Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa
File:                     d12f6635-a0b8-4c70-9bbf-9436e055df84.roa (raw, json)
Hash identifier:          lTvMuqj22je19F8SBVYg0RmD36X0rPy2GMWV+NTiHDM=
Subject key identifier:   C3:9D:99:E9:05:26:E6:AE:04:41:28:45:0E:50:E5:CD:20:6B:60:D4
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7EFDFB58BE9FF76F411FCDF1A47A3C318BEC41E0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.82.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:fb:58:be:9f:f7:6f:41:1f:cd:f1:a4:7a:3c:31:8b:ec:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=67e7df246e39d41ea9c8a2faaaed47800a8011708789be365aff039938daa454, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:f3:84:bb:f5:fe:a7:f5:c5:cd:ad:34:10:
                    9d:41:02:9f:c0:32:cb:96:af:d2:8a:35:05:98:d3:
                    f6:55:a6:89:f0:dd:4a:38:7f:53:aa:80:8d:52:4f:
                    b8:f8:8b:00:ae:c8:2f:6a:8e:8d:c6:b6:fa:a3:39:
                    94:ad:fd:53:be:ff:bc:36:94:7b:18:82:19:3e:ef:
                    9c:77:55:83:8e:5c:b0:9d:ba:e7:af:98:65:ea:04:
                    1e:2d:03:52:61:5f:05:c0:18:53:88:ab:e5:b4:29:
                    45:9a:3f:ec:bd:24:24:cf:73:75:e4:7b:62:7b:1b:
                    ee:d5:72:23:fc:f2:48:b0:4a:92:35:2d:ff:fd:5c:
                    6a:50:10:9b:87:13:53:f4:96:dc:a6:e5:ae:75:1c:
                    6b:4c:80:be:a7:d7:e0:77:11:8a:9e:7d:54:3d:03:
                    7f:3f:52:88:17:14:f5:a7:65:16:2c:87:d9:33:84:
                    48:7a:47:fa:b7:2c:34:b4:86:69:4e:a6:b5:51:7b:
                    dc:5d:06:29:ca:cf:72:1f:ad:33:99:e2:48:fe:fc:
                    58:d3:d2:02:85:cb:ff:61:83:9f:fd:f6:73:67:fa:
                    b4:da:5e:21:81:0b:fa:ef:dc:4a:39:5b:6f:d2:66:
                    4b:49:86:0e:94:d1:38:c8:bb:3b:a3:69:b5:7b:71:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:99:E9:05:26:E6:AE:04:41:28:45:0E:50:E5:CD:20:6B:60:D4
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.82.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:fc:2e:49:e7:6a:ff:db:2c:09:06:95:ec:7d:dc:4e:ca:
         0a:6a:ec:40:c5:f6:0b:8a:14:17:f6:4f:93:05:6f:c6:50:fc:
         fc:d6:52:4c:75:8e:58:03:e9:a6:41:c0:2c:73:12:ea:c9:cb:
         ab:15:79:87:eb:2f:39:41:9f:c0:e6:76:07:4f:49:6f:2f:d2:
         48:78:92:6f:b9:af:98:bd:22:f4:a9:f2:8b:9a:ef:92:05:c5:
         d8:01:f0:6d:88:41:67:03:41:0e:ca:dd:d5:6c:26:a4:72:49:
         12:e6:8c:e1:01:9c:09:da:f3:70:96:5f:4e:2a:70:cf:cf:e0:
         1a:e5:e1:a7:03:9d:8b:fe:2c:02:9f:d2:90:33:38:c1:d9:5d:
         4a:bd:92:08:48:0a:d7:98:a5:f1:29:25:dc:8e:6c:ec:d4:87:
         93:a1:d2:d4:f1:79:f4:bc:f7:84:7a:b8:55:70:e4:dd:4d:bc:
         73:a4:bb:20:5b:83:73:0c:a3:42:96:63:c7:60:cb:20:19:cd:
         0f:ec:4f:df:aa:14:68:28:4c:cd:86:07:8c:b4:ac:4c:fa:5b:
         c6:1f:09:37:ad:c5:61:26:2f:9a:7f:d4:be:5e:a7:de:f6:43:
         71:91:9f:89:79:03:3a:63:f8:d8:ad:3d:2d:f1:d9:9a:0f:de:
         a0:26:95:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfv37WL6f929BH83xpHo8MYvsQeAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2N2U3ZGYyNDZlMzlkNDFlYTljOGEyZmFhYWVkNDc4MDBh
ODAxMTcwODc4OWJlMzY1YWZmMDM5OTM4ZGFhNDU0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRwfOEu/X+p/XFza00EJ1BAp/AMsuWr9KKNQWY0/ZVponw
3Uo4f1OqgI1ST7j4iwCuyC9qjo3GtvqjOZSt/VO+/7w2lHsYghk+75x3VYOOXLCd
uuevmGXqBB4tA1JhXwXAGFOIq+W0KUWaP+y9JCTPc3Xke2J7G+7VciP88kiwSpI1
Lf/9XGpQEJuHE1P0ltym5a51HGtMgL6n1+B3EYqefVQ9A38/UogXFPWnZRYsh9kz
hEh6R/q3LDS0hmlOprVRe9xdBinKz3IfrTOZ4kj+/FjT0gKFy/9hg5/99nNn+rTa
XiGBC/rv3Eo5W2/SZktJhg6U0TjIuzujabV7ccJFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUw52Z6QUm5q4EQShFDlDlzSBrYNQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2QxMmY2NjM1LWEwYjgtNGM3MC05YmJmLTk0MzZlMDU1ZGY4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU2UqAwDQYJKoZIhvcNAQELBQADggEBAIZ+/C5J52r/2ywJBpXsfdxOygpq
7EDF9guKFBf2T5MFb8ZQ/PzWUkx1jlgD6aZBwCxzEurJy6sVeYfrLzlBn8DmdgdP
SW8v0kh4km+5r5i9IvSp8oua75IFxdgB8G2IQWcDQQ7K3dVsJqRySRLmjOEBnAna
83CWX04qcM/P4Brl4acDnYv+LAKf0pAzOMHZXUq9kghICteYpfEpJdyObOzUh5Oh
0tTxefS894R6uFVw5N1NvHOkuyBbg3MMo0KWY8dgyyAZzQ/sT9+qFGgoTM2GB4y0
rEz6W8YfCTetxWEmL5p/1L5ep972Q3GRn4l5Azpj+NitPS3x2ZoP3qAmlZ8=
-----END CERTIFICATE-----