Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd78b48-3d9f-421f-8768-40ef605e64fa.roa
File:                     9fd78b48-3d9f-421f-8768-40ef605e64fa.roa (raw, json)
Hash identifier:          82DPsIOfQjJNg5D7m1GwnUH5zhyxuTy6XfABiG/mhDo=
Subject key identifier:   FC:BC:9B:BC:9F:6D:33:22:0B:EC:DD:A2:8D:ED:8E:B8:B1:CB:47:AD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7BD94408BC2212F2D62DD53F0271ED68D00BA1F9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd78b48-3d9f-421f-8768-40ef605e64fa.roa
Signing time:             Fri 07 Mar 2025 00:21:33 +0000
ROA not before:           Fri 07 Mar 2025 00:21:33 +0000
ROA not after:            Fri 11 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.103.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:44:08:bc:22:12:f2:d6:2d:d5:3f:02:71:ed:68:d0:0b:a1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar  7 00:21:33 2025 GMT
            Not After : Apr 11 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:00:b3:07:a5:7b:8f:77:5b:47:8a:7c:66:
                    0d:78:29:03:87:07:be:6c:00:78:29:3c:ef:14:09:
                    26:bc:6f:25:4f:50:48:ba:2e:bf:eb:ca:bd:5f:84:
                    f2:fb:0d:84:ac:c2:fd:82:ab:5a:54:5b:a1:86:e2:
                    b7:58:95:bd:aa:fe:af:fc:aa:e2:2e:fe:9c:dd:fe:
                    01:a4:2d:0c:49:67:12:d5:f5:2b:a3:e0:0d:05:84:
                    b0:63:e6:a2:75:b8:ec:a1:cf:64:28:91:fa:12:05:
                    df:a9:de:3a:5e:bf:76:c0:ea:3a:5d:0e:f0:8f:0d:
                    56:8d:66:b6:75:4c:10:f5:e2:9b:66:d2:64:8b:5d:
                    27:6c:66:2f:b0:90:72:a9:bb:eb:30:72:88:0f:e8:
                    6d:22:88:3a:00:6b:55:71:23:11:56:97:c2:d8:73:
                    52:07:59:9f:5f:c7:d9:16:fb:d1:b7:29:65:2d:67:
                    24:fe:33:b5:df:e7:e7:1c:25:6b:6e:17:b0:c7:83:
                    d3:a8:41:44:5f:a4:29:19:c3:95:76:98:db:be:e8:
                    f7:80:9d:f5:be:3c:9b:c2:0a:b3:59:01:8c:62:46:
                    70:a3:f1:34:3d:21:ef:de:4a:1c:32:78:97:83:76:
                    88:30:35:04:e1:2f:f3:80:5c:d0:44:da:1d:46:76:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:9B:BC:9F:6D:33:22:0B:EC:DD:A2:8D:ED:8E:B8:B1:CB:47:AD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fd78b48-3d9f-421f-8768-40ef605e64fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:a2:86:0b:fc:14:c5:f9:7c:f1:c8:fb:77:4f:fe:84:b2:
         55:1a:b6:fa:e2:1c:d0:fd:c2:1d:39:03:4c:3c:1e:de:ec:31:
         65:fc:6d:e1:2b:b6:47:d3:eb:ea:47:4f:63:49:0a:dd:08:60:
         95:80:1f:fd:b1:c5:6e:98:93:ac:46:f6:59:9c:28:36:d5:8a:
         27:fe:5a:ec:4e:77:e5:a3:4c:73:c4:e3:c9:04:72:34:44:9a:
         a5:ff:9d:41:81:f2:60:d4:b3:78:c0:4f:dd:35:5b:a1:20:ac:
         52:74:59:6c:ca:f6:d9:b6:38:62:9b:af:90:92:9f:2e:f6:1f:
         7d:f7:56:f8:26:0c:ac:14:6d:18:27:e2:29:c1:5b:64:73:a2:
         9f:2b:55:7f:c5:75:5f:43:18:86:46:42:15:9b:89:0a:04:92:
         17:52:f1:8f:84:20:bb:7e:b8:3a:e3:32:4f:7d:92:53:a5:dc:
         34:4f:84:dc:dd:69:50:59:c1:2c:67:00:c4:4c:f9:2c:0d:45:
         af:8d:dd:ac:9b:7e:57:d2:98:a6:2d:92:a0:2c:e6:02:9e:84:
         79:4d:cc:0a:89:6a:78:9f:d0:12:e8:c0:94:50:5d:8a:3a:6b:
         8d:2e:d2:3e:81:c6:8b:a9:e1:31:d7:aa:04:f2:6c:d5:91:a3:
         88:8b:a9:10
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUe9lECLwiEvLWLdU/AnHtaNALofkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzA3MDAyMTMzWhcNMjUwNDExMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTY5MWE2ODZhYmY5OGU2MzMzZDdlZDg0MjI1Yjg4Njg5
YzhlYzYzMTdlMTJiZmU2NmI0Nzg2NWU1ZWNkNjc3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmVgCzB6V7j3dbR4p8Zg14KQOHB75sAHgpPO8UCSa8byVP
UEi6Lr/ryr1fhPL7DYSswv2Cq1pUW6GG4rdYlb2q/q/8quIu/pzd/gGkLQxJZxLV
9Suj4A0FhLBj5qJ1uOyhz2QokfoSBd+p3jpev3bA6jpdDvCPDVaNZrZ1TBD14ptm
0mSLXSdsZi+wkHKpu+swcogP6G0iiDoAa1VxIxFWl8LYc1IHWZ9fx9kW+9G3KWUt
ZyT+M7Xf5+ccJWtuF7DHg9OoQURfpCkZw5V2mNu+6PeAnfW+PJvCCrNZAYxiRnCj
8TQ9Ie/eShwyeJeDdogwNQThL/OAXNBE2h1GdvMZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU/LybvJ9tMyIL7N2ije2OuLHLR60wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlmZDc4YjQ4LTNkOWYtNDIxZi04NzY4LTQwZWY2MDVlNjRmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASZzANBgkqhkiG9w0BAQsFAAOCAQEAsJWihgv8FMX5fPHI+3dP/oSyVRq2
+uIc0P3CHTkDTDwe3uwxZfxt4Su2R9Pr6kdPY0kK3QhglYAf/bHFbpiTrEb2WZwo
NtWKJ/5a7E535aNMc8TjyQRyNESapf+dQYHyYNSzeMBP3TVboSCsUnRZbMr22bY4
YpuvkJKfLvYfffdW+CYMrBRtGCfiKcFbZHOinytVf8V1X0MYhkZCFZuJCgSSF1Lx
j4Qgu364OuMyT32SU6XcNE+E3N1pUFnBLGcAxEz5LA1Fr43drJt+V9KYpi2SoCzm
Ap6EeU3MColqeJ/QEujAlFBdijprjS7SPoHGi6nhMdeqBPJs1ZGjiIupEA==
-----END CERTIFICATE-----