Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97d013cd-c9ae-4b22-a511-7b671f0d037b.roa
File:                     97d013cd-c9ae-4b22-a511-7b671f0d037b.roa (raw, json)
Hash identifier:          cf/uZYgbEODFz2fEoD0OfcA3OG0nrXsmKHG/dI5xHPA=
Subject key identifier:   6B:AF:45:90:12:82:D0:8D:CD:5D:12:EC:22:99:C0:88:0B:88:91:9C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       84910DB25C4E803B5A413693963B757FDE3744
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97d013cd-c9ae-4b22-a511-7b671f0d037b.roa
Signing time:             Thu 22 Oct 2026 02:40:29 +0000
ROA not before:           Thu 22 Oct 2026 02:40:29 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.247.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            84:91:0d:b2:5c:4e:80:3b:5a:41:36:93:96:3b:75:7f:de:37:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 02:40:29 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=81a455fdbef74143c923e2cc8de320e2f7b70fa9d0b88870a20d4367923fce36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:81:cb:08:46:85:23:55:ee:02:f7:bd:5a:
                    b9:08:99:81:92:f1:8e:87:d5:f6:d9:1e:4a:fc:8e:
                    d8:e1:34:0c:0c:76:4c:f8:48:24:26:6c:2e:85:fd:
                    45:2f:19:24:3c:52:ad:34:22:48:6b:1e:f6:b6:23:
                    95:1e:c2:4b:e6:da:e0:02:12:0f:a0:58:2b:db:8d:
                    80:c6:46:af:f9:cb:86:5b:99:b2:a8:68:0a:f9:e8:
                    45:8a:67:d9:ee:15:fd:db:70:3e:44:1b:e8:51:7c:
                    91:36:5c:ed:d7:3a:cb:06:05:df:f7:4c:7a:f7:59:
                    e4:95:cf:f1:dd:c8:c5:46:2e:48:f5:14:48:a2:17:
                    08:ec:32:38:b6:63:f6:b4:f7:7c:61:e7:5c:30:ff:
                    17:5e:5d:a3:83:d2:a2:5c:4b:13:ee:be:99:1c:77:
                    7d:5a:8d:a2:81:6f:0f:83:4e:ea:df:5e:fd:fc:4c:
                    7d:49:3e:bb:07:bf:ee:41:6f:fe:c9:9d:9a:99:34:
                    73:21:d4:5b:c7:ae:00:a6:03:11:c2:83:3b:83:54:
                    fe:85:f4:f1:75:93:9c:44:74:82:18:28:5d:88:fd:
                    7e:f9:c2:c9:01:19:26:7c:75:31:88:77:c9:f7:21:
                    64:6e:22:ba:9b:16:16:2a:49:4d:a0:01:99:ce:b9:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:45:90:12:82:D0:8D:CD:5D:12:EC:22:99:C0:88:0B:88:91:9C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97d013cd-c9ae-4b22-a511-7b671f0d037b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.247.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:97:65:61:2b:c6:ae:01:a0:c3:0f:24:78:4a:b9:e2:5a:8b:
         07:cc:2e:bc:76:d6:7c:8c:5b:ef:b3:7a:e5:91:1a:4c:3a:1e:
         81:fd:7b:26:5b:7d:5f:9d:78:15:c9:f3:76:1b:54:7e:5b:4a:
         8e:ae:57:f2:0d:f2:9a:bd:2b:06:b9:c2:40:48:83:df:0c:0a:
         09:45:62:f5:6e:1a:bb:fe:20:45:39:49:3b:88:1a:ec:1a:57:
         07:bb:f3:ea:1d:a3:d8:87:e5:9e:bf:53:5d:98:19:9a:63:3c:
         56:78:bb:04:db:6c:0c:c6:a1:92:81:ac:2a:ff:d4:a7:9f:f7:
         3c:82:32:d7:1b:4c:fa:f7:03:b2:70:b2:1f:3c:0a:c8:e5:6b:
         dc:ef:3b:41:92:25:9b:a3:00:93:bf:b2:77:dc:0e:52:49:e4:
         80:26:6f:9d:76:6c:72:ce:fb:02:96:0d:23:25:d2:86:e7:cb:
         f4:7d:1b:9e:bb:14:70:08:78:22:53:d6:b6:e6:d8:3e:bc:29:
         0b:ce:12:d2:14:c7:89:99:cf:0f:e1:f1:9d:f9:ac:be:96:32:
         8f:1b:46:6f:d7:db:35:49:9d:17:b7:bf:5d:fb:25:09:08:55:
         8a:4f:07:b8:9b:18:ea:43:02:e1:53:f6:9d:e0:43:62:60:88:
         8c:9e:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----