Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be97376-c086-4d67-a773-dc164600d3c3.roa
File:                     2be97376-c086-4d67-a773-dc164600d3c3.roa (raw, json)
Hash identifier:          YMH90Djum2qU9gHY3vvQCzPP6bDC2jyrUIvwu1LZFbM=
Subject key identifier:   99:86:DD:E2:F3:B3:9E:B7:9E:C4:FD:C9:64:48:AA:7B:C4:91:0C:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       167A90BC274FB33A5AE505CD5A373DBC2A7AD890
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be97376-c086-4d67-a773-dc164600d3c3.roa
Signing time:             Wed 05 Nov 2025 00:40:49 +0000
ROA not before:           Wed 05 Nov 2025 00:40:49 +0000
ROA not after:            Wed 10 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.52.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7a:90:bc:27:4f:b3:3a:5a:e5:05:cd:5a:37:3d:bc:2a:7a:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:40:49 2025 GMT
            Not After : Dec 10 23:59:59 2025 GMT
        Subject: serialNumber=d1b650dd6e867c0a842c6178a800211206c18d17094fbd7c3277e70c949457b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:4f:63:79:58:47:5b:54:23:a0:3c:23:17:
                    c7:2f:7a:a7:69:92:ff:2e:d7:44:30:19:48:e3:c1:
                    47:6a:01:27:c1:b9:04:27:2f:b3:1f:37:45:08:6e:
                    86:92:28:4e:9d:27:ce:8b:5e:9e:c6:ef:7d:93:85:
                    b4:c1:fb:f1:ce:e3:ec:7c:da:86:90:b8:bc:93:89:
                    dd:ba:d0:6f:6a:d7:da:37:bd:40:35:ae:84:70:d3:
                    f7:a1:55:d4:20:af:89:d8:96:88:31:60:30:c3:ea:
                    63:a4:da:20:dc:33:d8:83:3b:b0:92:84:7a:2f:1b:
                    4c:43:d1:75:ba:23:b8:5d:6a:ee:78:21:d8:2e:db:
                    e0:02:f3:8a:f8:20:15:5e:73:dd:2c:c6:de:70:89:
                    c8:7d:9d:11:4e:d2:c2:02:a9:3c:be:7d:1a:41:7c:
                    32:ae:61:f6:bd:bd:17:85:1c:13:4d:c4:74:79:fe:
                    66:bb:c0:39:46:1e:a2:a1:d5:c8:64:de:d3:df:e8:
                    94:b5:fb:65:91:1f:5f:ff:2b:35:d3:7a:aa:67:e8:
                    9b:4f:ea:c1:ba:ae:79:fd:62:aa:b5:83:62:61:53:
                    bf:d2:12:33:ee:4c:d7:1a:4f:68:38:eb:a0:d0:f8:
                    e3:5c:ae:dc:e9:38:9e:ad:a1:a2:c0:73:47:3f:27:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:DD:E2:F3:B3:9E:B7:9E:C4:FD:C9:64:48:AA:7B:C4:91:0C:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2be97376-c086-4d67-a773-dc164600d3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:79:5c:d0:68:27:bd:1e:14:f2:6b:ca:fb:41:15:46:f9:
         9e:5e:7a:dd:95:15:45:fa:0a:e2:75:71:19:24:53:4e:38:ae:
         0e:e7:6f:be:d2:c7:03:72:a2:24:d1:25:94:f7:7a:e7:81:a8:
         ed:62:66:24:3e:d5:29:35:75:7a:c1:20:3f:76:8d:e2:2d:a3:
         8c:68:fa:ce:2f:5a:b9:4d:3d:92:e8:45:bc:e0:41:ae:5b:15:
         a7:c8:53:38:98:f8:fc:09:35:c3:82:a5:99:e2:15:4c:c9:5a:
         79:31:de:12:4d:48:41:66:3f:31:23:16:f0:7f:69:a2:10:3f:
         7c:d6:23:e0:34:da:05:a7:98:e6:f7:29:57:b5:29:5f:fc:e4:
         2e:cd:69:64:39:cb:b0:d2:2c:e7:36:8b:24:04:b6:36:1c:d7:
         fd:97:7f:31:97:c2:5e:d8:19:49:58:f1:d4:f6:66:c3:74:6d:
         89:e5:6a:e8:f8:99:61:1c:80:13:26:40:69:9a:d8:44:6e:5f:
         08:1a:35:f7:b6:4e:df:68:2f:24:e9:bf:cd:d8:33:48:79:e1:
         2e:c0:51:b5:af:7a:8b:82:db:a4:2a:d5:a7:35:c9:2e:dc:07:
         70:65:b7:d3:02:9e:f5:20:9a:fd:2a:79:6d:05:be:cc:e0:bf:
         d3:c8:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----