Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f1da6b-387e-4a59-bf17-c099fcb11c98.roa
File:                     94f1da6b-387e-4a59-bf17-c099fcb11c98.roa (raw, json)
Hash identifier:          wU44FBiv28Y6hWTNL0Gx+uIG4rYCDf0ayg5Y+j9Iv1k=
Subject key identifier:   75:FC:3E:E6:B8:AA:A5:F6:4B:A1:6A:F8:17:8C:6D:F1:83:1F:D6:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1041D305AC77915572433D7249FE571B5EBEF586
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f1da6b-387e-4a59-bf17-c099fcb11c98.roa
Signing time:             Wed 22 Oct 2025 00:10:10 +0000
ROA not before:           Wed 22 Oct 2025 00:10:10 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.28.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:41:d3:05:ac:77:91:55:72:43:3d:72:49:fe:57:1b:5e:be:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:10:10 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=100c0685ba618ae523d80309f960bf72d08e28c83892c81ad290b1dfe16ec130, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:52:8b:fd:5c:df:77:2d:f0:0e:98:0e:97:37:
                    75:0e:93:f1:ab:d0:aa:fb:38:88:4d:9d:76:6f:d8:
                    b2:0d:c8:17:c7:7a:3c:0e:76:a6:57:d8:99:a9:3c:
                    35:c0:0e:f9:1c:2d:ce:b7:46:01:e3:b0:c9:a5:ff:
                    72:b9:4b:23:d7:e2:9a:16:b5:89:c4:d2:71:e1:00:
                    ef:39:ca:8a:2a:eb:74:fe:d3:6e:59:db:43:88:02:
                    43:69:c2:e3:ef:79:b8:c2:a1:5a:52:10:90:19:68:
                    e4:e9:87:60:1b:ea:03:cd:68:55:1c:83:6d:50:14:
                    58:6f:6d:9e:d7:26:cf:4d:fb:9f:38:20:f7:7e:b4:
                    bf:7f:79:af:62:bd:dc:89:2e:fa:40:77:d0:53:75:
                    e6:1c:0f:84:08:92:db:4e:05:7f:d8:b4:62:05:e7:
                    c2:13:0e:8f:e2:9f:67:b3:c8:77:6a:45:28:14:7d:
                    ce:68:71:6c:9a:ad:47:f3:02:cf:46:16:d1:8f:8b:
                    ea:ff:32:56:e0:6e:6f:66:ef:6b:4f:dd:64:22:6f:
                    cc:1d:ac:71:f1:36:78:99:ec:e5:23:e0:49:42:a6:
                    5f:a6:0c:bb:4a:8e:25:a4:15:26:1b:3f:01:95:90:
                    f9:9a:4a:ea:9a:d6:32:4f:80:ee:22:f4:40:3a:9c:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:3E:E6:B8:AA:A5:F6:4B:A1:6A:F8:17:8C:6D:F1:83:1F:D6:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f1da6b-387e-4a59-bf17-c099fcb11c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.28.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c0:5c:72:c1:91:0f:c3:df:09:2d:34:96:e9:76:8e:67:8b:b4:
         97:0f:d6:fe:30:d5:d7:22:b0:de:07:ed:8e:a3:00:8d:2e:1d:
         cd:83:fc:c4:30:ab:9b:15:b8:0a:0e:79:50:9e:0e:58:15:60:
         dc:e3:ef:41:8d:0f:38:fb:11:fa:bc:1b:89:5c:41:95:58:3a:
         34:3d:43:fc:67:2f:a0:26:cd:7e:87:07:44:1e:8b:bb:21:a2:
         b7:2b:99:fc:05:9e:d2:e7:a1:06:bb:f8:e9:f0:3b:f1:b1:c7:
         b0:0e:da:e6:e6:03:7b:d1:83:e2:f5:99:94:cc:5b:25:a7:97:
         3e:ac:8e:d7:f5:25:69:1f:b1:d7:71:63:ce:b7:f4:87:b9:d8:
         4e:71:54:2e:25:2e:53:fc:d5:fe:1d:b1:a2:79:e5:b2:da:f9:
         19:48:7e:94:fc:e4:70:de:f6:ca:c9:e2:52:48:9d:24:74:18:
         3c:29:51:11:db:04:3f:00:c9:5b:4b:80:a9:b9:1b:d9:e5:58:
         18:11:8d:00:91:28:33:6d:f8:e9:6e:4f:47:eb:f7:2c:b7:fe:
         e8:f3:c7:5d:90:5c:62:4e:1c:a0:46:c6:06:4a:dd:73:f1:6f:
         f9:7a:dd:c5:8d:7a:28:c1:94:07:bd:c3:50:80:17:3c:1b:5f:
         4a:a8:cd:5e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEEHTBax3kVVyQz1ySf5XG16+9YYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIyMDAxMDEwWhcNMjUxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMDBjMDY4NWJhNjE4YWU1MjNkODAzMDlmOTYwYmY3MmQw
OGUyOGM4Mzg5MmM4MWFkMjkwYjFkZmUxNmVjMTMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD2Uov9XN93LfAOmA6XN3UOk/Gr0Kr7OIhNnXZv2LINyBfH
ejwOdqZX2JmpPDXADvkcLc63RgHjsMml/3K5SyPX4poWtYnE0nHhAO85yooq63T+
025Z20OIAkNpwuPvebjCoVpSEJAZaOTph2Ab6gPNaFUcg21QFFhvbZ7XJs9N+584
IPd+tL9/ea9ivdyJLvpAd9BTdeYcD4QIkttOBX/YtGIF58ITDo/in2ezyHdqRSgU
fc5ocWyarUfzAs9GFtGPi+r/Mlbgbm9m72tP3WQib8wdrHHxNniZ7OUj4ElCpl+m
DLtKjiWkFSYbPwGVkPmaSuqa1jJPgO4i9EA6nJqPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUdfw+5riqpfZLoWr4F4xt8YMf1vIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0ZjFkYTZiLTM4N2UtNGE1OS1iZjE3LWMwOTlmY2IxMWM5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEjHDANBgkqhkiG9w0BAQsFAAOCAQEAwFxywZEPw98JLTSW6XaOZ4u0lw/W
/jDV1yKw3gftjqMAjS4dzYP8xDCrmxW4Cg55UJ4OWBVg3OPvQY0POPsR+rwbiVxB
lVg6ND1D/GcvoCbNfocHRB6LuyGityuZ/AWe0uehBrv46fA78bHHsA7a5uYDe9GD
4vWZlMxbJaeXPqyO1/UlaR+x13Fjzrf0h7nYTnFULiUuU/zV/h2xonnlstr5GUh+
lPzkcN72ysniUkidJHQYPClREdsEPwDJW0uAqbkb2eVYGBGNAJEoM2346W5PR+v3
LLf+6PPHXZBcYk4coEbGBkrdc/Fv+XrdxY16KMGUB73DUIAXPBtfSqjNXg==
-----END CERTIFICATE-----