Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcf2903-cfd9-4e86-b3d3-14d931f720da.roa
File:                     4bcf2903-cfd9-4e86-b3d3-14d931f720da.roa (raw, json)
Hash identifier:          9ujSIQ1K+vlOhC0iRmtnesw7HJGkBEGx01o8TnssvS8=
Subject key identifier:   7C:93:A9:75:01:5E:5C:93:3E:96:95:E3:F0:2E:69:2E:7D:F5:2F:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CD4A277CEAF542B62BEB497E147285511AE467F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcf2903-cfd9-4e86-b3d3-14d931f720da.roa
Signing time:             Mon 27 Oct 2025 00:00:06 +0000
ROA not before:           Mon 27 Oct 2025 00:00:06 +0000
ROA not after:            Mon 01 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        195.4.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d4:a2:77:ce:af:54:2b:62:be:b4:97:e1:47:28:55:11:ae:46:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 27 00:00:06 2025 GMT
            Not After : Dec  1 23:59:59 2025 GMT
        Subject: serialNumber=6d8ba070e7619e0a75d42f2d4cf1a6a1f8f698d4db12ff326b66934a4d30440e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:a5:45:58:83:9e:6d:d9:7a:b5:0b:66:d2:
                    22:84:55:6a:8e:fe:0d:fd:2f:05:56:1a:b1:c5:72:
                    2c:29:42:4e:d5:1f:98:9c:17:be:03:57:4b:35:30:
                    f7:b2:ca:5f:b1:4b:e0:9e:2f:20:a8:b0:51:81:26:
                    e7:32:19:0e:3e:5b:44:9b:4b:e6:69:57:f0:97:db:
                    97:e4:ec:1d:c4:9b:6e:6b:3e:84:3f:fa:8e:b8:14:
                    65:63:83:98:e7:e8:cf:34:2d:da:4a:c2:58:80:16:
                    ab:8f:b3:6e:be:48:eb:2f:0d:7a:c3:1d:27:2a:7d:
                    cd:f5:8f:b3:a6:c0:c2:00:7e:fb:00:13:77:45:5d:
                    ff:be:ac:15:34:ee:8d:f3:f8:f2:a7:36:86:08:ac:
                    5d:a2:fa:17:91:ce:13:01:5a:7e:7b:0b:db:8f:fd:
                    2a:ea:bd:a2:b5:62:3c:74:b4:b9:f7:aa:b9:5e:1c:
                    05:7b:23:9e:d9:20:d5:d3:03:17:e1:93:4e:fb:c5:
                    9c:10:7f:f1:8d:82:1a:d4:2b:62:f5:d9:25:3d:32:
                    31:d9:3c:11:63:fe:cd:65:c4:75:f4:05:30:8b:12:
                    f2:33:6c:e8:78:2e:86:cd:bc:d7:3e:54:c9:0d:5c:
                    41:b6:e9:65:03:12:9e:2c:e4:a9:7d:cd:62:93:59:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:A9:75:01:5E:5C:93:3E:96:95:E3:F0:2E:69:2E:7D:F5:2F:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcf2903-cfd9-4e86-b3d3-14d931f720da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.4.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:27:9c:1c:df:47:77:26:4c:21:e8:82:f7:19:d3:15:fb:
         75:45:5a:24:fc:9d:0c:da:e7:d4:ca:53:fc:b0:85:bd:22:a9:
         0a:6d:73:dd:d2:77:2d:8d:de:1a:c7:8a:11:93:a7:71:2e:64:
         46:9b:bc:ff:6d:d4:86:55:05:05:9a:bd:b8:c6:89:db:7e:04:
         09:75:17:35:e6:e8:06:a7:90:9d:38:05:10:27:bf:0e:9c:e7:
         54:83:69:06:07:ea:98:12:8e:71:4b:98:31:44:74:1e:0c:a1:
         da:71:d0:06:1c:47:42:80:8e:22:cf:07:84:89:49:71:a5:a9:
         dd:09:ea:5e:07:d6:fa:c3:33:ae:a7:96:93:91:04:f0:f5:e1:
         2e:37:8f:ae:9d:8f:e1:a0:6a:7e:8b:7d:f2:09:0c:f9:b9:67:
         31:46:3f:79:7a:f6:95:46:61:73:1f:7e:db:3b:f7:a7:89:d5:
         7c:fe:6a:66:82:bc:4b:97:60:2c:01:6e:d9:24:46:52:5f:3f:
         44:75:5b:54:f2:1d:58:b4:d3:e2:46:b1:24:58:c6:18:1d:e9:
         cb:46:85:2b:84:d2:bc:6b:0f:41:6a:99:87:b2:bb:9c:2b:d7:
         8c:ef:93:97:92:83:b2:0b:68:8b:58:77:bb:36:ea:34:10:09:
         9b:b4:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----