Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe6ac004-b793-4550-b30e-20aef872686f.roa
File:                     fe6ac004-b793-4550-b30e-20aef872686f.roa (raw, json)
Hash identifier:          aqGmGC5Dtwa82pn34CWm8OgvJ1/3WbDit/Q6dGX9Fg4=
Subject key identifier:   AA:B8:4D:11:7B:0D:9D:FD:EB:92:F4:B0:A3:4C:22:0A:CA:CB:98:1F
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5C8DF307254C48A74AF249C3C3909EDDAC746BCC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe6ac004-b793-4550-b30e-20aef872686f.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:f3:07:25:4c:48:a7:4a:f2:49:c3:c3:90:9e:dd:ac:74:6b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=5181d9e96772e29b3321ba999c4000641026c3bc0d10f1026a3a6500c0df9775, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:b0:63:0e:b0:b9:01:71:0e:bc:09:78:ad:
                    5a:e7:fa:71:92:71:fd:5b:60:67:08:20:14:fd:06:
                    9e:f3:d6:70:77:db:af:4f:05:59:66:6c:eb:00:42:
                    7c:53:b9:99:33:b9:bc:b7:50:31:5c:d9:5f:32:55:
                    6c:a5:dc:af:6c:63:88:ef:6f:16:22:fa:b3:f4:8c:
                    3b:3f:aa:e8:6b:0c:ca:26:bc:cc:b1:7e:02:f5:42:
                    c3:9f:1d:51:16:05:0b:37:6f:eb:7a:dc:ce:ce:3e:
                    7d:d6:0d:e1:59:d0:1e:63:a7:9d:d8:6a:c5:14:02:
                    f3:a7:f9:99:60:f5:28:a4:f5:71:b9:51:50:d3:6d:
                    24:65:1b:18:b1:57:77:1b:41:42:80:90:01:f3:99:
                    a2:2b:59:4f:e3:d0:58:2c:0a:ed:24:32:34:53:4d:
                    d3:9a:87:17:6d:f2:d8:d0:67:27:1a:58:61:0c:20:
                    e1:cc:91:f8:2c:0e:ea:1e:f6:90:70:f1:2a:61:b7:
                    97:45:d1:10:3b:fa:09:98:1d:86:08:6a:79:ad:80:
                    14:b2:f7:22:13:13:2c:6e:31:76:b2:99:cc:c0:d4:
                    a9:fb:63:6a:04:fb:0a:e6:ad:71:44:ea:d7:f2:b1:
                    b0:67:23:39:56:5f:65:56:4f:9e:55:7c:85:90:c5:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:4D:11:7B:0D:9D:FD:EB:92:F4:B0:A3:4C:22:0A:CA:CB:98:1F
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe6ac004-b793-4550-b30e-20aef872686f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:39:3e:83:d5:4b:97:e5:8b:e5:77:9a:7c:d2:ae:89:35:eb:
         12:01:49:78:bb:ad:f3:d8:93:e2:fe:42:58:7b:d8:63:d7:e1:
         cd:a8:08:fc:4d:d7:73:10:1c:24:36:74:7e:95:84:47:7f:a3:
         03:bd:8a:92:73:ae:f2:c4:14:a9:6d:8c:6a:b9:f0:4e:20:06:
         e8:e4:9d:a2:8a:78:03:c9:0e:02:cd:dd:c6:4a:13:fd:bb:b2:
         87:82:7d:61:04:74:66:c9:4d:d2:a5:6a:37:e6:76:83:ce:2f:
         6b:5d:f3:08:3b:35:c2:e0:fb:80:56:c5:9e:b0:0a:12:d9:65:
         4f:92:3b:43:77:78:a6:89:66:64:a5:27:16:db:5a:db:6e:e1:
         e2:8f:e4:dd:cd:10:13:9a:5a:7a:c9:5e:82:b7:4c:c3:d7:ff:
         fb:26:02:2a:e3:ca:77:5a:d9:0a:3a:f0:63:ed:dc:97:73:95:
         0c:92:4c:24:e3:71:f9:24:0d:a3:28:a9:29:98:83:4a:cd:07:
         07:09:72:86:93:c9:88:54:f3:94:d9:ed:de:26:32:86:69:d7:
         a3:46:79:b0:71:02:19:79:fd:6b:1a:33:9c:21:5f:4f:19:15:
         ce:75:92:09:c3:18:db:b6:7d:08:4d:d8:ea:44:5e:93:e6:7e:
         78:c5:ed:dd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUXI3zByVMSKdK8knDw5Ce3ax0a8wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MTgxZDllOTY3NzJlMjliMzMyMWJhOTk5YzQwMDA2NDEw
MjZjM2JjMGQxMGYxMDI2YTNhNjUwMGMwZGY5Nzc1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbH7BjDrC5AXEOvAl4rVrn+nGScf1bYGcIIBT9Bp7z1nB3
269PBVlmbOsAQnxTuZkzuby3UDFc2V8yVWyl3K9sY4jvbxYi+rP0jDs/quhrDMom
vMyxfgL1QsOfHVEWBQs3b+t63M7OPn3WDeFZ0B5jp53YasUUAvOn+Zlg9Sik9XG5
UVDTbSRlGxixV3cbQUKAkAHzmaIrWU/j0FgsCu0kMjRTTdOahxdt8tjQZycaWGEM
IOHMkfgsDuoe9pBw8Spht5dF0RA7+gmYHYYIanmtgBSy9yITEyxuMXaymczA1Kn7
Y2oE+wrmrXFE6tfysbBnIzlWX2VWT55VfIWQxbQxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUqrhNEXsNnf3rkvSwo0wiCsrLmB8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2ZlNmFjMDA0LWI3OTMtNDU1MC1iMzBlLTIwYWVmODcyNjg2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCICzANBgkqhkiG9w0BAQsFAAOCAQEAgzk+g9VLl+WL5XeafNKuiTXrEgFJ
eLut89iT4v5CWHvYY9fhzagI/E3XcxAcJDZ0fpWER3+jA72KknOu8sQUqW2Marnw
TiAG6OSdoop4A8kOAs3dxkoT/buyh4J9YQR0ZslN0qVqN+Z2g84va13zCDs1wuD7
gFbFnrAKEtllT5I7Q3d4polmZKUnFtta227h4o/k3c0QE5paeslegrdMw9f/+yYC
KuPKd1rZCjrwY+3cl3OVDJJMJONx+SQNoyipKZiDSs0HBwlyhpPJiFTzlNnt3iYy
hmnXo0Z5sHECGXn9axoznCFfTxkVznWSCcMY27Z9CE3Y6kRek+Z+eMXt3Q==
-----END CERTIFICATE-----