Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa
File:                     3541ea2c-784f-4cbe-b441-92b652e155de.roa (raw, json)
Hash identifier:          h61lHegHsPn2oFZD4c5+1rJPmOjuztew8Gi+hkzsECI=
Subject key identifier:   F8:8E:2C:9E:CA:DB:B1:91:B5:D3:9E:9E:E8:D7:AC:4A:6F:7E:7B:7C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       05F9E3225D77E0FF554E01EB2AE300B2DF17E00A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa
Signing time:             Wed 21 Oct 2026 00:21:20 +0000
ROA not before:           Wed 21 Oct 2026 00:21:20 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.144.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:e3:22:5d:77:e0:ff:55:4e:01:eb:2a:e3:00:b2:df:17:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 21 00:21:20 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=b71fd4adcfecd5c8ed5bc97f8f9fe75e9ef882fd8300409c541642717f699695, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:1c:df:5b:5f:6d:f2:71:62:6a:3c:20:f0:
                    83:bd:68:95:9c:cc:67:af:a2:a3:bc:3d:f5:3f:ea:
                    14:58:4a:c1:9d:c5:c6:b8:40:32:e6:15:99:a3:7e:
                    e5:63:3b:99:0f:24:83:1d:c1:59:50:7f:03:97:9f:
                    80:f6:f2:42:ee:93:f6:a2:a4:63:f4:dc:77:6f:33:
                    d8:b7:51:a1:25:49:57:5e:76:7f:7c:7c:fc:cd:43:
                    5d:ad:e7:e1:8a:e4:1a:83:54:b5:39:fd:41:1c:79:
                    fe:7e:5d:13:16:db:c9:d0:1a:35:3a:7f:40:cc:eb:
                    39:a9:e9:eb:9c:de:7c:27:89:89:f6:11:08:a6:3c:
                    fd:9d:c3:be:b7:68:36:48:08:17:7f:12:92:b8:31:
                    52:da:33:b8:55:eb:17:b6:df:a5:75:7b:48:14:09:
                    1a:b6:42:74:a0:c9:ac:b9:1b:cc:bc:64:30:d8:71:
                    a4:fc:bb:42:a4:be:a0:68:59:35:28:7d:dd:99:17:
                    e2:56:b0:53:d1:50:a6:48:f4:83:0a:55:d2:5b:e2:
                    f4:ba:75:40:5e:c8:e4:aa:93:95:3f:c0:46:c7:fd:
                    7a:01:c8:28:e6:89:b9:86:6d:6e:84:35:cb:0d:15:
                    4a:43:c7:3f:ea:e3:28:ec:96:83:03:c2:13:6e:a4:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8E:2C:9E:CA:DB:B1:91:B5:D3:9E:9E:E8:D7:AC:4A:6F:7E:7B:7C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3541ea2c-784f-4cbe-b441-92b652e155de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.144.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:c1:d9:2e:cd:d6:0c:23:f5:10:42:50:fa:ac:21:bb:bb:
         6f:15:0e:a9:68:6f:a4:fe:79:af:6c:47:e1:01:7b:f5:bf:52:
         e3:c6:cf:d6:46:18:01:16:1d:6a:f9:12:58:06:ac:53:ad:2c:
         dd:c2:d6:d0:3f:12:e1:2c:81:b7:f6:82:df:45:de:bd:5b:85:
         e5:c1:c5:2b:3f:35:74:bf:01:a5:01:31:59:af:1c:d8:e2:be:
         05:45:82:18:1d:86:c9:79:3d:94:c1:a3:b2:7b:bb:b1:d1:7a:
         5c:32:e8:4e:81:83:dd:f7:2e:7b:10:22:5e:c0:45:b8:d0:b9:
         7c:a3:d8:5c:a9:00:e5:c5:32:45:b9:39:59:14:45:19:13:07:
         8c:9a:3b:37:84:0d:08:99:88:60:70:dd:42:8a:bc:9e:b6:3e:
         67:1e:4b:dc:7e:86:1c:9f:41:7e:31:60:c3:7e:3a:bd:40:46:
         03:91:08:dc:fb:67:f2:a0:c4:57:b0:48:2f:ef:f1:c4:4a:97:
         61:4f:f5:1d:7b:38:3d:9c:c5:2f:bf:ea:dd:e9:3b:34:a4:98:
         c2:76:15:14:d0:39:1b:78:0c:f7:11:06:7b:74:7f:c6:08:6a:
         cc:48:6f:2f:30:17:5c:d6:38:79:ee:f9:e4:6a:06:8c:41:93:
         55:32:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----