Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/329e0f36-5ef9-4650-8899-cd6fa8c93327.roa
File:                     329e0f36-5ef9-4650-8899-cd6fa8c93327.roa (raw, json)
Hash identifier:          mSrfmdLcJNZc7RaGVr5PbG7XiMbzk8dhviBK5ArTSNU=
Subject key identifier:   8A:8F:C7:F6:44:BA:3C:45:41:F5:43:AA:D7:51:D9:29:46:A2:3B:14
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       380B938829B890C5AB792E605A374F4767617C81
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/329e0f36-5ef9-4650-8899-cd6fa8c93327.roa
Signing time:             Mon 25 Nov 2024 00:00:00 +0000
ROA not before:           Mon 25 Nov 2024 00:00:00 +0000
ROA not after:            Mon 30 Dec 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        160.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:93:88:29:b8:90:c5:ab:79:2e:60:5a:37:4f:47:67:61:7c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Nov 25 00:00:00 2024 GMT
            Not After : Dec 30 23:59:59 2024 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:da:7b:24:ba:06:7a:ef:f8:06:03:f4:99:
                    74:56:96:78:5e:fc:10:54:1a:53:2f:69:fd:d0:ec:
                    82:bf:a1:75:2b:5e:f1:fc:06:e4:aa:a3:e9:eb:c6:
                    e7:a4:4d:d1:03:1e:a2:e8:7f:16:01:2d:2c:f8:0a:
                    b5:5c:6e:1d:69:b5:40:85:80:54:4e:96:97:9a:26:
                    85:22:9a:5e:43:87:5f:9e:40:99:06:0b:ed:1b:81:
                    93:d1:5f:19:f5:8b:97:cb:72:f9:b7:4c:1a:78:c1:
                    10:b8:21:c6:8b:88:20:b5:fc:05:16:2d:e4:c9:03:
                    c0:55:5b:1d:31:38:34:d4:05:3f:9b:85:67:23:c0:
                    96:fb:d3:0b:b4:20:de:23:7f:38:0e:62:2a:14:2d:
                    4f:b8:0e:29:66:dc:ca:39:0e:35:4c:d0:b2:85:cf:
                    ab:98:3c:73:d9:a8:b6:a9:b6:74:ca:f6:f4:5d:dc:
                    ef:38:d4:69:66:be:71:a9:8c:e2:42:4c:02:be:5e:
                    47:f6:84:77:1c:0e:6a:74:f4:dc:57:00:3e:75:0b:
                    d7:45:f6:c8:39:30:51:88:98:c7:51:d4:63:59:4d:
                    ba:af:27:a6:9b:97:80:42:c8:a4:df:63:f1:28:5e:
                    49:06:68:77:7a:30:6f:0f:af:39:24:82:2a:f1:85:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8F:C7:F6:44:BA:3C:45:41:F5:43:AA:D7:51:D9:29:46:A2:3B:14
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/329e0f36-5ef9-4650-8899-cd6fa8c93327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:aa:04:0c:8b:60:45:32:1a:1d:fb:19:49:bb:5b:0d:30:
         e8:86:41:70:0e:47:a5:73:65:2f:8d:24:61:8d:15:6e:4b:05:
         32:9b:a4:de:72:b9:51:10:37:95:26:48:01:c2:bf:bc:0b:b4:
         74:37:6c:f0:5b:0d:65:be:2b:eb:87:21:e9:80:b8:bc:cd:16:
         11:a9:f2:95:30:da:1c:33:2c:c8:80:25:30:36:b5:8a:33:00:
         cc:63:71:67:4a:34:d6:d3:48:1d:d3:8b:60:10:0a:f0:e9:87:
         0d:c1:97:dc:58:97:28:00:6d:90:d7:0c:a6:69:54:e2:6e:92:
         de:ac:21:d1:d1:23:df:ee:c0:ca:6f:d1:02:76:8e:ef:cc:d0:
         77:1f:10:3a:14:07:b0:49:f7:8c:8e:2b:2e:ff:6c:16:fd:bb:
         a6:96:03:a0:29:43:19:55:d4:ae:1b:2d:62:86:32:3e:44:cc:
         a3:1a:75:f2:4b:d7:eb:51:af:50:3e:94:57:24:1c:1c:2c:76:
         fa:57:6c:8c:8c:7a:41:9f:27:b1:5f:a5:51:ac:fc:54:50:65:
         cb:54:95:f4:6f:a7:00:90:42:4c:37:73:4c:ca:d0:56:96:6f:
         5c:df:79:12:e1:c9:ee:f2:76:48:ba:db:22:30:96:25:02:e6:
         fb:07:56:12
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOAuTiCm4kMWreS5gWjdPR2dhfIEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjQxMTI1MDAwMDAwWhcNMjQxMjMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMjJlMzE2ZTQxNmM0M2I2ZDY2NDE0NmY0Zjk1ZTI2NTU2
NTQ3OWNiYmNkYzc5N2E4OGIwOWRhZTg2YTQ0MTdkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsvtp7JLoGeu/4BgP0mXRWlnhe/BBUGlMvaf3Q7IK/oXUr
XvH8BuSqo+nrxuekTdEDHqLofxYBLSz4CrVcbh1ptUCFgFROlpeaJoUiml5Dh1+e
QJkGC+0bgZPRXxn1i5fLcvm3TBp4wRC4IcaLiCC1/AUWLeTJA8BVWx0xODTUBT+b
hWcjwJb70wu0IN4jfzgOYioULU+4Dilm3Mo5DjVM0LKFz6uYPHPZqLaptnTK9vRd
3O841GlmvnGpjOJCTAK+Xkf2hHccDmp09NxXAD51C9dF9sg5MFGImMdR1GNZTbqv
J6abl4BCyKTfY/EoXkkGaHd6MG8PrzkkgirxhaVDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUio/H9kS6PEVB9UOq11HZKUaiOxQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzMyOWUwZjM2LTVlZjktNDY1MC04ODk5LWNkNmZhOGM5MzMyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCgATANBgkqhkiG9w0BAQsFAAOCAQEALQ+qBAyLYEUyGh37GUm7Ww0w6IZB
cA5HpXNlL40kYY0VbksFMpuk3nK5URA3lSZIAcK/vAu0dDds8FsNZb4r64ch6YC4
vM0WEanylTDaHDMsyIAlMDa1ijMAzGNxZ0o01tNIHdOLYBAK8OmHDcGX3FiXKABt
kNcMpmlU4m6S3qwh0dEj3+7Aym/RAnaO78zQdx8QOhQHsEn3jI4rLv9sFv27ppYD
oClDGVXUrhstYoYyPkTMoxp18kvX61GvUD6UVyQcHCx2+ldsjIx6QZ8nsV+lUaz8
VFBly1SV9G+nAJBCTDdzTMrQVpZvXN95EuHJ7vJ2SLrbIjCWJQLm+wdWEg==
-----END CERTIFICATE-----