Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa
File:                     67121d2f-f3b8-4002-9880-4ceb53b060ef.roa (raw, json)
Hash identifier:          jI6Rb6sgwtqS/QXO1CaFAtZDLFmdNDi8CazPHHrybOg=
Subject key identifier:   0E:0C:4D:3F:1B:BA:4E:81:97:05:86:44:4C:76:15:AA:25:E9:87:A4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45C5258C83FF0E40CF98DAF69DE6D78FC837F6A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa
Signing time:             Sun 02 Nov 2025 00:31:19 +0000
ROA not before:           Sun 02 Nov 2025 00:31:19 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:25:8c:83:ff:0e:40:cf:98:da:f6:9d:e6:d7:8f:c8:37:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:31:19 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=a2833e43e5690342433a89af2165a7345b1d36dde7bf3b761211d2747a6ed6ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:07:b7:cd:eb:4a:24:91:a7:bb:4b:f9:e1:
                    89:f3:ab:8b:52:25:15:29:e7:83:5f:d6:c4:90:1e:
                    d3:73:9d:55:59:a2:fd:08:50:e3:40:a6:fd:c1:29:
                    3e:d7:62:32:47:cb:a4:3a:37:30:d2:23:b8:99:5c:
                    f8:e0:28:5a:86:ec:4e:7e:e1:4c:a0:de:60:3a:ec:
                    25:57:84:6f:19:71:dd:36:22:e1:1d:77:f0:e6:9e:
                    d0:be:c2:e2:06:05:a8:c9:4e:6a:47:6b:09:c1:4c:
                    62:6a:5e:e3:81:b8:26:8f:2b:8f:a8:8e:ba:f3:dd:
                    25:bf:bb:53:13:b3:87:71:6f:48:49:f3:17:d6:55:
                    71:90:0f:c1:d1:95:85:7b:5a:dc:73:90:3e:2e:d3:
                    4e:0c:e1:42:c6:2d:54:97:f4:e8:07:f7:f0:35:27:
                    4a:c2:c2:68:a8:46:d8:35:3b:0d:33:89:04:4d:35:
                    2e:57:50:9d:48:46:a7:81:70:87:34:34:8b:d4:2b:
                    a3:0b:34:6b:8a:df:f6:e0:b6:e5:59:6b:46:28:09:
                    b2:d0:5b:70:d6:95:ed:95:c3:e4:de:a2:17:52:f0:
                    19:d9:19:79:cc:b4:53:83:2d:d8:d9:46:70:f3:99:
                    e9:ce:74:3f:da:83:2f:e0:d3:cf:b1:7e:be:52:e1:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0C:4D:3F:1B:BA:4E:81:97:05:86:44:4C:76:15:AA:25:E9:87:A4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:f1:ba:28:7b:27:b1:33:00:3b:2c:05:8c:b8:3b:a3:c7:91:
         fc:0b:a8:22:6c:bb:30:6c:f6:57:dd:14:ab:0d:e8:09:b2:e9:
         ac:95:13:bf:c7:4e:c4:57:3b:3e:0c:b7:72:92:aa:4b:d1:e5:
         f2:cd:53:70:db:4d:d7:f9:30:58:2d:bc:42:86:0b:4d:4c:97:
         31:92:bc:fd:f0:13:9f:35:c0:40:8f:7c:d4:f3:96:fe:be:51:
         4f:55:8a:c1:58:f0:a7:f4:2b:e2:1f:7d:f2:8c:06:27:72:0c:
         0d:51:8d:32:31:56:a9:c6:bb:60:11:17:ea:91:48:b1:f7:f7:
         e2:ad:f4:fd:11:2d:49:4f:19:16:30:7f:17:45:79:20:c8:c7:
         10:38:f5:32:f2:ab:ef:9a:00:b8:ee:ab:b9:1b:bf:64:ff:a7:
         df:85:f5:24:48:18:23:c5:58:08:b1:be:73:a9:a6:69:f3:8e:
         8a:9e:d7:fe:9e:30:88:57:46:9c:c4:e4:34:e5:dd:0a:4d:f1:
         f6:01:81:bf:63:ba:2d:aa:3a:da:16:d2:10:a8:5b:9e:db:fe:
         7e:30:b8:c3:95:c4:f8:79:36:eb:ea:cf:82:fb:58:84:95:eb:
         05:fe:ef:6c:18:d8:ab:91:b9:ae:ed:07:ad:68:11:6a:45:97:
         e7:86:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----