Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa
File:                     fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa (raw, json)
Hash identifier:          1aJKNmXTSKrVSxNKNG+QSQzetK5KW6eYNvyHvvAXjLw=
Subject key identifier:   66:27:18:62:35:44:89:22:D3:79:BE:7E:F7:50:EC:63:B5:14:45:AD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0EFD1DD93A860F0473583B3CB01ED7216AE1ED2F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.227.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fd:1d:d9:3a:86:0f:04:73:58:3b:3c:b0:1e:d7:21:6a:e1:ed:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=46e44f0d72e37d0d5aaf97ad4dac99b499b621015547e31afd14e0b68ce52fee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:0e:34:01:d0:49:5d:98:7b:a6:f6:4d:73:
                    50:8a:a0:76:dd:0a:2f:59:c4:ed:48:fe:2e:f0:60:
                    40:bd:24:d8:28:8c:6c:24:f3:90:43:d6:4b:58:fc:
                    04:6f:06:1a:07:16:4d:11:1a:c4:b4:22:13:b1:8d:
                    b4:8c:01:ae:88:01:98:9b:87:cb:20:fe:1c:03:9e:
                    3c:52:b9:56:ee:42:91:0b:5a:7a:ea:12:40:12:02:
                    ca:d8:d2:9d:08:15:b2:59:b4:59:9f:bc:63:37:f0:
                    ca:b2:bf:89:e9:e8:28:61:66:64:f9:32:dc:19:0c:
                    ce:99:b0:6c:c8:9b:c5:13:c8:9c:c9:5c:3d:f4:36:
                    3f:4f:05:e1:fe:ab:8b:ae:27:e0:b3:69:0a:a9:ad:
                    1b:95:49:51:42:a5:57:e5:6c:fa:dc:48:0c:e6:7a:
                    e3:6c:25:b0:c6:73:a7:d1:82:dc:db:da:df:35:33:
                    6b:65:4c:58:f2:f6:6c:8c:ff:a1:9d:85:24:ae:0a:
                    0f:81:29:91:d8:99:93:5d:62:1f:85:5a:52:8e:cd:
                    1f:f1:59:8a:b5:48:11:15:ee:fd:94:d0:f6:46:46:
                    f9:60:1d:25:61:b5:64:82:5e:ba:06:2b:9b:d3:e3:
                    89:5c:61:d5:58:03:2c:ab:68:7b:b1:a8:be:83:1b:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:18:62:35:44:89:22:D3:79:BE:7E:F7:50:EC:63:B5:14:45:AD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdc2322e-8d87-4784-9e91-c92020c3a4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.227.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:64:f8:77:21:58:43:14:24:7a:96:48:b6:dc:e1:2f:58:
         41:31:14:e1:a4:c7:1e:08:63:cc:e1:48:fc:62:0c:6a:44:5a:
         83:eb:b2:e6:f0:b3:df:62:c7:92:01:49:c1:a8:8e:c5:fc:b5:
         a6:0f:cc:42:d2:a4:44:c1:33:25:33:c4:c6:d0:b0:ad:3d:b0:
         44:cb:76:70:67:6a:b5:b7:f7:6b:a6:c2:11:45:89:49:a8:5b:
         b8:97:e2:27:5b:8c:2a:1f:1a:a6:a2:95:fb:f5:cd:c5:86:8b:
         a6:01:6f:3e:a5:43:92:62:88:a7:f1:19:e4:08:0c:75:e1:3d:
         4e:87:7a:e1:ae:8d:d0:87:e6:3c:2a:2e:c5:52:b1:ab:a1:a2:
         99:2a:94:4d:6f:40:b7:35:9f:2b:2a:e1:ea:9c:3b:98:95:78:
         c6:d5:4f:f9:59:01:e7:83:f0:15:c7:b4:cd:be:a3:8c:80:4b:
         5a:fd:1b:61:3d:8e:b9:ae:ab:9f:85:ae:30:77:db:11:9b:1d:
         2a:01:8e:92:5b:34:dd:3e:50:65:77:95:8e:ff:88:3c:3d:3e:
         8a:b5:69:4d:dd:79:32:f6:83:e1:62:9b:0c:e2:60:5f:ea:fb:
         73:f9:58:6c:d8:80:e1:69:69:c3:b4:88:ce:6f:c0:3c:dc:bb:
         a9:af:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----