Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa
File:                     d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa (raw, json)
Hash identifier:          Hk/sELKLaFwYrR0+jg4tABfvldxMPXZU1/GA1UX3EgA=
Subject key identifier:   07:FA:3B:E5:5C:D3:30:7D:29:E6:F8:E0:7F:99:07:4E:EA:49:96:DB
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       09703CEBC93AD321BADD7B36BED660C6A1D2F40A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa
Signing time:             Sat 15 Mar 2025 00:50:36 +0000
ROA not before:           Sat 15 Mar 2025 00:50:36 +0000
ROA not after:            Sat 19 Apr 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        18.96.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:3c:eb:c9:3a:d3:21:ba:dd:7b:36:be:d6:60:c6:a1:d2:f4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Mar 15 00:50:36 2025 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:f6:c3:e0:da:2b:10:6a:21:9c:9f:a7:a7:
                    75:86:7e:3c:c3:9f:ec:ec:01:37:78:64:de:46:1d:
                    12:2d:3e:e5:8b:65:82:c7:94:b6:66:5a:d3:a3:aa:
                    f8:9d:ba:a7:ee:8e:54:6c:a7:9c:68:f8:9e:68:03:
                    fd:c5:26:b6:84:d0:75:5d:ac:e0:c9:0b:0d:93:25:
                    e1:49:e0:6d:4e:41:88:22:ba:fc:db:c1:e9:a9:0d:
                    28:e2:0d:24:59:13:11:03:1e:02:8e:52:ce:46:b2:
                    59:00:df:63:9a:06:bb:f7:28:cc:d2:8f:35:15:2d:
                    a1:0d:13:23:5d:db:fe:53:8f:df:ca:3c:3c:c0:00:
                    b0:5d:0f:8c:97:58:f0:ce:3e:4f:02:c9:f5:ff:24:
                    25:41:e7:25:a4:fb:9d:63:a8:57:2e:91:ec:4a:5f:
                    2b:e5:ec:05:b4:96:5d:c3:36:34:07:a3:b8:3e:28:
                    31:45:9c:03:8e:56:2a:bb:1e:a4:b4:08:ae:67:17:
                    b0:00:63:81:01:41:a2:8b:b5:e8:07:eb:e6:23:96:
                    94:8f:62:20:f5:19:ce:0d:cf:ec:e2:dd:6d:fc:c6:
                    2f:b4:49:f9:3d:ba:c5:91:ae:5d:63:12:51:4f:4a:
                    a5:c9:13:e8:0b:bd:48:d6:2b:71:ca:9b:04:c9:80:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:3B:E5:5C:D3:30:7D:29:E6:F8:E0:7F:99:07:4E:EA:49:96:DB
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:3a:dd:df:73:87:63:5e:fc:80:85:d8:c6:9b:78:d6:18:
         30:f6:3e:49:8a:06:0e:03:4d:d7:b3:9f:43:cf:17:db:b5:4a:
         d5:4e:a6:58:ef:9d:03:6c:11:44:ea:ed:5b:2b:fa:b0:f2:fe:
         17:be:d5:aa:f0:76:d2:5f:14:64:fa:a7:ca:3f:21:29:e8:4f:
         60:fc:aa:44:22:f6:1f:60:1f:6f:32:07:f5:df:7d:27:a0:42:
         aa:94:ae:7f:d8:8f:88:98:cc:6f:3f:98:b5:37:08:0a:e0:34:
         cb:eb:ad:e1:1f:12:0d:b6:01:2b:3d:48:d6:6c:21:51:90:1c:
         d0:66:c1:b9:1c:42:7e:65:7e:51:ea:0f:fc:d6:1e:ed:cb:7a:
         8c:99:a8:cd:7c:76:bb:f6:2a:e3:e4:21:18:55:28:c9:cf:76:
         43:85:5a:ee:1d:36:6c:b6:ad:dc:3c:6e:22:2a:d5:dc:a6:06:
         f1:a8:89:5d:67:4f:86:9b:a1:f1:55:2f:98:5e:cf:95:e3:53:
         19:72:61:d8:b4:72:30:90:14:66:cf:bd:0c:5d:8e:ad:53:23:
         72:f8:15:34:54:30:cb:ca:6f:bc:ed:41:59:1b:9e:7c:51:95:
         bd:73:bd:28:39:c6:9f:0e:d8:9c:01:9e:6c:e8:b4:1b:c1:dc:
         68:45:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----