Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa
File:                     7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa (raw, json)
Hash identifier:          wXsr7RAs1+IVOmZ1VtA7FiLPMun0dOKA+U1mwTqb5UA=
Subject key identifier:   90:8F:40:0F:AC:88:E6:1F:69:80:FA:6C:F0:2D:47:F0:E4:C8:5A:C9
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       128A84D3002EBD82FBCB66B1B67ADFFB95320C98
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2631::/24 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8a:84:d3:00:2e:bd:82:fb:cb:66:b1:b6:7a:df:fb:95:32:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:79:1c:15:ca:58:77:42:75:8d:7b:27:19:
                    38:9e:bb:ce:b0:17:74:11:32:a5:e5:63:90:cb:c4:
                    68:95:a6:ad:ec:bd:a4:18:84:c8:fc:e3:31:ce:32:
                    a6:03:4e:b3:2c:c8:7f:eb:28:91:59:88:eb:8e:a1:
                    8d:35:a3:79:5e:ac:c2:e2:a2:d4:47:b3:c5:14:98:
                    be:b2:a3:10:70:29:ff:78:c8:3a:b7:e8:9a:82:51:
                    90:c0:b5:d8:87:dc:3a:8b:f9:79:65:37:69:1b:77:
                    82:8e:a5:fc:e1:f3:f2:72:e7:8c:68:b5:85:9f:0e:
                    a6:0e:5a:76:68:45:37:4f:86:1e:b6:80:ad:b5:d0:
                    69:20:39:1a:6c:47:af:f2:7b:d7:9b:d3:99:c9:38:
                    54:58:76:67:1b:4d:43:9c:77:c1:24:b9:93:b1:8c:
                    83:fd:25:69:1e:29:09:7e:6a:ad:44:a0:1b:b3:7f:
                    13:e3:d1:e7:f4:fd:88:cc:51:db:c9:d3:a3:fe:a9:
                    74:d5:c0:61:10:ce:4d:24:f5:e0:dd:f8:33:91:ac:
                    07:ac:dc:c8:90:c5:98:64:7a:4c:cc:59:3c:1f:5c:
                    d8:e0:12:b5:67:3b:a2:75:73:5e:dd:fa:77:e2:67:
                    db:9e:c1:5e:00:3a:12:23:d2:46:a3:76:2b:82:4c:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:40:0F:AC:88:E6:1F:69:80:FA:6C:F0:2D:47:F0:E4:C8:5A:C9
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7fd383b4-bae7-4fa2-8f08-ea8d6468bef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:25:d9:de:a4:e4:86:45:88:3b:a4:45:9d:84:d9:62:61:
         57:8e:6f:bb:7c:46:8b:7c:75:ab:de:49:e6:33:c0:bd:45:f6:
         f8:60:9b:8b:22:ca:8c:70:d9:fc:2b:37:67:c3:e7:e6:87:16:
         15:a4:86:1b:70:e1:d7:f7:5d:c9:cb:2e:c6:b9:9f:06:6a:e2:
         38:d7:b1:89:38:35:b0:bc:8a:27:55:2f:f5:ef:83:70:1a:e1:
         3d:df:1a:56:6c:b6:ae:e0:7f:87:8d:3d:92:75:5a:09:4a:9e:
         66:12:ad:6c:78:2b:05:57:b4:60:73:a7:c1:ff:49:b5:fe:3e:
         17:d7:7f:6f:b0:92:dd:76:b7:20:ed:68:6a:ae:65:7c:7c:aa:
         39:9d:9e:bb:69:71:ce:bd:87:01:71:16:d9:fc:4c:5d:96:e4:
         18:e0:a6:0f:64:8d:d6:75:0d:73:61:15:d4:2c:e5:b7:71:d5:
         7e:4e:ac:0b:e9:2a:43:06:c2:37:69:8d:26:33:51:6a:57:e0:
         bf:97:84:0a:fc:d6:ac:8b:0f:79:98:0c:91:c5:69:8e:1d:b6:
         76:40:66:4f:f1:77:09:da:ec:65:81:ac:db:b1:0a:f3:b5:5e:
         34:1b:71:15:bd:03:2e:e6:df:8a:9e:91:a7:34:05:a0:e3:e0:
         42:d9:82:0e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEoqE0wAuvYL7y2axtnrf+5UyDJgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjlkZjVkYzA1MWY4NGU0YThiZGRhM2UzNDZmZDY3ZjM2
NTE0Nzk3NzIwNjhkZGM3YTA5ZDkyMzAzYjBkZTM5MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaD3kcFcpYd0J1jXsnGTieu86wF3QRMqXlY5DLxGiVpq3s
vaQYhMj84zHOMqYDTrMsyH/rKJFZiOuOoY01o3lerMLiotRHs8UUmL6yoxBwKf94
yDq36JqCUZDAtdiH3DqL+XllN2kbd4KOpfzh8/Jy54xotYWfDqYOWnZoRTdPhh62
gK210GkgORpsR6/ye9eb05nJOFRYdmcbTUOcd8EkuZOxjIP9JWkeKQl+aq1EoBuz
fxPj0ef0/YjMUdvJ06P+qXTVwGEQzk0k9eDd+DORrAes3MiQxZhkekzMWTwfXNjg
ErVnO6J1c17d+nfiZ9uewV4AOhIj0kajdiuCTGQ7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkI9AD6yI5h9pgPps8C1H8OTIWskwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzdmZDM4M2I0LWJhZTctNGZhMi04ZjA4LWVhOGQ2NDY4YmVmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC
MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAD1eJdnepOSGRYg7pEWdhNliYVeO
b7t8Rot8daveSeYzwL1F9vhgm4siyoxw2fwrN2fD5+aHFhWkhhtw4df3XcnLLsa5
nwZq4jjXsYk4NbC8iidVL/Xvg3Aa4T3fGlZstq7gf4eNPZJ1WglKnmYSrWx4KwVX
tGBzp8H/SbX+PhfXf2+wkt12tyDtaGquZXx8qjmdnrtpcc69hwFxFtn8TF2W5Bjg
pg9kjdZ1DXNhFdQs5bdx1X5OrAvpKkMGwjdpjSYzUWpX4L+XhAr81qyLD3mYDJHF
aY4dtnZAZk/xdwna7GWBrNuxCvO1XjQbcRW9Ay7m34qekac0BaDj4ELZgg4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:31 2025 by rpki-client