Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa
File:                     6180caee-ed00-4870-a7a1-8606e433e128.roa (raw, json)
Hash identifier:          hE58GZRsaT3knp3wvM9cgAAGJjQ+PtUyxDJw+fTeEho=
Subject key identifier:   FE:09:B3:21:DE:2E:4B:4C:4F:97:2C:E8:A9:C0:8E:8B:36:25:B7:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       302B0040884DBAF4982983CB074DAA6253ACC6C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa
Signing time:             Tue 04 Nov 2025 00:21:38 +0000
ROA not before:           Tue 04 Nov 2025 00:21:38 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        78.12.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2b:00:40:88:4d:ba:f4:98:29:83:cb:07:4d:aa:62:53:ac:c6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:38 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=48782c23d116cccce0fd3cab2acd08c6b4f429db2df93b997e33b3225e7c2256, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:b4:0e:f3:36:3a:c6:78:99:1a:70:cb:b6:
                    5b:9f:e6:fa:0e:f3:21:33:9e:8c:22:dd:a5:f1:a0:
                    cb:ef:ef:10:b1:9a:b8:86:a4:09:1b:ad:35:14:71:
                    08:cf:56:a3:ce:a6:9d:a4:95:6c:53:70:ab:a9:40:
                    9a:3f:cb:89:f6:fb:e8:dc:9e:68:07:30:72:40:fe:
                    bb:87:07:60:a1:e1:97:42:a6:9e:40:66:ff:32:b0:
                    75:b3:a3:5c:47:42:b4:03:84:87:23:0d:b1:06:e7:
                    be:4c:a5:c5:e3:6e:4f:67:14:b9:f9:a9:40:ab:a2:
                    44:85:88:f4:50:42:2c:cd:c6:f6:d1:73:d7:42:d4:
                    2e:84:d7:c6:7e:68:1a:8a:8b:79:61:c9:38:5d:57:
                    bc:36:d1:8c:c9:6d:9a:6b:63:6f:f7:8c:0e:d4:7f:
                    29:ca:29:85:43:09:ea:22:75:c8:fb:86:b1:f4:96:
                    4f:cb:fd:0b:52:75:fd:26:c6:97:f7:e6:4f:d8:0c:
                    30:2f:3b:4b:95:7c:a8:ce:08:79:58:43:14:68:f9:
                    ba:35:40:ab:c1:e3:c1:41:25:a3:2c:fb:56:86:44:
                    c9:af:55:d5:80:48:56:cf:9f:a8:c8:73:ea:c6:dc:
                    6f:10:3b:7b:c7:1b:fe:38:85:53:ea:35:e5:54:dc:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:B3:21:DE:2E:4B:4C:4F:97:2C:E8:A9:C0:8E:8B:36:25:B7:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:41:c1:cf:81:31:24:09:d2:a9:f6:ea:b1:b5:5c:84:55:77:
         6d:7f:fd:a0:88:d7:85:ab:5b:85:c1:76:d7:73:28:c4:cd:fb:
         b5:e3:15:05:22:9c:4d:22:df:04:ca:8b:1a:08:b5:35:b0:6c:
         1d:c2:9b:93:e4:9e:51:99:df:97:ff:03:82:7c:78:70:60:5b:
         b1:fb:3f:68:ef:09:76:14:3e:98:55:69:5d:0b:62:da:4b:60:
         1f:fa:be:85:12:19:34:ba:40:ef:ab:22:7c:a5:6a:42:29:c1:
         93:ef:4f:55:64:71:0c:61:1c:a4:47:3d:e5:47:0e:3e:79:4b:
         b6:b7:5c:86:09:a6:a0:7d:81:9a:49:19:cb:46:76:d4:96:5a:
         16:58:b1:84:3a:06:f3:5c:21:8d:9d:71:7d:f1:03:99:d8:0a:
         63:c5:db:b5:ce:86:67:c1:ec:30:e0:db:e9:d5:b8:1a:0c:37:
         cf:08:31:74:20:bf:e2:21:a5:56:99:04:4e:5d:f6:8f:a8:58:
         5e:40:e6:84:b8:4a:7e:90:62:27:6a:30:35:16:5c:d5:16:1d:
         53:64:8c:09:9f:65:81:fd:62:4d:d8:61:9e:19:1f:84:d5:bf:
         72:4b:99:53:25:c1:12:0c:63:bf:b4:21:c9:46:49:2f:e8:38:
         59:b2:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:23:05 2025 by rpki-client