Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa
File:                     0e6ca26b-1115-4588-99fc-76e65105a567.roa (raw, json)
Hash identifier:          anVIloIgn/GMaCYTi6CWO7NYPToWqiS0w6ECQnI78oA=
Subject key identifier:   97:5F:A8:76:E7:A1:5E:34:D8:7F:9E:3D:31:A8:95:90:71:07:E8:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       397E89B25FFAA831D9B0FAA92CCE0098DC93FA90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa
Signing time:             Fri 31 Oct 2025 00:10:09 +0000
ROA not before:           Fri 31 Oct 2025 00:10:09 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.210.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:89:b2:5f:fa:a8:31:d9:b0:fa:a9:2c:ce:00:98:dc:93:fa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:10:09 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7fce3f6e722aeff90a3875edb3d92e00cafdb2d81ebc0937718393ef6f790fdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:77:b9:dc:ae:7e:e6:10:b1:f4:b8:1a:f9:
                    e7:98:66:d5:54:10:a9:56:1e:2c:88:9d:c7:55:7f:
                    40:30:ef:ba:c4:bf:10:9b:e9:81:1e:3e:20:3a:f3:
                    4c:50:be:6b:38:8c:8b:25:fc:6e:14:f1:f1:2a:63:
                    34:78:b9:dd:74:d7:01:4c:05:39:e2:39:d2:ca:3b:
                    63:c2:ac:24:68:31:1c:11:95:b4:89:2c:66:06:58:
                    a7:87:3c:b4:87:d6:5f:38:dc:65:42:a8:fc:ee:c9:
                    75:67:46:28:f8:35:a9:e3:e1:54:fa:1c:b6:6b:aa:
                    3f:79:96:6f:79:da:d6:13:b9:b3:9c:e5:32:86:bf:
                    a8:27:91:87:ea:33:8e:0c:19:7b:dd:36:c9:ad:6b:
                    36:d8:3e:e1:8b:47:ef:6a:a4:18:d8:90:ae:14:b6:
                    f3:ce:82:2a:9d:34:b4:af:02:b5:58:34:d8:75:41:
                    86:ab:69:d1:b1:07:ce:f9:f5:d5:05:8c:2e:a5:50:
                    7d:45:c9:ef:a9:25:35:66:42:5e:69:e5:fb:e0:f2:
                    13:37:3d:e0:6e:53:ce:b4:ad:e7:cf:1b:be:66:55:
                    67:f6:94:d3:4e:26:2f:51:d2:ea:10:6b:e6:09:26:
                    05:ef:80:10:b8:58:74:38:ca:77:64:cf:14:70:e6:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:A8:76:E7:A1:5E:34:D8:7F:9E:3D:31:A8:95:90:71:07:E8:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.210.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ce:63:50:ea:cc:c3:e6:a5:7e:3d:42:b0:37:13:b4:50:44:
         72:6b:9a:c0:28:dc:a0:c1:0d:c7:1f:91:75:d8:85:4a:76:43:
         8f:44:f4:32:86:a4:96:b0:7c:1e:99:c1:52:fb:63:83:51:62:
         2a:f4:e0:8b:fa:9a:6a:6c:a5:d5:26:92:06:a7:50:e7:21:8d:
         18:b5:cc:95:b2:38:4b:37:b8:72:68:fe:98:44:f9:91:95:dc:
         94:a8:b0:3a:8a:2f:8a:00:93:c6:9e:02:a2:16:18:0a:3b:c5:
         5d:e3:1f:97:36:17:f2:d4:b1:07:71:67:21:d0:e6:31:1a:88:
         71:01:c8:82:e1:c1:65:68:66:d4:96:86:10:da:33:45:53:eb:
         7e:5c:f0:d4:56:57:e6:22:58:55:bb:fc:83:d6:0e:b6:e1:b4:
         05:b0:31:0d:99:45:34:5e:e5:bc:9a:b8:87:f5:c2:b6:38:c2:
         84:e2:94:c0:2e:0a:f4:4b:b0:7b:63:9a:56:cb:97:d0:97:12:
         ea:49:3e:a6:90:21:25:c4:09:43:04:a8:29:b4:9c:af:cd:fa:
         a1:90:4a:25:d9:2d:64:a1:92:46:2a:34:2d:2f:36:9c:5d:61:
         cf:d6:ab:5a:78:d7:fb:40:1c:9f:e3:d4:98:9e:46:e5:30:9f:
         d9:5c:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----