Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/489df640-cebb-40ef-a166-e508ac3fb3b6.roa
File:                     489df640-cebb-40ef-a166-e508ac3fb3b6.roa (raw, json)
Hash identifier:          Hi6VuBFj4/YvF6zqvJzmJ9r4yLBLzFi602ZKohV7HNs=
Subject key identifier:   E2:C0:02:55:74:6F:B6:3B:6E:5E:5A:34:B1:72:38:1E:4E:46:FB:0C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       0E7B0AA206B2F0552D2F7F3A208F67C9870AF4A5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/489df640-cebb-40ef-a166-e508ac3fb3b6.roa
Signing time:             Mon 26 Oct 2026 03:11:11 +0000
ROA not before:           Mon 26 Oct 2026 03:11:11 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        3.173.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:0a:a2:06:b2:f0:55:2d:2f:7f:3a:20:8f:67:c9:87:0a:f4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 26 03:11:11 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=a64a634511f6bd726f51d962f2e545b2f0fd62ec19c17a7da18f09c09227cb19, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:96:05:f5:ae:d5:c3:cc:49:e3:ed:20:4c:
                    ab:5d:7d:ae:f7:c1:2f:c2:3e:01:b5:20:23:c4:d0:
                    bf:c3:d4:e1:6a:ba:69:e5:2e:13:e6:76:ce:27:5f:
                    47:05:56:9b:cd:26:a8:0f:62:48:0f:5e:92:28:ab:
                    c9:fc:b2:70:52:38:b1:b9:2e:7d:da:55:ae:d6:c6:
                    fd:7f:cd:68:aa:ce:c7:88:2d:fe:1c:9a:7a:0f:cd:
                    40:d8:7b:dd:88:4c:f4:2e:3b:83:79:db:a7:ec:25:
                    58:cd:4c:1b:e8:38:88:2f:7f:b8:00:1b:79:8b:2d:
                    a4:d8:a4:de:d0:03:2a:2b:d5:d5:89:98:4d:fe:bc:
                    7c:2f:03:33:4f:29:d0:48:e1:77:cf:d7:f0:e3:d8:
                    56:73:8b:e5:40:6b:46:3a:6b:76:93:22:2c:62:3d:
                    87:a7:f0:a7:bb:42:f4:0d:06:c3:21:aa:d7:5e:7d:
                    a2:9e:df:0e:42:1b:ed:a5:69:9c:0b:22:25:3d:55:
                    38:a6:62:e3:b9:ce:fa:52:cd:32:0b:6b:22:b7:25:
                    e0:7d:15:77:48:23:ec:5a:49:02:ae:ac:06:32:db:
                    c5:eb:62:a8:3d:9f:f3:d6:29:a4:f7:9b:3c:38:75:
                    cf:f8:c1:5a:7c:fc:93:a7:1f:1d:84:30:13:41:e1:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:02:55:74:6F:B6:3B:6E:5E:5A:34:B1:72:38:1E:4E:46:FB:0C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/489df640-cebb-40ef-a166-e508ac3fb3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.173.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:5d:6c:d7:4b:66:20:46:5e:6b:9a:04:fb:1a:ad:ab:04:
         64:37:92:fd:4f:dd:c2:3f:40:3f:1d:4c:d0:83:9d:f0:f8:76:
         ba:b4:1f:f7:da:70:5c:97:0c:59:57:de:34:30:58:8b:b7:20:
         2b:ca:62:c7:7e:fa:3d:f2:6c:de:aa:14:73:e1:dc:0f:3e:01:
         a6:96:e0:f0:9f:fc:29:2b:e0:e3:cc:de:fa:d7:35:61:36:87:
         0a:da:a1:9a:8c:f5:5f:c8:4d:fd:48:e1:e7:41:fa:10:6f:d7:
         57:c3:86:04:0a:f9:28:c0:24:b2:ac:93:3f:7f:32:fc:17:41:
         d2:e3:9f:d6:ea:9f:e7:00:2b:33:44:7a:ad:99:d6:d7:05:ac:
         37:1a:d5:54:a2:f3:ac:1c:9b:f4:f1:d2:a6:1f:80:76:17:53:
         a2:22:51:1b:6e:59:98:ef:39:0a:ed:2b:44:0c:c9:9b:42:11:
         29:c9:47:7e:4c:68:91:4c:4c:1f:37:ba:89:b9:18:6c:09:a1:
         3d:09:3b:8e:b0:a9:f9:8d:e7:28:c7:b0:39:be:7d:58:20:8c:
         22:a9:16:3e:ed:2d:55:e2:c5:51:8e:43:98:bd:d0:4a:ac:d2:
         21:46:89:f3:34:1d:b6:8b:66:01:b4:0c:fe:dc:93:5f:b0:aa:
         cd:f5:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----