Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa
File:                     c5fa8205-30a8-4536-a398-4179516ffe84.roa (raw, json)
Hash identifier:          y+Bi58JthraTdQqY3WlUA8Ib2olmnniPnHHUONIIYh0=
Subject key identifier:   6C:45:46:1C:C4:12:A7:D5:4F:8E:5C:8F:90:9C:A3:B4:54:29:61:4E
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       658613DFE7E30907A50517CD7CB80A20D8073734
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.250.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:86:13:df:e7:e3:09:07:a5:05:17:cd:7c:b8:0a:20:d8:07:37:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=118704c2856c247d3bad4653a42dfe1baa56ba4ef9a5f3a105b5e8789242a073, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:41:58:c1:46:d9:af:50:4c:e2:ba:00:f3:
                    43:e0:43:94:4f:21:18:fb:12:6a:fe:de:cd:c9:91:
                    4a:12:88:bc:ab:2f:4d:64:40:aa:1f:f3:c4:e2:43:
                    13:3b:2f:fd:c9:23:a4:20:58:8d:15:62:dc:cf:44:
                    10:07:5f:bd:e8:3e:3d:1f:bf:75:0c:f6:4f:37:26:
                    87:1f:2d:c7:39:7c:0d:dd:2f:75:57:99:b6:31:12:
                    03:a3:a6:f9:e8:da:dc:ad:26:93:86:cf:8a:4b:79:
                    eb:41:49:c6:46:3a:0d:27:6c:e1:1d:24:0c:e7:32:
                    5b:91:9a:af:ca:90:57:c0:9c:c0:b2:57:1f:f7:4d:
                    a2:aa:14:3e:a9:f2:72:50:6b:7c:f3:40:e4:0e:1d:
                    18:28:d4:95:b4:95:3f:aa:2a:34:e7:89:9c:39:79:
                    5d:f2:87:f8:f7:2d:6c:1f:ac:d0:cf:4a:29:c7:f7:
                    3c:da:fd:1c:68:79:0e:4a:b9:2a:1c:56:da:e4:5a:
                    bc:51:04:09:40:f0:b9:fd:2b:cd:d2:f2:ac:7a:0c:
                    84:3d:7e:7f:9d:fb:e0:91:1a:2f:aa:cb:12:97:08:
                    44:ae:96:05:46:2e:f0:ed:73:6d:15:22:f1:6a:ee:
                    c1:47:aa:fb:87:67:36:f5:bc:fb:6c:fd:f5:cc:c4:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:46:1C:C4:12:A7:D5:4F:8E:5C:8F:90:9C:A3:B4:54:29:61:4E
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5fa8205-30a8-4536-a398-4179516ffe84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.250.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:35:66:2e:16:fa:98:c4:14:e9:88:ab:23:bf:5d:d0:3b:ba:
         0a:e7:6c:98:5a:73:c6:e6:6e:3a:ab:8b:ee:ff:30:64:71:b2:
         dc:89:d9:64:f8:d1:36:2d:3c:83:fe:2d:d1:1a:29:cc:d1:b9:
         11:9a:32:eb:44:89:92:ca:67:a1:34:6c:b0:2b:88:bc:8b:9e:
         29:39:3f:e4:1f:85:46:40:b0:a5:6a:9b:df:9b:54:ca:ff:59:
         53:f8:d3:2b:a3:26:fd:64:3c:94:d8:39:69:3f:c1:f9:fe:76:
         ec:da:13:fe:b1:88:da:f2:da:11:5f:9d:1e:9a:9f:30:52:f2:
         1d:7b:0e:18:24:6a:c2:43:f4:45:7c:29:6b:60:b6:b0:cc:a4:
         d0:18:8b:43:0d:de:c5:35:ed:8a:b6:dc:d0:ea:f4:d3:ba:00:
         22:30:97:23:5a:f1:3a:27:62:c2:02:1e:9a:11:f6:81:73:65:
         31:00:a4:cb:f0:60:b5:62:7b:18:6f:ad:4b:95:8d:62:54:80:
         61:0e:78:0a:65:3d:65:5d:83:34:28:00:11:ad:4f:08:36:17:
         ef:6c:40:d1:e7:5a:02:66:d4:2d:22:52:b6:43:3b:96:31:ee:
         38:a2:c6:65:38:20:fa:62:0b:ea:22:5f:ac:c4:3b:84:5d:a8:
         58:40:1c:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZYYT3+fjCQelBRfNfLgKINgHNzQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMTg3MDRjMjg1NmMyNDdkM2JhZDQ2NTNhNDJkZmUxYmFh
NTZiYTRlZjlhNWYzYTEwNWI1ZTg3ODkyNDJhMDczMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmOkFYwUbZr1BM4roA80PgQ5RPIRj7Emr+3s3JkUoSiLyr
L01kQKof88TiQxM7L/3JI6QgWI0VYtzPRBAHX73oPj0fv3UM9k83JocfLcc5fA3d
L3VXmbYxEgOjpvno2tytJpOGz4pLeetBScZGOg0nbOEdJAznMluRmq/KkFfAnMCy
Vx/3TaKqFD6p8nJQa3zzQOQOHRgo1JW0lT+qKjTniZw5eV3yh/j3LWwfrNDPSinH
9zza/RxoeQ5KuSocVtrkWrxRBAlA8Ln9K83S8qx6DIQ9fn+d++CRGi+qyxKXCESu
lgVGLvDtc20VIvFq7sFHqvuHZzb1vPts/fXMxGPDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbEVGHMQSp9VPjlyPkJyjtFQpYU4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M1ZmE4MjA1LTMwYTgtNDUzNi1hMzk4LTQxNzk1MTZmZmU4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2+kAwDQYJKoZIhvcNAQELBQADggEBAJc1Zi4W+pjEFOmIqyO/XdA7ugrn
bJhac8bmbjqri+7/MGRxstyJ2WT40TYtPIP+LdEaKczRuRGaMutEiZLKZ6E0bLAr
iLyLnik5P+QfhUZAsKVqm9+bVMr/WVP40yujJv1kPJTYOWk/wfn+duzaE/6xiNry
2hFfnR6anzBS8h17DhgkasJD9EV8KWtgtrDMpNAYi0MN3sU17Yq23NDq9NO6ACIw
lyNa8TonYsICHpoR9oFzZTEApMvwYLViexhvrUuVjWJUgGEOeAplPWVdgzQoABGt
Twg2F+9sQNHnWgJm1C0iUrZDO5Yx7jiixmU4IPpiC+oiX6zEO4RdqFhAHN0=
-----END CERTIFICATE-----