Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa
File:                     c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa (raw, json)
Hash identifier:          Mcr9ihrlWOh9wu7QFyGuM2RwNEP0b6AezTmXg954uew=
Subject key identifier:   75:4C:FF:FB:5B:2C:E2:3B:F3:51:4E:8F:72:62:5F:D3:80:B9:FB:F3
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3C2355017B0A94E563E7862230B22BECA0D54535
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa
Signing time:             Sat 24 Oct 2026 01:10:06 +0000
ROA not before:           Sat 24 Oct 2026 01:10:06 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:23:55:01:7b:0a:94:e5:63:e7:86:22:30:b2:2b:ec:a0:d5:45:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 24 01:10:06 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=6e07ae1235ede6f45ebf1faa97cdac47e927d2a02a6be035608fa6117a772cde, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:02:e0:c5:cd:8a:a5:df:8e:20:4a:04:f4:
                    05:91:65:a9:8d:3d:c7:12:97:32:a6:d2:a3:b1:f6:
                    e1:98:c8:80:c4:ff:03:d7:35:f2:1b:49:08:82:52:
                    98:5c:a7:47:f0:5d:60:1b:b9:b6:db:ae:b0:a3:6b:
                    55:13:51:fa:ed:27:45:e0:ea:95:1e:a0:f4:43:f2:
                    c7:a9:de:ec:78:5f:9a:61:50:14:7f:11:6c:b6:7d:
                    14:2e:24:dc:ba:4e:85:0f:3a:7a:99:d5:7c:00:50:
                    c1:86:0c:f4:2e:6a:fa:15:ce:76:e8:ec:39:a4:c9:
                    e1:9d:86:09:94:83:5f:8c:e5:27:4a:87:82:af:4d:
                    75:d1:a9:f6:c4:1d:e6:37:a0:82:e5:d5:35:d9:4e:
                    d3:11:49:78:a1:f2:87:41:9d:0a:d0:16:ca:f6:0c:
                    ab:92:08:f5:8d:e7:00:c0:92:b1:59:7b:31:d2:5d:
                    ce:63:6c:7e:52:51:8a:88:09:ff:55:69:3e:a2:bf:
                    df:76:d0:7a:dc:de:c8:47:bd:0a:34:bf:5d:42:3f:
                    72:33:9a:6a:0b:e5:0f:2f:91:a1:e4:9d:5b:7b:b0:
                    bb:6a:40:39:18:cb:ee:04:54:ed:4c:c3:94:af:46:
                    3b:76:77:86:63:d2:de:05:85:4a:4b:a3:78:de:5d:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:FF:FB:5B:2C:E2:3B:F3:51:4E:8F:72:62:5F:D3:80:B9:FB:F3
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:39:90:ed:4f:f5:f2:61:28:02:e3:05:10:49:2d:2d:8e:d4:
         c7:05:d5:a8:ab:60:b7:3b:b9:a9:92:3d:21:d4:fb:40:54:3f:
         0a:46:8a:42:77:f4:bd:f3:8d:67:dc:e8:7a:bf:30:12:80:dc:
         de:69:e0:d3:c1:fe:c6:3d:38:4c:59:d5:86:8e:f4:8f:cd:92:
         81:d1:41:88:fe:3b:27:ef:6a:4c:1a:d8:e5:89:f3:6b:38:b8:
         1f:dc:81:2d:d9:39:dd:d3:03:ad:42:2a:15:0d:1b:f4:29:06:
         b5:c0:72:c9:a7:97:74:49:3c:4a:a3:16:79:03:be:74:95:7a:
         fa:c7:f8:76:2f:b7:26:cb:68:7c:ca:f7:3f:12:be:ea:2f:14:
         05:aa:1b:aa:c5:5a:81:07:b3:01:f2:bd:12:dd:77:ac:4c:fc:
         a3:77:d8:07:73:fc:07:fd:59:81:cc:3b:33:3f:70:85:be:04:
         f0:80:06:1c:2c:94:b5:e2:50:91:41:ed:78:9f:bf:b0:46:bf:
         ab:09:0d:66:e7:22:23:e3:27:87:83:73:6e:8c:d8:72:52:07:
         7f:65:83:8b:93:5b:6b:d5:fc:98:30:5d:ae:6b:66:a6:35:8d:
         65:c2:de:52:ac:e2:f2:98:9a:29:74:cb:df:3f:6c:5c:57:85:
         9a:56:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----