Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4868ea12-593e-461a-aff6-bf19d381af00.roa
File:                     4868ea12-593e-461a-aff6-bf19d381af00.roa (raw, json)
Hash identifier:          5a+/iTW90Hz/ZGitNIK6AJWPKW9vZjEjER0g2RbEdqE=
Subject key identifier:   BE:62:8A:EE:1D:3D:E5:85:14:1D:23:10:34:93:F3:50:EC:65:3E:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       385757B3006DA807804DA5AE9D4933235E5BEE01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4868ea12-593e-461a-aff6-bf19d381af00.roa
Signing time:             Sat 01 Nov 2025 00:51:33 +0000
ROA not before:           Sat 01 Nov 2025 00:51:33 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        104.216.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:57:57:b3:00:6d:a8:07:80:4d:a5:ae:9d:49:33:23:5e:5b:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:51:33 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=d4758c184047155b6b0427d76606c64502b54cdec49b86082bfc6e57b4ea46ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:5d:7c:7c:6e:5d:dd:b4:18:2b:08:b1:0c:
                    4a:c4:47:e0:ff:46:3d:de:af:e9:d6:02:70:a5:48:
                    e3:e2:47:94:73:e4:57:b7:9a:a3:2b:83:c8:ac:5a:
                    da:99:51:d2:a8:28:67:41:9c:9a:80:f5:81:85:60:
                    8d:fc:97:3b:61:79:f9:84:85:78:28:39:73:18:42:
                    53:d7:2c:ec:94:e1:84:24:1e:2e:f6:bd:49:14:cc:
                    8d:85:8c:7f:47:de:0f:3d:db:74:82:fa:d6:54:0e:
                    69:ac:18:84:94:97:64:83:ef:20:a9:be:87:38:c9:
                    4a:d0:c0:89:96:35:c0:80:a5:0d:56:64:10:af:28:
                    72:d9:2b:05:2b:f5:d2:19:ce:25:fd:cc:a9:e4:6f:
                    dc:c1:38:8f:99:e5:2f:23:2f:84:d6:f1:f4:58:07:
                    e1:1b:f7:2f:fb:2d:f2:f7:d7:04:32:46:1e:81:a1:
                    d5:1c:45:d4:a7:82:00:a5:ee:eb:dd:dc:db:ce:ca:
                    f4:22:a6:55:90:05:be:9b:1c:5a:c3:48:93:38:54:
                    08:14:21:dd:7d:f6:ba:fa:e4:2f:06:fb:36:83:a9:
                    00:29:40:4c:39:ff:a0:56:1c:db:f6:aa:f2:33:08:
                    5e:08:d4:ce:00:e9:09:97:6f:7e:1a:92:82:4d:cd:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:62:8A:EE:1D:3D:E5:85:14:1D:23:10:34:93:F3:50:EC:65:3E:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4868ea12-593e-461a-aff6-bf19d381af00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:3b:f9:ae:ce:e6:72:9b:5b:cf:bc:a9:1c:42:60:26:9f:
         94:8f:ea:78:46:16:96:b5:64:b6:74:47:c4:f0:dd:c7:30:1e:
         ec:45:0d:68:40:31:46:05:5c:5f:c5:9a:f8:0e:c7:ed:b7:40:
         e3:13:1f:2a:a4:d6:c6:5b:4b:f2:e2:a9:60:ac:6c:20:77:00:
         0d:e1:14:3c:23:b3:96:c2:92:19:9e:66:08:ed:24:13:b5:4f:
         33:8f:20:ad:1a:e4:31:f6:c2:15:62:13:45:cf:aa:33:6e:96:
         a3:b5:f7:9e:c8:3c:df:45:10:de:f2:19:f6:d4:ad:b5:fd:f0:
         62:39:f3:a7:b5:d1:26:94:fd:3e:a9:3e:f8:21:04:41:90:e3:
         49:73:bc:99:41:37:eb:4b:f2:c1:89:db:9a:9d:e0:db:83:86:
         15:6f:df:7c:94:5a:92:82:0c:6d:02:b0:fd:f2:91:6a:da:41:
         51:38:0f:ed:6b:d3:15:5f:56:37:be:89:26:91:30:17:4d:18:
         e0:db:0d:5e:fc:e4:57:75:ba:05:fd:81:dc:e0:a1:6b:00:d3:
         be:5a:62:d5:fc:79:29:60:95:87:98:08:bd:6d:a0:62:0b:3b:
         7b:15:14:d7:b1:14:bc:48:27:83:49:9d:7e:bd:f6:00:b4:4e:
         09:34:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----