Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
File:                     8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa (raw, json)
Hash identifier:          94OOi0RirqLd8TKlaAACHOY310mZvEmx2COEA1ysY1U=
Subject key identifier:   FB:6F:FE:D9:74:61:9E:79:D8:61:B7:1F:9D:43:74:5D:3C:EB:C0:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36043CFFBA4E0DFDD806F52396CB516AC1E1ABB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
Signing time:             Sat 25 Oct 2025 00:01:19 +0000
ROA not before:           Sat 25 Oct 2025 00:01:19 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        20.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:04:3c:ff:ba:4e:0d:fd:d8:06:f5:23:96:cb:51:6a:c1:e1:ab:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:19 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=60e8494231713c794d575bd9e614ce6585eeecbf28c90752fb64577e64fb85df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:41:0d:30:e9:9c:6c:ca:ed:cd:0d:90:c9:
                    70:87:07:92:98:1c:d5:2c:57:15:60:d9:f1:d3:98:
                    b1:65:e3:bf:91:83:49:00:d0:cd:d9:8e:35:c7:29:
                    08:3a:4b:86:0f:b5:b6:a0:7b:ca:78:1a:04:87:d7:
                    c3:bd:24:6d:d3:f9:b2:54:f7:7a:45:81:68:56:a0:
                    c8:cf:5d:48:73:4b:b8:31:7e:8c:b7:1b:f0:c0:3e:
                    ab:c7:56:82:2e:12:94:af:1d:10:80:db:df:90:99:
                    8d:89:b4:a2:9e:67:db:21:bb:2d:cf:a4:fd:fe:9c:
                    66:1f:76:50:a7:fc:3e:f9:61:5a:3a:5e:18:06:b6:
                    6e:bb:b9:2b:15:14:73:b2:9f:7d:bf:88:7e:7f:f3:
                    3d:54:0e:aa:00:87:33:5b:5e:8e:77:ef:5f:34:3e:
                    d2:11:0d:05:20:6a:80:11:16:76:d6:80:3a:61:aa:
                    63:48:c7:88:65:00:2a:d6:fa:8f:e9:e2:15:db:0a:
                    da:c2:f1:48:21:bc:b1:b5:73:45:78:a9:f3:a4:5c:
                    99:b7:fa:c6:11:df:32:54:87:b8:14:b2:3e:ec:bb:
                    2f:ff:cc:8f:e1:fe:13:42:4a:26:57:1a:1f:47:7d:
                    41:67:d1:bc:f3:29:25:f7:1f:c7:c4:33:cb:fe:91:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:FE:D9:74:61:9E:79:D8:61:B7:1F:9D:43:74:5D:3C:EB:C0:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:64:4d:44:ed:4a:86:64:99:7c:62:d0:a0:43:41:f0:e0:0c:
         6a:a7:a9:36:f1:ee:5d:56:96:dc:88:9e:fa:5a:8a:6c:2e:10:
         4f:5f:b6:50:f0:53:fc:6e:b3:2c:dd:cd:47:64:f9:01:14:85:
         9d:c1:ca:b5:a0:66:99:58:28:c1:bd:6e:76:f9:49:49:3c:bd:
         b5:da:ef:85:68:f0:d6:0b:66:40:86:24:d4:02:c0:03:75:ec:
         d1:2f:f0:ce:71:ec:61:ad:89:c0:d1:b0:6f:13:37:e5:5b:e0:
         f9:29:20:46:ea:f2:62:25:82:90:df:40:36:e4:8d:cb:2b:0e:
         2c:33:55:fd:52:ff:92:c4:c5:fe:4f:a4:51:a2:4a:e2:5d:df:
         f8:14:a3:2c:6f:e8:6a:64:66:04:bf:dc:ed:d4:b6:b5:0b:99:
         89:0b:54:8d:18:c2:46:54:cc:d6:47:ae:d3:9e:60:2a:02:4a:
         2b:20:d7:ac:74:91:1a:d1:19:38:61:79:89:96:15:60:0d:8e:
         ea:d7:c0:1d:2d:c4:cc:22:a0:fc:7d:d1:63:32:15:8d:fe:1c:
         28:ca:51:25:d2:33:ab:a1:b4:90:b2:ec:a2:07:9a:58:69:a3:
         07:21:19:93:45:e1:b5:2a:da:3c:09:c5:04:41:64:b6:cf:72:
         5a:7a:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----