBGCuj6cIm5F4c1Caeiku1XXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUyGXhOfkh7EcnoyXCYEzjpMl0btcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzhiOTk4MDMyLWYzNDEtNDlhYi05MjY5LTJmMTRjNzc0M2Y5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2WDANBgkqhkiG9w0BAQsFAAOCAQEAF1iszxTCUeDkgRYhGp53gXjMvaw/
d1PEdor/Z14bbQzKLU1KLQCbSHtkBIWQp0yj4sUsh6c4ifh9pzYA6WtbuBsRfMFv
W0pPaXktYVt3Pme3YOopqOkbujyVQOyjndsgc96WPx1fE33AVT7nmmSdoo8g9Kpu
S6+tMAJthMu3t0+nOCKOwwdwiDW8l3dy4JUurfqdaEDRbWdxvH9Z95wAff9WXWy1
4UFOIuPrG/spKPUAZwZW8yEN6LhAGJThYXqppTvtVw4qMaoplrkiSohl78pa9Y5e
28hthgMtWJUr0Nh89R7X2W0ZxPSWr0wxF7JYB3q/xXGhk9B1zCYpsTMPBQ==
-----END CERTIFICATE-----