Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
File:                     5ef35af6-a704-4311-b43f-c62b39327200.roa (raw, json)
Hash identifier:          RexkpdgojIn42Y7KTpczhcVDygQDUczKtE/Qto2VExw=
Subject key identifier:   5C:61:9E:1C:64:0C:F8:06:6D:E1:E4:FF:11:D2:D2:91:30:82:3E:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0DBC6A710BC9E92D92F36782447DF3E0714D1369
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa
Signing time:             Sun 26 Oct 2025 00:40:53 +0000
ROA not before:           Sun 26 Oct 2025 00:40:53 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bc:6a:71:0b:c9:e9:2d:92:f3:67:82:44:7d:f3:e0:71:4d:13:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:40:53 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=b6d70a1096f76d7a16db143fb97ccd3cd18e049acfdf6e3bd8d6b75751b082b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:49:eb:d0:32:06:cf:57:5a:c2:8e:0b:fc:
                    8f:67:a1:da:3a:cb:f9:8f:65:d7:1b:f2:25:e1:d2:
                    c9:4b:57:9a:ec:67:0e:fc:70:1b:6d:97:08:d7:87:
                    84:5f:d4:7b:d1:67:b2:c8:e2:f9:d1:6d:99:1f:f2:
                    c1:a8:f4:f0:83:39:13:a2:3a:22:a3:b4:fb:ea:34:
                    85:cd:6a:fd:9d:27:e7:92:a3:7c:8e:8f:9a:bc:f0:
                    15:4a:e1:8b:5a:29:74:77:b2:ad:7c:fd:12:8d:4a:
                    75:2a:8d:55:bb:be:5f:a2:81:4e:04:14:a2:b5:7f:
                    21:cb:78:65:e8:6d:47:00:18:f4:64:10:99:1b:e6:
                    06:a4:05:9e:7f:ba:09:dc:4b:82:f3:4e:25:bb:13:
                    cf:f9:de:1b:c2:a4:9b:cf:5a:2f:11:f4:bd:81:5d:
                    58:e0:6b:38:af:8b:17:8c:62:55:d1:96:8d:be:da:
                    dd:29:8e:14:ba:46:ba:f3:65:ed:a8:aa:0e:05:6f:
                    25:a1:14:4f:00:74:ff:9b:ce:45:88:5c:79:bc:9e:
                    70:cb:22:54:9c:85:a7:bf:ef:3d:d0:46:04:0f:79:
                    41:ac:f2:f5:30:fd:8f:f2:65:5c:15:86:62:e8:7b:
                    ea:2c:80:26:4f:27:93:1d:87:12:14:e2:76:20:2c:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:61:9E:1C:64:0C:F8:06:6D:E1:E4:FF:11:D2:D2:91:30:82:3E:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:91:12:2c:5b:e1:f8:93:77:6e:45:ee:83:b3:d1:ec:0c:05:
         70:cb:5a:c6:d3:08:29:a3:ed:bf:fd:67:56:ec:a8:54:1b:b8:
         c7:48:01:b8:bd:21:70:8d:7f:5d:ef:f7:b5:1f:d7:4b:34:a0:
         72:83:a7:18:8d:ce:d5:79:7b:1f:9b:c1:a9:c5:76:2e:77:b7:
         0a:11:de:b2:d6:53:b3:bd:d3:2d:40:fa:1f:aa:58:b1:73:57:
         b4:d9:4c:70:71:2b:07:26:92:a0:e5:58:43:1c:39:8c:a6:90:
         ec:0f:be:ae:be:8b:52:36:5f:09:fd:91:6d:39:74:1a:b3:03:
         12:cb:3a:05:b1:3a:b9:3a:25:ae:f5:83:01:ce:3a:3f:e7:90:
         ac:bd:e7:ce:31:ec:ad:ee:1a:a7:68:70:7d:40:f2:db:1f:d4:
         78:29:06:e5:86:96:8f:31:5e:9e:51:b9:e8:03:fc:e2:b4:a6:
         a7:74:b9:9d:53:47:ef:bf:53:d1:e7:36:f9:e5:75:00:2f:c1:
         39:87:41:ac:dd:1b:02:7a:95:77:07:e2:d7:53:85:9b:ca:b8:
         b4:72:62:e5:7c:86:fd:71:98:97:f2:b5:30:fc:97:aa:8e:18:
         20:48:eb:81:12:4d:1c:8a:4d:ae:1b:f0:da:56:f6:78:f9:8f:
         52:06:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----