Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
File:                     08765d1b-0666-44f8-ba33-732d7e392300.roa (raw, json)
Hash identifier:          CpQ/eVlWnYESgDmeiAJp/yT8SfNMGkSI62uwNLi3Yz0=
Subject key identifier:   87:93:23:52:98:15:85:64:72:F8:21:08:BE:6E:D5:61:0C:2F:68:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26D742394E51FB0177B2C31D64B7530707079733
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa
Signing time:             Sat 01 Nov 2025 00:10:38 +0000
ROA not before:           Sat 01 Nov 2025 00:10:38 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d7:42:39:4e:51:fb:01:77:b2:c3:1d:64:b7:53:07:07:07:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:10:38 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=e3bdcd48abad5400ab009a1450f9d0a1ef1965231f722543e6eaa3c3680e412e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:dd:9d:86:bc:57:4e:f9:12:5d:5d:8c:42:
                    0e:96:e3:5b:a0:84:fe:05:bb:ef:43:5d:ce:ca:d7:
                    d1:1e:3d:c8:a2:5a:e8:2a:9c:03:6a:67:0c:33:e3:
                    1c:de:7f:06:c0:a0:02:92:06:68:cd:1a:87:79:c6:
                    3f:b3:e3:af:6f:61:f2:45:c5:4c:c7:87:f3:c3:13:
                    6a:27:e8:7a:8f:4b:a8:f7:78:ba:44:c7:7e:c1:44:
                    f4:c5:93:bd:56:c6:dc:e5:64:96:36:56:91:20:ab:
                    8a:91:2e:48:f9:75:16:be:0b:b7:7a:e8:ab:9b:37:
                    56:92:96:85:bb:3a:3a:85:35:d0:f0:12:2c:f7:82:
                    f3:37:fd:7b:26:7f:cc:90:f5:b3:e8:dd:ea:51:a9:
                    9b:55:dc:9b:b9:73:13:9c:d3:50:94:a5:d4:ad:d3:
                    7c:fe:3c:b1:4f:36:96:a4:98:3f:3d:90:c2:5a:09:
                    54:d2:b5:5b:76:37:b8:7e:6b:a0:8d:45:c5:c2:64:
                    6e:6e:6a:9c:36:9a:75:27:5a:2e:74:86:4e:20:8f:
                    53:35:34:8e:7b:20:5a:e8:78:d7:96:68:1e:3a:9e:
                    a5:c3:93:41:39:8e:4c:48:3e:9c:6e:c7:a7:36:10:
                    7e:aa:29:69:21:53:a5:12:8f:70:26:5b:bf:6c:10:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:93:23:52:98:15:85:64:72:F8:21:08:BE:6E:D5:61:0C:2F:68:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08765d1b-0666-44f8-ba33-732d7e392300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:90:72:45:44:04:cb:6e:08:62:aa:b9:f4:99:a8:9f:79:
         f0:33:11:c0:b0:17:1b:78:7b:0c:16:50:54:ec:dc:0d:97:a8:
         91:fb:51:94:bb:95:79:bd:d1:4e:03:86:6e:cd:d4:e5:04:1f:
         59:d9:9b:fa:bd:a0:65:c3:32:7d:e2:b9:94:11:bb:5f:64:eb:
         fe:ab:02:e8:40:0b:e5:b4:98:5d:d3:2a:2a:c2:53:c3:71:8c:
         ef:54:7d:b9:c8:9d:53:3c:70:32:ca:ff:ec:60:32:7d:cd:31:
         79:39:52:aa:45:40:5e:48:f8:64:52:bc:08:53:3b:1d:a2:f7:
         58:e9:2b:cf:a1:ee:d2:eb:ef:13:51:23:ca:35:dc:9b:28:79:
         cc:b7:ea:03:d0:e6:30:fb:c3:f6:0c:db:db:ab:aa:07:92:09:
         f5:af:fb:03:33:d9:9e:6a:ef:61:4a:40:92:ee:53:72:58:d7:
         c4:32:10:ef:e5:e9:49:f9:5c:bd:d6:c2:68:fa:32:8b:e2:c6:
         dd:39:a2:7c:b6:c8:ee:38:b7:2f:20:ea:38:e7:6f:cf:51:e7:
         a5:36:36:4d:aa:04:d7:76:9e:a6:2b:72:80:ae:79:e8:42:fa:
         f6:b3:85:4a:48:3d:e6:21:ff:8a:81:a2:29:ba:3a:97:56:64:
         db:b3:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----