Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
File:                     669641e2-6613-40c0-915f-0c45280a8d19.roa (raw, json)
Hash identifier:          Wg24pX9mtZ477nqcz/1L9joq6jTMUi+9rOgvanvg9po=
Subject key identifier:   6A:E5:67:C2:2B:53:CA:E1:54:6E:D3:6B:B4:1F:95:49:3D:A5:5E:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7978B5A22439B0964B935B971164F84770AF1C90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa
Signing time:             Sat 01 Nov 2025 00:20:07 +0000
ROA not before:           Sat 01 Nov 2025 00:20:07 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.73.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:78:b5:a2:24:39:b0:96:4b:93:5b:97:11:64:f8:47:70:af:1c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:20:07 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=adfc5ebcef4852fc707174f5ec5a6e900807ec84368775f6c547f27358130c14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:54:47:ee:bf:ae:32:97:43:e9:9a:3a:42:
                    a9:34:a8:76:eb:a2:3a:5e:4b:4a:e4:59:ac:49:46:
                    56:1f:0c:d5:24:df:1e:b0:cd:12:1f:71:2f:08:6b:
                    79:59:d9:42:31:25:00:55:20:df:d9:1f:29:55:b3:
                    be:bc:d9:42:c5:c0:6a:89:c4:28:1f:c9:2d:b4:bb:
                    8d:01:9a:14:bd:8c:37:19:26:05:8b:ae:5d:86:44:
                    59:4a:d8:c0:7c:bc:56:e9:4c:a3:77:64:26:db:d2:
                    74:52:91:ad:63:1d:2e:75:8d:0d:4d:55:d7:21:cb:
                    f4:1d:09:79:cb:0d:08:69:9a:ca:0c:95:a5:1f:f0:
                    25:27:b1:a3:9a:53:90:12:23:5f:d0:02:28:66:f9:
                    54:56:3a:2c:7b:a0:e8:d6:e5:a0:b9:f4:3d:80:f1:
                    9a:66:e4:92:fe:3f:af:14:64:14:49:6e:21:8f:16:
                    07:87:83:dd:da:80:6a:91:2b:f6:88:d8:90:71:68:
                    64:a6:1b:2a:97:56:48:e3:9f:bb:0f:96:ae:97:1e:
                    68:12:a9:60:5a:6b:17:5b:a6:e2:1c:fd:13:a4:f9:
                    43:07:ed:1c:d7:e5:ae:fc:b7:44:70:ae:04:6d:86:
                    d7:bf:9b:90:f9:c0:67:ac:06:2b:7a:bc:fb:b0:b7:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:67:C2:2B:53:CA:E1:54:6E:D3:6B:B4:1F:95:49:3D:A5:5E:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/669641e2-6613-40c0-915f-0c45280a8d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:ba:1d:71:a3:08:ec:5c:a5:ac:0f:ef:4f:fb:f0:0d:f1:
         ce:cc:03:87:21:21:99:69:9e:68:93:3d:8c:ad:88:ee:e1:62:
         58:4b:72:21:17:3d:f9:a4:cf:a7:fa:01:a4:70:ed:a9:07:7d:
         c8:e6:e6:20:f5:1f:8d:d4:73:f3:bc:a3:79:cc:ed:db:bc:7c:
         b3:ab:54:ef:51:43:7b:f2:0c:fb:e0:b4:1d:58:9e:8a:e5:16:
         d0:65:d1:1a:f3:f1:74:33:cf:80:49:1f:1c:7a:eb:ad:0d:ea:
         31:10:cb:82:84:77:1c:a6:e1:42:d1:77:11:01:25:78:d2:a3:
         c3:0c:f4:85:1b:c4:75:af:6b:a8:7d:56:e9:35:6a:6c:bd:d7:
         f4:4b:a1:fa:ac:f0:b1:84:23:08:71:98:71:86:b9:32:54:50:
         71:69:86:11:90:4f:75:b1:56:a5:1f:3d:3a:8d:9b:ba:dd:ca:
         8e:97:35:fb:1a:1f:cc:0e:1a:cc:1c:91:9a:69:44:85:48:9c:
         f6:f7:eb:d9:5b:35:07:7d:e8:43:ae:cb:5a:4a:8e:1d:17:74:
         53:e5:1f:c5:ea:14:f7:9c:d8:00:a7:74:ba:97:df:bf:9b:66:
         5a:a7:09:93:7f:98:79:08:2b:c4:b7:55:8d:ca:35:09:bc:04:
         e1:3c:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----