Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/032687b9-14e2-4c28-9c6f-9897cc0152d1.roa
File:                     032687b9-14e2-4c28-9c6f-9897cc0152d1.roa (raw, json)
Hash identifier:          btfIRWAOMw9+eRoc8Ubw6jApS3bafdYYtpOeLgCsqiA=
Subject key identifier:   55:74:C9:D2:DF:BF:9D:22:80:5F:6B:4E:2D:14:96:2E:8F:16:79:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BBABA029A07D7856D1D5B56F06112D50F0869B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/032687b9-14e2-4c28-9c6f-9897cc0152d1.roa
Signing time:             Fri 31 Oct 2025 21:06:44 +0000
ROA not before:           Fri 31 Oct 2025 21:06:44 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ba:ba:02:9a:07:d7:85:6d:1d:5b:56:f0:61:12:d5:0f:08:69:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:06:44 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b682baa390f896fa19b45340d5d14e4a9ca9b8c934fd838633d61bd3dbf7b1f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:e0:ba:68:6c:fb:3c:9e:e3:a1:a5:16:72:
                    1e:68:69:3e:55:96:23:e0:a4:8c:bf:3b:77:45:dc:
                    a2:24:62:82:9d:f7:3d:e3:eb:84:56:fb:41:61:f7:
                    90:65:a0:a9:2b:a3:38:02:df:b1:17:95:88:72:55:
                    c4:c6:7f:f7:15:88:3f:a7:80:6e:2d:4e:ec:14:fb:
                    e1:62:d6:91:a5:9b:9b:93:81:2e:dc:c7:a6:73:2c:
                    12:a0:1b:1e:1d:be:e4:33:5d:0f:04:f9:49:73:65:
                    fd:67:7a:52:fe:22:bf:43:e3:48:c4:65:ce:70:64:
                    ec:11:f1:db:c0:de:9b:88:35:7a:67:99:5b:f0:7b:
                    bd:bd:c8:ef:5b:f2:99:96:ad:48:6e:3a:67:a8:5a:
                    d4:b1:d1:ca:9e:7a:f4:5f:93:b9:45:77:14:97:8f:
                    cf:d5:b4:02:1c:d1:00:2b:7c:84:74:e7:ab:5a:a0:
                    a3:80:19:22:22:44:55:13:69:56:f3:45:83:ec:f5:
                    6e:68:0c:33:54:10:ac:ff:31:c4:48:bd:95:01:cd:
                    59:e8:0a:9b:6d:9f:ad:3e:d7:62:2b:28:ff:09:ab:
                    49:4a:37:f5:dc:48:c5:8f:6b:31:52:ac:18:a9:ea:
                    ad:93:9c:e0:f2:ec:80:5f:f4:31:a6:9e:99:b2:30:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:C9:D2:DF:BF:9D:22:80:5F:6B:4E:2D:14:96:2E:8F:16:79:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/032687b9-14e2-4c28-9c6f-9897cc0152d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:93:d5:89:f5:88:fd:2a:a9:3c:62:91:06:6a:70:a3:97:
         e8:cb:17:d2:b3:de:d4:bb:b5:b6:fb:fb:13:d2:fb:dc:4e:bc:
         c7:2b:09:d4:b3:73:30:57:86:6d:72:7f:ca:13:a4:f7:63:f5:
         1d:90:14:05:28:2b:a5:b1:3a:57:6e:e4:2c:fd:a3:2f:4c:1c:
         2b:d7:8e:3d:d3:29:35:a7:d0:a8:8b:76:9b:5a:cc:46:69:a8:
         c4:0b:79:8e:2f:65:f4:aa:50:eb:8e:07:87:ba:2c:bc:96:fb:
         f7:a9:b7:91:1b:cd:54:64:a0:10:ea:7d:67:51:8b:ed:e1:06:
         c4:83:e4:91:d5:b4:58:c2:3f:f5:b4:fb:26:f7:ae:e5:52:09:
         bf:9d:22:19:7b:b3:f4:77:dc:59:8c:cd:fc:b6:ac:1f:06:fb:
         02:ec:4b:9f:45:a0:8d:d4:86:f3:a4:02:cd:c8:ff:c2:b2:04:
         bd:2a:58:54:35:07:01:3b:46:56:ea:6a:fe:53:70:19:75:fa:
         95:49:b0:c3:19:c8:55:bf:53:78:b7:5f:ea:18:ba:80:b8:7e:
         37:05:d1:83:4f:d9:06:45:6c:a8:83:c5:5d:3f:2b:9d:d1:e4:
         f4:86:06:65:73:94:d8:48:7e:71:3e:c5:d8:5a:a3:71:fa:6f:
         5d:fe:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----