Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa
File:                     44b2496f-270e-4583-8750-8d879994d57d.roa (raw, json)
Hash identifier:          L8ezEr/wzY8RU1PdDa7WcvtzqPtz4OBpFqKm2ApkHKc=
Subject key identifier:   A0:BE:80:88:24:D3:52:B9:2E:20:94:CB:59:73:DA:DE:CF:25:6E:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6615B067BE59DF1D20D30F426C3482B29E8E3840
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa
Signing time:             Sun 26 Oct 2025 00:21:08 +0000
ROA not before:           Sun 26 Oct 2025 00:21:08 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        72.41.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:b0:67:be:59:df:1d:20:d3:0f:42:6c:34:82:b2:9e:8e:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:21:08 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=edcd53a30e1f92ea92bd00e599076d742a151562f5931b15528c1f4a6bfecf6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:76:e3:46:81:fa:21:1f:ef:94:cb:71:86:
                    20:38:46:00:fe:21:e7:66:df:8d:bc:a8:72:c0:d7:
                    01:71:49:54:a0:b5:f1:00:64:4f:1f:16:9c:d3:39:
                    1a:0c:f4:7a:89:3b:22:22:0a:49:df:4b:db:64:93:
                    8f:eb:27:12:fa:78:f7:01:c2:0a:7a:1f:57:47:4b:
                    a9:3d:83:15:38:1d:74:ed:ba:b0:95:cc:c4:0e:99:
                    97:56:cd:24:2e:3b:71:dd:c5:b9:45:62:30:7d:20:
                    2e:fb:7f:7c:19:47:26:dc:81:40:6e:54:09:3c:1f:
                    fa:30:f5:a9:73:6a:36:d3:db:7a:85:1c:11:a1:7f:
                    07:e0:e4:4b:44:36:a6:d8:d3:71:ec:36:be:21:12:
                    78:98:ef:49:bd:4c:9a:37:7b:60:b2:d5:04:02:93:
                    63:39:ea:12:ec:e8:b9:d0:f9:67:c8:1f:dc:3a:42:
                    2e:15:cf:4b:2f:b8:2e:2a:01:79:6d:eb:de:b9:6e:
                    f6:14:0c:e8:51:1d:b3:87:e7:62:87:6f:ce:38:01:
                    b7:25:3f:8c:05:a7:df:b5:1b:62:7c:88:6f:12:96:
                    e5:ec:b4:ba:0c:e1:d8:9a:6b:a5:2c:48:7d:10:a2:
                    5f:0c:9f:b7:c8:81:1f:be:00:c6:a6:7c:f8:49:57:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BE:80:88:24:D3:52:B9:2E:20:94:CB:59:73:DA:DE:CF:25:6E:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44b2496f-270e-4583-8750-8d879994d57d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:70:cd:a2:94:0f:8d:4d:d7:0b:a6:b3:ed:36:8b:6a:c7:4a:
         c2:b2:ec:92:22:41:99:4b:55:b5:35:59:df:45:5d:21:54:a3:
         2a:e4:4f:3c:eb:b7:53:b5:87:fa:da:c8:87:72:f2:e3:ae:b3:
         4c:8a:05:ac:29:5a:7e:b0:89:b8:5a:b5:b4:db:ec:b3:ce:91:
         63:2a:e1:e0:96:3e:92:c2:e4:99:41:f1:93:60:eb:2e:d6:81:
         3a:eb:4f:2c:73:5c:80:c2:93:14:cb:84:66:e7:4d:24:08:8e:
         7e:47:a1:86:39:78:7c:81:07:1f:1e:69:22:02:62:6a:c0:69:
         3e:86:2e:58:aa:d7:2b:b9:9a:65:fd:c6:af:00:3c:b3:5e:7f:
         31:ef:c5:be:60:3d:fa:02:c3:5a:51:89:c9:a2:de:d9:08:7e:
         8d:7b:7b:31:68:e2:a0:81:18:84:26:49:85:da:a8:42:0a:4d:
         10:e4:d8:8d:62:86:48:99:76:fc:88:f7:58:ea:a2:63:86:95:
         1f:93:af:f9:ec:0e:6f:c4:11:42:4f:25:a9:55:89:fe:82:9d:
         73:f3:c4:a0:95:ab:db:ce:cd:f9:3f:c9:5a:3d:64:49:d4:62:
         ec:7e:7f:96:5d:7b:ee:1f:9f:cd:38:8c:e6:4e:70:75:51:2d:
         91:e4:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----