Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa
File:                     05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa (raw, json)
Hash identifier:          kuYCezduQ/WmnFXzxhndwnxXJsw5NmPjwugSM9UUlxo=
Subject key identifier:   94:95:F1:06:9A:D6:7C:EF:31:E2:B6:E6:98:31:FB:EB:C4:95:22:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C0B4D09910EB0EABABF76F6007FFE1E03D836B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa
Signing time:             Sat 01 Nov 2025 00:10:14 +0000
ROA not before:           Sat 01 Nov 2025 00:10:14 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        56.137.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:4d:09:91:0e:b0:ea:ba:bf:76:f6:00:7f:fe:1e:03:d8:36:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:10:14 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=b4d99accefe9519b967a875bc9cd8e06d458233b86e4ebe4b0d4e00b47285ea7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:1b:a0:90:43:d0:4f:84:76:0d:7c:7e:93:
                    43:47:14:af:68:aa:93:37:a6:39:b2:e8:e9:ae:a1:
                    2a:77:52:7b:4e:62:c6:a6:4e:5f:04:7a:8f:fa:c3:
                    21:e2:47:3c:4c:cf:0c:2b:f2:10:83:1c:71:41:45:
                    db:e6:ef:da:60:4c:5e:b4:a2:f5:bb:55:7e:0d:a8:
                    4f:01:65:49:68:61:48:c8:7c:77:d0:20:54:a9:a7:
                    75:06:25:75:44:96:9d:fa:84:1f:d2:89:e4:e1:b7:
                    a8:f9:f1:aa:f0:c7:49:57:9c:94:98:30:7f:04:19:
                    45:8b:8b:d7:7a:1d:b4:18:6a:b8:80:b0:da:d6:c5:
                    c5:e3:9a:86:fb:3e:a9:39:6d:53:be:82:a2:ee:74:
                    01:dc:86:50:58:4e:47:f3:e2:3c:b3:bf:dd:61:59:
                    68:97:f6:82:68:19:a4:e4:80:97:0b:9a:c8:ff:1f:
                    61:06:be:3c:e3:72:7c:68:e7:c0:ce:d7:c3:de:48:
                    c1:ee:d0:c2:37:60:1d:da:cb:85:9f:91:4c:3d:f6:
                    ac:61:c6:05:0f:56:a2:12:24:5a:9d:c6:8e:eb:eb:
                    f3:16:f6:6d:c0:22:ee:66:04:02:f0:1b:0c:ea:1b:
                    c9:8b:d5:ad:f5:c0:17:4c:d4:1b:52:cc:f8:f6:a2:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:F1:06:9A:D6:7C:EF:31:E2:B6:E6:98:31:FB:EB:C4:95:22:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05102ffa-6c72-4fc1-9ad8-e881f3c1974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:7b:4c:e3:0e:6c:88:7d:c0:bb:9e:40:68:67:6a:67:bd:
         2b:02:17:58:92:9c:f5:25:79:f9:60:7a:7f:90:0b:9a:a8:a8:
         49:45:48:94:7b:82:49:3b:aa:0a:65:0b:ce:ff:c6:25:7d:82:
         12:cb:b5:e1:a5:08:c8:ca:82:93:9c:cb:21:21:b6:ac:29:4f:
         3f:81:03:24:52:38:fa:18:07:49:73:32:10:ff:c9:00:a0:04:
         3a:1f:6f:ee:3b:08:c1:e7:c5:d7:21:39:4b:9b:fa:ac:9a:cb:
         d5:89:f6:a5:01:4f:f6:63:95:74:e1:1d:89:b5:54:f5:07:f1:
         80:ed:c8:6d:ac:e5:a7:de:f5:8e:44:f5:92:bf:cb:93:03:ae:
         03:84:4c:96:69:71:c7:6f:e2:00:a4:4b:0a:f6:23:0d:70:bc:
         bc:22:41:3a:6b:4d:e6:59:9e:f8:35:88:92:5b:d2:7f:cd:a2:
         75:f3:55:a2:9f:fc:6b:3f:e3:01:97:a0:69:7a:56:05:84:89:
         f1:b1:fe:5f:7b:6c:c7:19:6f:6d:2e:2d:88:4d:32:78:dd:52:
         68:2f:49:e0:d5:f1:ce:7e:45:65:e9:16:2a:77:e9:03:1f:41:
         64:d0:9d:a5:c8:44:c2:51:87:b8:32:eb:2a:e9:83:11:d5:0d:
         fb:88:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----