Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa
File:                     0327027b-1093-4d52-982e-7633219ee2ec.roa (raw, json)
Hash identifier:          WykRgXgrgAPmDrfuCk0kRqQKyfaTaOCQMk+UnQTiB60=
Subject key identifier:   7E:A9:A1:4D:7C:9D:F3:57:8A:1B:11:7E:9F:2B:41:B2:C2:7D:8D:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F1488B37BD7FC21652B3DB866DCEE141B0F4B00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa
Signing time:             Sun 26 Oct 2025 00:21:09 +0000
ROA not before:           Sun 26 Oct 2025 00:21:09 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.162.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:14:88:b3:7b:d7:fc:21:65:2b:3d:b8:66:dc:ee:14:1b:0f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:21:09 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=3beff446649cb89720ab9027e400c41db889d2f72d01cc0c86027e1ddf16dd24, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:20:15:eb:96:5a:85:7b:91:de:69:6a:1e:
                    7b:ab:cb:45:e0:b3:f6:39:47:42:5a:8b:c8:a0:20:
                    81:5f:49:42:2d:f2:00:94:93:b4:77:f8:be:23:95:
                    4a:bc:51:e5:da:09:59:56:b4:f9:b4:ee:f6:79:41:
                    dd:d0:a5:d3:19:d1:0b:eb:47:59:3b:58:59:9a:dc:
                    d1:55:ff:17:9b:e1:8c:5b:89:ee:0c:3b:a4:a8:c4:
                    7a:b1:8b:07:88:fe:7a:ae:ad:06:d8:df:54:3a:67:
                    bc:4d:cf:88:22:32:3f:09:07:49:49:ca:47:c9:22:
                    a2:9b:b7:e5:be:1a:b1:5a:48:17:b8:e2:1e:84:ae:
                    de:a2:5b:f7:25:2a:32:e1:c5:f7:3b:a0:d7:d1:73:
                    61:b7:13:89:22:2e:47:79:94:36:27:59:42:38:6f:
                    f9:7a:cd:b6:b9:6f:66:d7:26:38:6f:f0:8f:4b:ee:
                    85:ef:4e:c4:08:95:41:26:7f:8f:89:81:60:af:2c:
                    06:d2:5e:33:68:39:bc:0a:9b:16:2a:29:3e:ad:c8:
                    db:5a:82:29:49:2a:9e:7a:13:8e:53:17:be:2a:d0:
                    f1:d9:3e:09:49:0b:ca:86:5c:da:6d:5e:1b:a1:55:
                    77:67:49:c1:5f:18:c9:89:29:7c:ca:37:bd:da:73:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:A1:4D:7C:9D:F3:57:8A:1B:11:7E:9F:2B:41:B2:C2:7D:8D:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:b5:9b:cc:28:2c:e0:b9:81:f5:3d:30:a7:b4:56:d7:d7:
         76:e9:e5:75:78:33:12:3c:70:cc:85:14:e5:fe:47:c7:bf:5a:
         75:13:98:47:ad:4c:d0:04:6e:71:e4:5b:b3:39:36:e7:88:4f:
         38:4d:00:5e:c5:e1:08:5c:67:17:cd:e6:62:f1:9a:8d:11:38:
         21:94:b4:1a:9e:15:60:87:8a:28:9d:2d:ab:85:69:af:4d:ee:
         b6:85:d4:d9:67:4b:f7:d4:5c:a4:2e:d5:b7:72:9b:13:fa:bc:
         56:4e:5c:50:f5:96:94:9a:12:27:24:43:52:df:44:66:0a:48:
         d7:95:d9:75:92:3c:6b:75:a7:39:c7:5d:49:6a:ca:2c:52:15:
         30:66:7a:21:db:92:46:17:c4:39:19:9e:fe:d2:71:fd:7d:23:
         3a:f1:a3:5a:b2:2e:3b:9c:42:72:e4:5c:c9:3b:16:39:3f:71:
         34:a2:68:ce:fe:b7:d9:74:d9:92:f0:21:6f:cc:52:48:1b:b4:
         86:d4:45:fe:9f:29:9d:91:35:ac:14:2e:82:6a:e4:96:a9:eb:
         ef:e9:34:61:14:72:90:8d:bf:31:e5:5f:55:39:81:94:c7:f7:
         29:9c:f6:84:b7:f1:7c:88:57:3b:ab:94:b9:2e:51:18:af:01:
         3a:63:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----