Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa
File:                     8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa (raw, json)
Hash identifier:          siK+5pur7LvAUsZC6tu85e5326gE15GDK7X1YgNxCfI=
Subject key identifier:   C5:ED:EB:08:22:A1:49:7A:77:D4:34:CF:D5:68:B4:EC:CE:CD:30:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66E99F68C40A19DF405D9F268022F64C2E80E7B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa
Signing time:             Tue 28 Oct 2025 01:01:53 +0000
ROA not before:           Tue 28 Oct 2025 01:01:53 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:9f:68:c4:0a:19:df:40:5d:9f:26:80:22:f6:4c:2e:80:e7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 01:01:53 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=fea1ae37ebd2ac5e314e4b6d89a564caace990f917d042ebc66ca1e656d2dcf4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:4d:59:3a:50:cc:69:84:df:3b:43:21:3c:
                    0e:15:9c:46:e9:fb:a9:2a:ce:a3:c3:1c:89:2b:ba:
                    98:22:a4:b9:ff:36:b2:dc:68:51:8d:dd:d6:32:36:
                    f8:45:99:b4:8a:9c:51:11:1f:41:24:bc:d8:7e:9c:
                    22:64:05:a5:a4:65:78:f2:db:33:aa:58:06:42:d3:
                    b5:5c:e9:46:70:64:db:79:92:89:cd:2c:f2:3e:0c:
                    75:eb:0c:39:c1:19:c7:a2:d7:3b:61:bc:5c:ac:08:
                    46:4a:7b:d1:10:30:54:74:eb:fc:05:be:2a:f6:ad:
                    69:0f:8a:29:fd:39:41:a9:b7:da:72:fc:ed:02:59:
                    c6:99:b4:fa:f6:3d:58:5f:79:16:c9:71:46:c3:58:
                    04:d8:2b:75:fd:1e:7d:1a:6c:24:e5:92:ba:65:e0:
                    6c:27:88:b1:32:eb:eb:c4:53:e3:a1:7e:87:86:7c:
                    b4:51:8a:44:18:d8:75:1b:18:a6:1b:17:26:32:a6:
                    0f:93:35:a4:e5:5b:53:79:6e:15:07:dd:2a:b8:8b:
                    e4:01:67:00:3a:c0:f9:b0:f2:20:0f:f5:3b:97:a3:
                    bc:c5:52:13:be:8d:48:cd:66:34:de:8a:93:e2:04:
                    14:cf:73:34:f0:20:8a:b4:7f:5c:72:7f:74:55:c0:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:ED:EB:08:22:A1:49:7A:77:D4:34:CF:D5:68:B4:EC:CE:CD:30:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f52c4e0-4179-48c8-90f5-2aa2db4bb0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:b5:8f:95:6e:ac:4d:d3:2d:a7:ba:74:21:02:78:1e:6d:
         a0:9a:8c:c4:95:b6:37:4b:ee:b3:1e:d3:d7:d0:2d:6e:57:7b:
         6f:bc:32:bd:de:37:d8:d2:17:fb:7a:25:89:66:28:ec:05:4c:
         6b:b6:b3:7e:66:90:e6:dd:20:ac:65:f8:81:d4:e1:dc:04:a0:
         7f:24:1d:3f:99:7a:b9:47:90:4a:06:6a:40:36:e7:c0:81:a3:
         b9:ca:2c:ea:f9:97:6e:88:c4:47:af:11:6a:00:71:7e:ec:67:
         b1:e9:dc:55:c1:8f:db:fd:37:6d:46:7b:5e:dd:fb:fc:b3:ad:
         71:bd:0e:16:24:cd:14:04:b9:08:d2:c9:5e:82:86:ff:a4:cc:
         9b:83:78:0f:7b:a7:a4:7c:dd:d7:8b:43:89:12:a1:a7:03:89:
         e1:9c:8e:93:0c:bf:97:f4:11:76:f3:39:85:d1:ed:7b:36:98:
         ec:ce:37:29:6a:d5:2b:75:71:ab:a1:2e:b8:11:fb:79:96:74:
         78:8a:df:0b:64:0c:14:21:ec:bb:54:d6:ca:46:63:14:35:28:
         8c:1e:da:f2:35:70:c2:02:23:da:84:fc:ac:3f:c1:fc:e9:1f:
         92:a2:d9:5d:7f:f5:c6:eb:8b:31:0a:ee:5a:4f:09:9c:41:bd:
         0f:1d:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----