Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa
File:                     9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa (raw, json)
Hash identifier:          cTbqMTTg3r3TUUMGMcobnyEjFOJKJLyfyjZo+RVrcZ4=
Subject key identifier:   12:02:36:C9:AA:BB:A5:0F:99:F9:13:3A:E4:C3:AE:AC:D3:94:D8:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C3C1639879DF272C3D42BCE39AFC2F2FF9EFE69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa
Signing time:             Sun 02 Nov 2025 00:40:07 +0000
ROA not before:           Sun 02 Nov 2025 00:40:07 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3c:16:39:87:9d:f2:72:c3:d4:2b:ce:39:af:c2:f2:ff:9e:fe:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:40:07 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=d02f2356e64783c1e7bb1009d1a556ddbebc3b421ee143d96735d33b3a3581b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:be:6a:f6:05:84:ca:4b:22:7d:5e:6e:b8:
                    f5:3a:5b:b6:22:43:49:96:50:73:70:c9:9c:b2:71:
                    4d:94:76:15:db:2e:be:1b:82:e0:55:11:b6:e3:5f:
                    b8:f4:9a:a7:33:b3:ea:4f:cb:64:78:7d:46:f1:01:
                    7b:6e:67:38:3a:76:45:6d:28:7b:1a:c3:67:3f:af:
                    12:80:9d:b9:0c:df:38:5a:17:43:63:0d:14:32:02:
                    39:2d:be:ef:f9:f6:bd:89:ab:2e:e2:01:96:a2:0a:
                    18:7b:1e:21:17:69:54:23:ba:c7:45:8b:67:4d:48:
                    48:f4:c7:1f:98:f8:92:e5:a4:b2:33:70:60:48:13:
                    fb:a6:f0:21:cf:d0:be:da:b8:7c:b8:ab:69:fb:8a:
                    3f:47:f7:c4:27:54:7d:93:e4:17:1f:93:c3:72:03:
                    39:47:ae:d5:e6:66:6c:07:86:07:d2:52:22:71:ca:
                    90:5c:3d:54:c9:ba:73:54:b4:64:04:1d:0a:6a:f9:
                    e8:2c:1c:b1:d6:a8:dd:8d:4e:e8:da:1d:17:6b:86:
                    ad:18:5a:22:de:b2:37:0c:43:ca:5a:ec:d0:4c:01:
                    92:24:71:29:0e:38:ba:90:e8:84:ab:b0:6d:a4:e7:
                    e6:66:13:8a:52:61:f1:04:59:d5:c0:c3:75:67:04:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:36:C9:AA:BB:A5:0F:99:F9:13:3A:E4:C3:AE:AC:D3:94:D8:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a62a997-9b7b-441a-b9b2-dc02180d8cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:3d:68:ce:6c:93:c8:ba:f2:c5:03:9c:a2:4d:ef:0d:bd:
         f3:8d:9b:b6:b7:84:67:4e:6f:6d:b4:df:90:8c:25:9f:a4:97:
         03:db:81:82:fb:63:c1:50:a6:42:15:c2:95:5f:ad:fe:33:37:
         a6:f9:32:4b:96:c3:12:12:8a:89:80:a8:d7:36:a5:7c:51:39:
         9a:60:1c:a8:c2:f2:b8:0f:ac:e5:fc:3d:c7:22:0a:de:b6:e9:
         f7:56:1b:2a:76:1a:40:86:84:25:3e:3a:91:39:ab:15:72:64:
         9f:20:db:7a:53:d3:de:40:5a:32:3e:de:58:4f:45:ef:66:37:
         26:80:18:34:6e:d5:7a:28:31:ac:8d:c9:84:c9:db:dd:68:e9:
         72:71:02:d4:fa:df:f5:ea:a6:d7:c3:98:5f:2d:f2:90:fb:fb:
         25:4a:da:5e:2e:48:6e:fc:26:05:23:97:e9:91:2c:c8:64:4a:
         77:67:0e:65:14:07:be:7c:63:62:9f:4f:13:d3:7a:ac:1b:22:
         84:91:ec:33:86:ac:cc:0f:a7:90:e2:25:d4:aa:d3:6d:d3:a4:
         47:2c:19:c9:8e:3b:77:94:95:c3:b9:35:d1:a5:26:4d:63:dc:
         6b:a3:27:39:e0:6c:16:d7:09:6e:17:bb:6b:54:27:a9:7d:9d:
         37:00:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----