Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c6809c1-62df-4aff-bbb2-c5d0710465ac.roa
File:                     2c6809c1-62df-4aff-bbb2-c5d0710465ac.roa (raw, json)
Hash identifier:          Wl5w4uSCZ+/1sk2NHuPc7RrWLD7zPXxMinvWdp7vefQ=
Subject key identifier:   75:F4:4B:BC:10:82:8C:7E:1F:A9:88:86:CF:2E:FD:F9:C0:34:61:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42099B117C5F2DBAC56F810EEE8DCE6C1954B45F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c6809c1-62df-4aff-bbb2-c5d0710465ac.roa
Signing time:             Sat 01 Nov 2025 00:40:08 +0000
ROA not before:           Sat 01 Nov 2025 00:40:08 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.72.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:9b:11:7c:5f:2d:ba:c5:6f:81:0e:ee:8d:ce:6c:19:54:b4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:40:08 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=0e14d64e3e0506617583de2a660303b878e1234c462f9e0e4bb63ff4b3884583, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:a3:e5:8f:ce:b5:88:b6:37:40:ed:22:3e:
                    c0:c5:4c:79:a0:ac:51:90:2e:28:48:0a:ca:00:a1:
                    34:fd:66:8a:14:cd:eb:b2:d9:5a:9f:7b:e5:01:f0:
                    46:d0:63:c1:3f:27:16:b8:6c:a9:90:8e:e2:29:b5:
                    ee:0a:28:83:0a:0e:4c:25:46:3c:41:f9:32:fe:c7:
                    b0:6b:69:d1:ff:db:a2:80:08:d0:c8:0b:44:bc:af:
                    ea:ea:1b:9c:ca:d1:1f:3a:19:20:af:05:ed:14:b4:
                    64:cb:ab:25:74:5e:cd:05:b6:99:af:77:2d:ce:20:
                    a3:2b:df:96:44:3f:8a:a8:3a:d3:ad:7d:f7:fb:b1:
                    8a:3a:0b:47:57:b6:fe:3e:88:55:d4:5b:73:f8:ba:
                    9a:e6:e5:02:92:d5:1d:f9:1d:49:e3:d9:27:69:63:
                    43:ff:b5:b9:f4:ee:d1:c8:f0:dc:8a:56:e2:9a:18:
                    06:35:90:47:5e:85:8c:ca:41:e0:22:5f:c4:df:52:
                    38:5d:cc:db:34:98:64:46:04:63:d2:9f:a0:a1:93:
                    0f:af:5f:28:31:2d:00:a6:e0:4b:b6:7a:ae:2b:59:
                    04:f4:d5:37:8f:b2:9f:d1:d8:2d:f3:67:db:48:da:
                    e2:02:9f:e1:a6:42:3e:1d:5e:a9:d0:95:28:6d:de:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:4B:BC:10:82:8C:7E:1F:A9:88:86:CF:2E:FD:F9:C0:34:61:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c6809c1-62df-4aff-bbb2-c5d0710465ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:13:bf:aa:8e:d7:c3:d4:30:75:79:f1:ff:7d:1a:b9:77:
         7a:b1:f6:39:b5:97:c3:70:16:5d:cc:f8:5d:7a:3a:4b:73:e1:
         d5:cb:f2:7d:42:cf:b0:45:06:e9:10:9e:3b:e6:21:ab:58:c1:
         9c:40:b2:59:02:56:09:9a:e4:9f:41:ae:27:87:5e:54:45:17:
         49:a9:2b:82:83:56:d5:2b:c8:b3:fd:71:f7:b5:d1:1e:af:60:
         98:3a:c4:95:7b:3d:a9:ba:4a:76:2d:7f:93:e4:60:92:ec:40:
         be:78:b2:ca:19:62:29:4c:0b:57:5b:ca:2e:ec:33:ce:f7:cd:
         36:34:9b:a8:6e:dd:fd:6c:04:41:42:cc:e4:a2:d0:7b:f8:8c:
         39:75:34:69:d7:5a:8e:05:08:bf:31:34:ba:94:d2:a1:fa:56:
         b6:5a:80:6e:4d:0c:44:08:8f:78:16:8d:91:33:d3:bf:1f:3e:
         fc:1b:c8:f9:17:7b:33:52:7f:d3:14:e4:11:08:32:49:26:f8:
         26:22:fa:12:3f:ff:3f:d4:32:d5:4c:5b:27:a1:ae:f4:88:99:
         c9:2a:0f:a5:ee:c7:a1:a3:43:37:bb:87:b0:57:98:a8:2f:a1:
         d1:43:d7:a2:30:f5:ee:7c:e0:f9:5f:f5:20:49:e0:cb:ea:87:
         42:45:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----