Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
File:                     3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa (raw, json)
Hash identifier:          vh6HHjeVVjykYezq4fOjKiu9upe/Gf0aYlGVbPUilHo=
Subject key identifier:   EE:86:91:2A:CE:A1:D6:8F:21:D4:57:9C:3A:89:30:9A:A8:AF:DE:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D163F5C368403EA5C7B593DBD05F572D35F596E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
Signing time:             Sun 26 Oct 2025 01:00:34 +0000
ROA not before:           Sun 26 Oct 2025 01:00:34 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.223.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:16:3f:5c:36:84:03:ea:5c:7b:59:3d:bd:05:f5:72:d3:5f:59:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 01:00:34 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=a2e7428da1c840ea751edd1a65f9923a8e54779e2167a20d0c32e7c898b27e5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:66:92:45:92:df:b5:ac:3f:70:12:36:74:
                    be:1d:2e:b0:f9:8c:09:bb:19:52:fd:92:b2:f8:45:
                    2b:20:40:51:62:90:48:fe:81:b4:65:73:24:4a:c5:
                    72:f0:60:cc:8a:7b:cb:81:2d:4b:c6:6e:b7:56:e4:
                    49:fd:cd:df:67:1f:18:b9:16:87:1b:af:5a:4a:96:
                    b0:0e:2b:52:a1:3f:0e:32:68:91:c2:10:2e:df:13:
                    f6:9e:79:78:7c:35:f4:d8:f6:d5:e3:6a:75:8e:8a:
                    fa:32:0c:1b:10:a5:c4:81:48:89:3c:3d:2b:74:d9:
                    41:e8:f3:ad:13:66:7d:7c:af:e0:cd:3e:3b:72:f4:
                    f0:7a:cb:14:c3:80:66:7b:2d:74:c3:33:4a:22:9f:
                    03:19:9a:00:98:dc:ce:18:d8:f7:ee:dd:8d:00:8a:
                    ad:1f:15:e9:50:70:15:d8:04:4e:50:3d:62:09:77:
                    c6:68:61:19:59:4b:e5:75:43:fd:3f:53:a0:4b:82:
                    a8:cf:7e:17:e6:49:c7:fa:ee:ca:97:c5:23:79:0b:
                    83:84:1b:33:26:01:aa:34:e3:25:2c:17:5b:cb:ad:
                    6f:62:7f:cf:3d:2e:34:6c:4a:6e:2f:ce:82:e5:b6:
                    8e:7e:00:6c:36:13:71:5d:35:86:8b:94:2e:91:58:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:91:2A:CE:A1:D6:8F:21:D4:57:9C:3A:89:30:9A:A8:AF:DE:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:ed:51:31:89:e4:8e:3e:44:38:b5:83:ce:12:a6:c9:b1:
         0c:22:af:79:71:67:f0:0b:70:cd:da:7f:2d:ba:94:22:27:06:
         5a:f1:31:99:2c:73:3d:40:91:f0:97:5d:e5:70:3f:75:15:0b:
         6d:3c:c4:60:fb:b3:ac:f2:50:c8:95:6c:66:aa:f7:39:05:90:
         7d:a9:c5:8e:23:b4:fb:9a:34:cf:ba:40:7f:f3:b5:99:81:57:
         f4:55:c2:68:20:9e:ad:75:f0:26:ce:07:de:ec:3a:05:10:b2:
         0d:0c:d2:05:86:81:72:82:d9:af:0e:6a:6b:65:37:8f:52:17:
         de:51:32:86:79:62:3b:5e:e8:03:15:c3:48:86:42:86:e7:b4:
         93:f6:9f:45:7e:9e:9a:1b:c1:ad:12:2e:3e:9a:59:0c:6a:b9:
         db:c6:17:95:bc:e2:4b:fe:25:a7:2d:77:ed:94:87:8e:40:29:
         e0:6f:d3:d6:ab:cf:77:9d:9f:81:5a:81:08:21:02:35:a5:d3:
         df:6c:45:3d:6c:29:b2:41:f1:0d:9d:09:0c:0a:68:21:22:6c:
         76:16:9b:1a:74:b8:c7:7a:62:01:90:52:08:c4:3b:21:e4:c9:
         4d:7c:b2:3e:cb:44:e9:94:5a:36:a4:e4:0f:bc:b6:d3:5f:ba:
         88:47:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----