Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6dde696-e293-4e26-adf6-e94b4320cc42.roa
File:                     f6dde696-e293-4e26-adf6-e94b4320cc42.roa (raw, json)
Hash identifier:          AKVWEKsE9sbbln4fgun0z/nWBZtu6mEejLWpwEJ4sok=
Subject key identifier:   C3:39:FC:FB:78:0E:33:2A:04:AC:23:4B:6D:77:E7:0B:07:73:80:99
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       31C510235B9D24917D8C77D99772BDA4DF4A832D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6dde696-e293-4e26-adf6-e94b4320cc42.roa
Signing time:             Thu 22 Oct 2026 03:07:12 +0000
ROA not before:           Thu 22 Oct 2026 03:07:12 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        54.235.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:10:23:5b:9d:24:91:7d:8c:77:d9:97:72:bd:a4:df:4a:83:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 22 03:07:12 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=9637bc61d6b4d7baa3d8b883464f2693ead4994df09d583bf500b2b7f52fc47d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:b9:15:64:07:11:91:fd:aa:5d:60:35:bb:
                    98:1a:5e:a1:4e:40:0d:d3:fb:19:73:ed:5a:04:2c:
                    1e:68:9c:45:57:b7:8b:f8:c6:38:12:e4:ab:b0:d2:
                    31:a4:65:35:0c:a0:0e:93:90:7d:2f:ff:e4:03:06:
                    78:07:a2:4b:f5:bf:72:93:54:92:77:05:e3:57:c8:
                    86:0e:eb:2e:c6:94:7a:9b:93:43:05:88:de:8f:9e:
                    1f:00:42:6f:7b:9f:aa:e5:82:b1:d5:47:20:42:70:
                    a2:0c:f8:68:e4:e7:a4:bc:8d:e7:ff:8c:ea:20:9c:
                    db:02:ff:a1:c8:d1:1d:48:42:5a:6b:78:1e:be:07:
                    d9:b4:09:ef:dc:b1:8b:14:ca:2a:47:2c:3d:1a:5c:
                    d3:65:15:49:f9:24:17:01:12:85:59:bb:1f:62:35:
                    7c:b3:cf:e6:91:4a:ee:cc:e9:3c:03:e7:29:dd:d8:
                    15:3e:d3:da:92:66:b0:8e:c0:c1:5b:7c:a7:02:16:
                    39:54:c9:17:92:92:40:f0:09:6b:61:bc:51:51:22:
                    5e:d9:69:47:c5:90:d3:22:60:65:65:91:8b:22:83:
                    a4:48:1e:85:a4:ac:58:1c:3b:48:1a:75:94:a0:2e:
                    1d:c9:de:f8:51:b5:08:c7:49:15:ad:0b:e4:94:54:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:FC:FB:78:0E:33:2A:04:AC:23:4B:6D:77:E7:0B:07:73:80:99
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6dde696-e293-4e26-adf6-e94b4320cc42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.235.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:cb:b3:36:6e:d5:ad:da:16:de:db:a1:c6:1c:b2:8b:1a:
         90:4b:d0:d0:14:cf:ef:ca:07:46:40:54:99:de:d6:e7:fb:5a:
         2f:72:15:0a:cd:c5:3e:8f:a8:5c:21:13:b4:aa:4c:05:46:0d:
         b2:f4:28:2e:41:91:a9:03:d2:d6:a3:84:ec:a2:bf:e4:f2:fe:
         12:23:d3:26:b1:a3:d6:ce:e5:3c:5e:d0:32:1d:f1:25:9d:df:
         59:f4:61:7d:37:c0:10:0e:2b:7a:76:dd:a8:2f:44:ee:7a:bd:
         18:b0:63:d0:50:92:3b:f2:8f:36:16:04:bd:b9:e7:b5:76:33:
         28:db:f3:23:9f:fe:43:cd:b2:bb:30:98:e6:1d:c7:d9:2b:a2:
         ff:be:45:77:80:ac:e9:2d:c2:21:f8:72:2d:70:b1:9b:7d:1d:
         fa:3a:1b:86:c5:94:5e:08:21:9e:b1:ad:ca:8b:a2:70:9c:a8:
         e8:1f:cc:eb:a2:9b:35:4f:db:3a:97:9a:30:d5:75:87:0c:e9:
         5d:e7:a4:e5:23:e3:62:c6:37:16:f6:7e:f8:df:d5:e1:dd:37:
         e1:bd:a2:75:4c:02:c4:08:22:96:4f:3c:27:37:ef:9e:0a:6a:
         97:ae:39:c8:d4:7e:20:d6:21:b0:cb:84:2b:23:aa:b5:b2:9c:
         0a:11:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----