Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2a7eaf9-7d33-4bcd-b89d-6730667cb4c9.roa
File:                     c2a7eaf9-7d33-4bcd-b89d-6730667cb4c9.roa (raw, json)
Hash identifier:          FbB8Gi+9aKat/AR83eaRomzPtqLDHhLSx4q6R18Bf+c=
Subject key identifier:   85:1B:73:68:E2:F8:45:94:64:DE:14:DB:10:52:60:33:1D:48:0E:86
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       109B26DF9B547F10945373D491EE7FA25B35E8F9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2a7eaf9-7d33-4bcd-b89d-6730667cb4c9.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.162.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:26:df:9b:54:7f:10:94:53:73:d4:91:ee:7f:a2:5b:35:e8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=8c92874cc9c1e7f4461c95b8c9514698620e7726625541f4957d5c0a93ca52a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:b8:55:01:8d:77:20:ae:34:72:0d:e5:1d:
                    fb:f9:cf:ac:f7:62:9d:d5:f8:f6:84:74:bc:3f:38:
                    a5:14:05:b6:a7:0e:7c:6a:65:b7:c6:35:bb:2f:92:
                    f9:fc:2e:6f:2b:79:71:90:91:6b:74:35:03:0e:ff:
                    f7:62:30:84:41:93:fe:c8:c5:ae:fe:aa:52:fa:aa:
                    8e:72:52:22:b5:1f:0d:6e:09:fe:39:e5:f6:4a:a0:
                    41:6f:e5:92:54:19:6c:fe:74:fe:46:12:76:a5:92:
                    25:e6:16:dd:86:c6:19:4b:7b:32:07:34:13:e3:a8:
                    51:a0:5f:c7:0a:64:78:95:fe:62:ea:ba:89:a0:44:
                    53:dc:a2:c6:4c:ba:dd:19:ba:3e:7f:25:04:64:8f:
                    44:0e:ff:41:b1:52:0b:9f:45:bc:79:fd:ed:d8:81:
                    ac:96:f9:2d:b3:f7:b8:9a:aa:a6:ce:b3:49:03:f1:
                    b3:b2:5c:54:03:97:4b:0f:91:51:ef:a7:d1:65:d4:
                    64:bd:0b:d1:cb:29:cd:15:1a:7a:0f:fa:d9:55:0b:
                    51:5a:a6:ce:0c:b9:73:f7:7e:7f:87:0c:38:94:b2:
                    a6:10:24:85:ee:59:4e:36:d5:01:3d:df:58:b9:1a:
                    ee:b3:f1:19:14:18:f4:dd:cd:4a:99:3d:8a:25:a2:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1B:73:68:E2:F8:45:94:64:DE:14:DB:10:52:60:33:1D:48:0E:86
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2a7eaf9-7d33-4bcd-b89d-6730667cb4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:61:4f:88:f8:29:be:ed:9a:25:01:e3:a9:eb:54:76:78:
         0a:b3:1d:25:b8:ff:77:80:d6:99:e9:e1:ba:f2:23:0c:a1:e6:
         04:c4:9d:a3:63:fa:31:ec:25:a7:56:e7:ac:cf:66:57:82:d3:
         86:e4:4b:45:25:46:99:ab:93:64:49:ee:5e:90:6e:d9:b6:36:
         e9:61:cb:63:4c:25:cd:9a:63:5c:c4:ac:e0:ed:f1:6d:14:62:
         4e:07:9f:d7:09:8d:a7:16:69:9f:8f:04:d3:e6:74:8e:9b:bf:
         96:cb:2f:94:c7:3b:2e:1a:61:a7:20:0e:93:02:cc:25:b4:d4:
         26:6e:50:4a:dc:cd:ab:ca:53:72:1a:b2:ee:16:01:19:10:67:
         30:22:71:46:bf:5d:e7:25:53:56:87:73:68:2f:4c:78:bc:5f:
         82:d4:d1:ec:29:e9:bb:38:c6:5d:e4:5d:93:1c:28:54:0d:7c:
         f9:44:b8:b4:f8:3a:ef:f6:c7:00:9a:15:a3:df:2d:d4:80:3a:
         d5:8a:f5:1d:e0:c2:b3:35:97:e2:5e:ea:7b:66:73:60:c5:97:
         42:7c:8c:1b:2c:07:b3:cf:e9:f4:e9:aa:5e:d5:24:bb:db:90:
         51:19:cf:c5:4e:eb:86:dc:10:b9:84:0b:8d:3e:af:1e:6e:20:
         7f:a3:d3:50
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEJsm35tUfxCUU3PUke5/ols16PkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YzkyODc0Y2M5YzFlN2Y0NDYxYzk1YjhjOTUxNDY5ODYy
MGU3NzI2NjI1NTQxZjQ5NTdkNWMwYTkzY2E1MmEwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjbbhVAY13IK40cg3lHfv5z6z3Yp3V+PaEdLw/OKUUBban
DnxqZbfGNbsvkvn8Lm8reXGQkWt0NQMO//diMIRBk/7Ixa7+qlL6qo5yUiK1Hw1u
Cf455fZKoEFv5ZJUGWz+dP5GEnalkiXmFt2GxhlLezIHNBPjqFGgX8cKZHiV/mLq
uomgRFPcosZMut0Zuj5/JQRkj0QO/0GxUgufRbx5/e3YgayW+S2z97iaqqbOs0kD
8bOyXFQDl0sPkVHvp9Fl1GS9C9HLKc0VGnoP+tlVC1Faps4MuXP3fn+HDDiUsqYQ
JIXuWU421QE931i5Gu6z8RkUGPTdzUqZPYolov/fAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUhRtzaOL4RZRk3hTbEFJgMx1IDoYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2MyYTdlYWY5LTdkMzMtNGJjZC1iODlkLTY3MzA2NjdjYjRjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASojANBgkqhkiG9w0BAQsFAAOCAQEAQmphT4j4Kb7tmiUB46nrVHZ4CrMd
Jbj/d4DWmenhuvIjDKHmBMSdo2P6Mewlp1bnrM9mV4LThuRLRSVGmauTZEnuXpBu
2bY26WHLY0wlzZpjXMSs4O3xbRRiTgef1wmNpxZpn48E0+Z0jpu/lssvlMc7Lhph
pyAOkwLMJbTUJm5QStzNq8pTchqy7hYBGRBnMCJxRr9d5yVTVodzaC9MeLxfgtTR
7CnpuzjGXeRdkxwoVA18+US4tPg67/bHAJoVo98t1IA61Yr1HeDCszWX4l7qe2Zz
YMWXQnyMGywHs8/p9OmqXtUku9uQURnPxU7rhtwQuYQLjT6vHm4gf6PTUA==
-----END CERTIFICATE-----