Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea8bad4c-7190-4416-93e2-28898f483a2c.roa
File:                     ea8bad4c-7190-4416-93e2-28898f483a2c.roa (raw, json)
Hash identifier:          GtydWXHdtYudVp5MzJONCaJkzeOhhcqFgpYSMfjHumQ=
Subject key identifier:   D7:85:7E:B9:EC:03:39:41:FB:C0:F8:13:42:40:FF:59:74:66:68:41
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       737DD5CB32C5DEF51FA9B5B7B0FE018346D082D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea8bad4c-7190-4416-93e2-28898f483a2c.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.213.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:d5:cb:32:c5:de:f5:1f:a9:b5:b7:b0:fe:01:83:46:d0:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:fd:4d:72:94:a4:9c:92:16:4b:0b:cf:63:
                    20:c1:ed:bf:1a:11:3e:19:6e:b3:65:1f:cb:c9:e2:
                    99:f1:d7:03:44:fa:24:a7:f5:77:31:93:22:37:b1:
                    e6:09:da:9b:85:6f:d0:dc:3e:b8:89:3b:41:3c:80:
                    91:24:9d:78:59:e8:cd:42:4e:58:fd:b3:6d:76:07:
                    f7:0c:3b:aa:fe:6b:d0:eb:b5:10:82:75:ac:2f:c8:
                    e1:0b:aa:e9:e9:70:13:72:92:96:dd:25:b4:2f:89:
                    29:07:a6:7e:41:0b:0d:aa:ac:6a:4a:f9:29:a4:97:
                    dc:4f:aa:3b:35:2f:e6:9f:24:a8:c2:e5:3c:e7:93:
                    e4:c5:27:bf:a9:59:7e:27:24:45:ce:5b:1d:af:ec:
                    fe:fa:f1:0e:f0:44:3e:3c:12:6c:6a:3e:50:49:a6:
                    66:c6:e3:6a:be:1c:e2:02:99:63:01:20:35:c0:08:
                    27:8a:f6:48:b6:1a:a4:60:53:1a:9a:68:0d:a2:d7:
                    ed:7c:41:46:76:f7:7c:ef:8c:e0:3f:a4:54:07:3f:
                    bf:d1:3d:05:93:4d:a8:1d:82:56:45:82:25:d2:ac:
                    9d:94:8b:68:f0:5e:52:4c:f1:73:bf:91:48:db:ae:
                    3f:73:a0:98:6f:24:60:45:a3:bc:94:30:80:a0:de:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:85:7E:B9:EC:03:39:41:FB:C0:F8:13:42:40:FF:59:74:66:68:41
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea8bad4c-7190-4416-93e2-28898f483a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:09:8f:db:fc:aa:e0:f4:55:c0:2c:f3:04:bf:6a:20:2a:
         8b:c7:05:a2:38:82:bd:20:db:00:1c:4a:3e:7b:0a:d8:02:57:
         32:48:fc:6d:7f:38:32:cc:4e:74:fc:b6:1e:c4:a4:3d:6a:71:
         4b:bf:82:5f:aa:16:5d:f5:3e:9b:b6:a9:b6:92:76:ec:4e:d8:
         f7:84:6e:f9:b5:6a:e9:eb:a7:f8:a7:62:b4:f6:68:ba:eb:33:
         81:cc:26:27:50:e8:5b:bb:db:9b:46:80:e0:e4:8e:9e:15:3b:
         bd:fe:0f:78:20:5d:2b:95:79:fa:11:f3:9c:75:0a:64:76:d3:
         bc:a7:9a:be:2a:cd:21:6f:16:07:3e:09:a5:29:9b:d7:e0:b9:
         5c:20:0e:07:1e:da:79:50:97:35:55:60:eb:33:80:ff:41:1d:
         76:d4:ba:7c:7d:f0:57:76:3d:78:f1:e7:6c:61:a0:21:36:ce:
         60:72:72:52:93:10:05:3a:10:29:d5:30:c9:63:65:0a:eb:b1:
         82:c8:fc:1e:b8:cb:64:bd:2e:bb:ca:40:43:25:41:f4:d1:f6:
         9b:f0:d9:84:26:6c:84:c8:a0:78:f7:5b:c7:e2:3f:4d:3d:78:
         b5:5a:47:bc:f0:a2:65:d7:df:94:56:93:b2:2a:ba:06:af:1f:
         2d:79:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----