Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7936f-33e7-4e70-981a-f74a37d534fd.roa
File:                     46a7936f-33e7-4e70-981a-f74a37d534fd.roa (raw, json)
Hash identifier:          q3zu4UfRwFdJ1vA17pujHX4NYybtyQS5rReQmY7UNi4=
Subject key identifier:   C5:A7:91:44:42:31:9C:9B:90:EC:4F:D2:B3:FF:3A:CA:83:FF:04:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AC7DB4B2AEBCFF1B17A2129BA1E2D7A211B1F4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7936f-33e7-4e70-981a-f74a37d534fd.roa
Signing time:             Wed 22 Oct 2025 00:40:05 +0000
ROA not before:           Wed 22 Oct 2025 00:40:05 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.125.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:db:4b:2a:eb:cf:f1:b1:7a:21:29:ba:1e:2d:7a:21:1b:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:40:05 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=3671cee200e8a40103bcc3cda77ced4deb893fb71d4ed819bb1a282cf385fdb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:f3:72:1e:bc:92:69:70:54:76:77:7a:79:
                    26:4f:f9:71:a2:ed:e9:78:43:90:de:0d:9f:b8:bf:
                    22:5a:dd:52:e6:d5:a1:58:72:20:38:9c:e5:df:6b:
                    c0:0e:d1:7c:07:5e:c0:ec:f6:75:4e:2c:34:f0:74:
                    94:4c:08:da:75:89:86:07:5d:14:bd:49:bf:a6:fa:
                    df:af:cc:96:79:df:ab:da:d9:75:37:7e:f9:6b:21:
                    02:af:fe:23:2e:c6:ce:97:aa:0f:69:df:da:c1:e6:
                    19:c9:87:df:7c:b1:9a:87:a4:77:87:d7:c2:ae:06:
                    94:bd:15:75:c8:aa:66:e8:de:45:98:f5:68:f4:b3:
                    4a:51:1a:2a:2b:eb:6f:5b:2b:73:dc:e6:02:84:68:
                    b1:b7:aa:8c:f9:8e:32:c9:38:ca:36:87:12:76:7f:
                    f7:56:7d:83:7c:d1:2e:6b:0b:d2:e0:39:e7:ff:82:
                    57:37:0a:4e:d9:4c:09:de:23:9b:84:57:e3:d8:9f:
                    36:d9:34:90:0e:71:c8:9e:22:6c:fe:fb:26:73:f3:
                    34:94:90:0b:64:4d:55:09:49:c9:a8:12:2b:b5:ef:
                    a3:26:4d:64:9b:df:d0:72:cd:cc:c3:f4:00:7f:90:
                    6b:44:d9:96:89:01:59:21:88:0a:13:16:dc:2c:b9:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A7:91:44:42:31:9C:9B:90:EC:4F:D2:B3:FF:3A:CA:83:FF:04:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7936f-33e7-4e70-981a-f74a37d534fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:8c:10:05:8d:92:e7:3a:83:6a:a3:e6:95:83:a1:37:f8:
         86:8f:55:6a:74:6f:fd:de:59:a1:c1:74:67:a4:e3:31:04:ef:
         4d:4f:a2:fd:15:85:2f:3c:84:7a:69:ea:ea:48:11:eb:c5:16:
         f3:0e:5b:4e:ce:22:bc:16:92:3d:8a:dc:58:00:fe:29:5e:ed:
         52:91:c7:f3:67:b3:08:56:fe:0d:50:a7:3b:b0:d0:b9:6c:3d:
         3f:90:bb:43:35:45:c7:14:02:ef:dd:51:1d:ab:70:70:1c:05:
         57:91:61:78:c4:49:ac:50:29:e3:71:90:67:44:d8:ad:b3:0d:
         6c:a8:5d:af:38:b6:28:fa:b4:5e:95:80:06:7b:fd:9a:44:2a:
         d5:40:9c:eb:96:7f:42:b4:24:85:ac:2d:06:69:3c:da:75:9f:
         db:1b:11:73:21:5f:68:0e:16:17:b0:a3:bf:8c:75:b0:e0:be:
         5e:ef:6b:62:ad:47:38:78:9d:62:06:c3:79:d7:da:8b:d2:0d:
         18:49:67:42:9d:88:70:bc:81:bf:0c:99:b4:1d:5a:f5:22:ec:
         1f:91:8d:af:83:13:b6:cd:d6:fe:a9:0b:a7:3b:e6:68:90:b7:
         7a:54:c6:42:46:18:a9:83:d7:76:d8:e3:90:ee:70:6a:a8:66:
         f9:4d:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----