Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa
File:                     97873d74-2b1b-42d6-9c41-b2870237ac5b.roa (raw, json)
Hash identifier:          sPhL3PEaKhr+RnKsAbYYX1N6AvzJTupFPQ2X4Ws2cRc=
Subject key identifier:   ED:80:81:67:5C:28:B1:5B:6B:F7:16:AF:57:67:BF:FE:A6:39:EA:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       374A2C5B47A6C97AAB48912B747676779F387F46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa
Signing time:             Sat 01 Nov 2025 00:51:35 +0000
ROA not before:           Sat 01 Nov 2025 00:51:35 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:2c:5b:47:a6:c9:7a:ab:48:91:2b:74:76:76:77:9f:38:7f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:51:35 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=9a8e7dbe6379baa2fa9f215c45d173f4352894e12e1c948f6343064c94110762, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:a6:7a:0f:03:1c:e3:dd:8e:1b:48:d7:78:
                    4b:32:82:52:b4:c7:d9:42:6c:97:27:e2:e2:ac:ae:
                    5b:dd:26:51:e3:ed:e7:b5:c8:f3:56:64:55:e3:1c:
                    c7:b6:93:c4:b8:29:fb:6e:a9:f6:28:ea:ae:32:c6:
                    88:02:2c:ca:e2:58:23:83:7c:2a:03:4c:ae:0d:6d:
                    44:ed:84:e6:9a:ef:71:cc:c4:cb:1c:ca:d8:da:1a:
                    6b:fa:13:03:bc:e8:98:be:63:37:4e:7e:a8:49:b3:
                    5e:e3:57:ae:6c:4e:6b:c0:21:a0:24:9d:4e:7c:c4:
                    2a:ba:eb:ab:63:4f:9a:13:a7:31:39:a5:1d:00:6f:
                    11:c6:77:98:07:08:d2:89:00:b1:0b:ff:a0:c6:02:
                    41:b5:63:bb:a4:93:fd:14:9e:e1:2b:41:99:6b:08:
                    19:4d:0e:5f:d6:fd:df:f4:88:aa:a2:72:fd:6b:7d:
                    2e:47:dc:5f:7b:af:c0:9c:ce:80:20:cf:0e:49:72:
                    61:1e:d2:9e:11:73:4b:2b:85:4d:ca:bc:17:60:ce:
                    9d:d3:ae:2a:c8:06:37:e9:6e:d4:b7:cf:1e:df:8b:
                    d4:06:7d:3b:6c:b6:fa:1f:b3:44:ce:af:fc:20:5a:
                    26:fa:c4:a5:52:ff:01:ca:4e:4c:ee:04:b7:c9:14:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:81:67:5C:28:B1:5B:6B:F7:16:AF:57:67:BF:FE:A6:39:EA:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:92:df:c3:9d:35:08:ab:77:f1:77:00:83:96:74:63:bf:
         05:8a:6a:da:50:fb:8f:70:3b:e5:55:26:59:ba:34:b1:ba:6e:
         82:34:31:1d:33:1f:a4:22:de:0b:da:37:12:81:30:6a:71:c9:
         9a:54:4a:f1:6a:9d:98:1c:ff:98:2d:e5:72:09:58:99:af:e6:
         90:b7:d2:60:3b:c8:9c:13:ec:71:97:76:af:5f:48:47:fc:94:
         9e:46:fb:05:87:73:c2:b1:5b:00:29:d2:0e:94:33:7c:a1:bc:
         9b:a2:8a:b8:61:44:4e:99:28:c1:3c:11:71:3a:bb:ae:06:e0:
         a0:2e:40:93:4f:5c:6c:f5:45:e1:68:12:43:74:f9:36:82:e1:
         59:44:be:0d:16:d0:44:fe:62:ac:14:63:6f:30:df:19:49:a8:
         be:95:e4:74:aa:ba:1a:ec:ed:1c:6b:93:8b:cc:92:f9:c7:9c:
         cc:f3:6d:9c:b6:c3:32:64:f5:58:26:79:63:fa:7f:d1:97:c9:
         fc:5e:7f:fd:8f:03:0e:68:b4:9f:9e:15:b8:64:4e:d6:29:6a:
         d3:b4:61:98:e0:c8:d1:b8:bb:5d:27:8a:a1:da:00:c3:2b:8f:
         01:dd:08:81:2f:3c:71:dc:a9:d4:33:6b:b8:47:3f:bd:70:9b:
         21:f6:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----