Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa
File:                     e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa (raw, json)
Hash identifier:          4tIIMvbIXrkf34LFK+JLpQlMkohu06vZFuoe4pHVbRg=
Subject key identifier:   7F:49:B2:E9:B7:DB:DC:16:DE:86:46:8E:AA:9F:9A:99:D5:2A:11:EB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       244F56789E34D6AB56BC8E430DFF736FBCBB2102
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.245.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4f:56:78:9e:34:d6:ab:56:bc:8e:43:0d:ff:73:6f:bc:bb:21:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=f60eb1cf88e9b7e2ae14b69fa40b0fa0d50aaa4896fe3cbbad1e5dd090fcb6d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:35:85:56:2f:df:03:5a:0b:51:36:2c:a6:
                    5f:ee:37:4e:1a:cb:f3:4d:36:8b:15:c6:4f:15:3a:
                    a8:62:2b:d9:61:ae:95:a7:37:cb:f9:f1:8b:ca:22:
                    01:3b:e9:ad:02:04:c5:ca:ca:0a:26:5f:ba:d6:dd:
                    4a:e9:43:38:35:b8:d5:4e:bb:c8:65:3a:1e:6b:3a:
                    f6:52:1d:3d:a0:1a:f0:e0:f1:d7:e6:46:2d:44:e6:
                    8d:6a:77:c9:aa:35:2b:c7:aa:c9:e0:7a:93:6f:c7:
                    2c:14:93:7b:60:58:29:2d:d3:0e:68:7e:74:91:4d:
                    42:3c:f7:a5:a1:80:9a:b3:0e:84:86:bc:be:b1:00:
                    c8:4c:48:e3:96:a6:fe:cb:73:50:a2:52:bb:e2:e9:
                    65:8c:45:bc:2e:9e:d7:13:13:7c:e6:17:78:24:b8:
                    96:39:82:1f:da:c1:e7:96:7a:b9:78:77:29:5e:a1:
                    72:ba:e0:19:81:fb:d1:3a:54:b6:25:66:a4:4d:28:
                    f5:4a:78:14:d5:f0:3c:95:f5:fb:70:04:71:c5:a5:
                    23:64:da:f6:5f:8c:ac:af:23:9c:54:42:38:df:03:
                    b0:61:53:9e:a7:51:9d:f0:a8:cf:da:ca:9e:1f:26:
                    bc:47:63:52:e3:97:29:17:f6:ef:d8:2c:45:5f:71:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:B2:E9:B7:DB:DC:16:DE:86:46:8E:AA:9F:9A:99:D5:2A:11:EB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:44:52:de:7b:a9:2b:07:87:ec:9f:ef:e2:8f:e6:28:5b:8e:
         af:38:3c:0b:e5:bb:b4:cf:97:52:a1:ac:e7:44:f3:40:fa:bf:
         c4:02:da:12:62:57:a2:92:67:53:8f:fb:7c:66:71:e7:15:4a:
         11:5b:78:98:fd:18:cf:04:c6:be:d3:19:c1:3e:22:91:12:a2:
         d4:91:64:74:a1:63:38:b0:dc:39:2a:88:32:83:2b:11:4f:c4:
         29:fb:d2:5b:1e:49:0b:65:5d:9d:af:21:26:9d:71:0d:b6:d3:
         7e:24:84:d0:c1:fb:ba:db:a1:ef:da:30:79:e5:ad:15:e5:6c:
         76:ce:5c:8d:b0:77:c4:77:b3:b1:6c:6e:2d:bc:9b:bd:e1:50:
         7c:fa:d7:e4:e1:b2:83:4c:bf:6b:fd:f6:3b:e0:ce:27:f4:f6:
         73:08:80:17:43:e6:f3:51:25:de:ed:e7:8e:f1:ed:71:d3:05:
         d7:25:4d:cd:47:10:8f:1c:99:36:f2:31:d4:ce:ff:8c:96:98:
         80:13:27:ac:df:61:1e:90:96:de:fb:90:99:d3:b4:ca:38:3c:
         62:43:75:48:e5:a2:06:85:1c:de:fa:25:6c:33:d4:70:0b:c2:
         d8:0a:f6:c3:d8:22:57:06:52:00:2f:74:fa:59:61:7b:cb:af:
         e3:13:22:8e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJE9WeJ401qtWvI5DDf9zb7y7IQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjBlYjFjZjg4ZTliN2UyYWUxNGI2OWZhNDBiMGZhMGQ1
MGFhYTQ4OTZmZTNjYmJhZDFlNWRkMDkwZmNiNmQxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpSzWFVi/fA1oLUTYspl/uN04ay/NNNosVxk8VOqhiK9lh
rpWnN8v58YvKIgE76a0CBMXKygomX7rW3UrpQzg1uNVOu8hlOh5rOvZSHT2gGvDg
8dfmRi1E5o1qd8mqNSvHqsngepNvxywUk3tgWCkt0w5ofnSRTUI896WhgJqzDoSG
vL6xAMhMSOOWpv7Lc1CiUrvi6WWMRbwuntcTE3zmF3gkuJY5gh/aweeWerl4dyle
oXK64BmB+9E6VLYlZqRNKPVKeBTV8DyV9ftwBHHFpSNk2vZfjKyvI5xUQjjfA7Bh
U56nUZ3wqM/ayp4fJrxHY1LjlykX9u/YLEVfccINAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUf0my6bfb3BbehkaOqp+amdUqEeswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UwYjM5NzY3LTZhYzMtNGM2Mi04OGQ2LWMzZTdmOTEzOTNjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA29TANBgkqhkiG9w0BAQsFAAOCAQEAaERS3nupKweH7J/v4o/mKFuOrzg8
C+W7tM+XUqGs50TzQPq/xALaEmJXopJnU4/7fGZx5xVKEVt4mP0YzwTGvtMZwT4i
kRKi1JFkdKFjOLDcOSqIMoMrEU/EKfvSWx5JC2Vdna8hJp1xDbbTfiSE0MH7utuh
79oweeWtFeVsds5cjbB3xHezsWxuLbybveFQfPrX5OGyg0y/a/32O+DOJ/T2cwiA
F0Pm81El3u3njvHtcdMF1yVNzUcQjxyZNvIx1M7/jJaYgBMnrN9hHpCW3vuQmdO0
yjg8YkN1SOWiBoUc3volbDPUcAvC2Ar2w9giVwZSAC90+llhe8uv4xMijg==
-----END CERTIFICATE-----