Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa
File:                     9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa (raw, json)
Hash identifier:          ayTChvRVL/S9qzZ02L6sEPEc+i4hTO7ZWgyVuooApHA=
Subject key identifier:   39:AB:0D:D7:76:32:F9:83:7A:99:9F:B7:0F:1B:31:13:6A:EF:E7:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BB0DEC520DFE413DE2E521B6C5E9A398929D934
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa
Signing time:             Tue 21 Oct 2025 00:20:03 +0000
ROA not before:           Tue 21 Oct 2025 00:20:03 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        149.186.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b0:de:c5:20:df:e4:13:de:2e:52:1b:6c:5e:9a:39:89:29:d9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:20:03 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=58e30c7388026a98eacc86495497aad1ed1066c9b3927595e42ab1410d9a0458, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:a8:0a:0f:27:85:dc:cc:b0:53:ce:21:15:
                    e8:54:64:e8:bf:ee:50:17:7b:4d:c2:92:3a:42:0d:
                    56:60:96:60:94:23:54:5b:82:c9:0f:75:32:8a:59:
                    51:fd:93:9d:fe:7d:57:78:23:98:c1:07:ae:e1:28:
                    a4:c3:82:e3:cf:28:a9:55:b3:09:ba:25:d8:0c:67:
                    e2:82:f6:2a:f3:dc:83:00:8c:e5:e3:6a:a8:e3:2e:
                    a5:9f:be:b4:64:0d:30:38:c6:66:09:2f:4c:84:db:
                    8a:45:2f:84:d1:a6:01:5d:86:35:49:94:10:ba:2a:
                    0e:74:ad:d4:55:37:fc:6d:b9:30:59:10:3b:fa:32:
                    80:6c:ef:1a:c2:03:a4:b6:d8:53:78:41:b2:ee:f9:
                    f7:f7:2a:3c:95:30:0f:a0:1d:8d:ae:2d:38:c8:d9:
                    9e:ae:92:7a:bb:94:4e:73:c7:ca:e1:66:e2:de:84:
                    74:d4:ae:cf:8f:32:ec:9c:a5:e0:5a:24:e1:4d:7e:
                    51:21:a9:ae:a9:57:70:d9:b9:40:f4:a3:2c:13:d1:
                    11:14:9e:0f:a4:72:eb:05:44:9a:29:19:9a:ca:ed:
                    6f:81:c5:68:ff:c1:17:ea:b6:98:4e:ee:ed:60:7f:
                    a6:5e:99:f1:69:56:e5:54:91:a4:ce:57:e7:01:b4:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:0D:D7:76:32:F9:83:7A:99:9F:B7:0F:1B:31:13:6A:EF:E7:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:73:29:89:08:59:da:ad:62:e5:e9:66:57:c6:f1:e3:39:
         a0:00:cc:bb:93:73:02:91:36:da:a5:b5:92:79:8f:bd:69:64:
         a3:20:e8:89:3f:78:fd:0d:10:0e:21:a7:e6:c2:d1:47:76:60:
         96:ec:1d:60:2a:de:c1:70:a4:21:fc:39:3d:5e:21:27:49:e7:
         f8:a3:53:2f:8e:e1:a0:a6:eb:c4:ea:52:55:8b:f0:86:57:7c:
         3f:31:7f:dc:fc:d4:5a:1f:f0:74:c2:cf:97:74:6b:c0:1c:8a:
         76:c8:8d:63:ed:e8:8f:d9:3e:2b:92:83:a2:51:7f:d0:e2:a8:
         3f:3e:56:fc:e5:18:30:e8:33:e2:66:5f:24:2b:48:86:db:f4:
         f7:27:52:f7:62:2c:75:b1:06:a6:99:dd:de:d5:3d:fe:7e:60:
         02:68:68:d5:c4:17:2e:85:07:79:35:d0:2b:62:a4:f1:91:18:
         6a:23:07:93:35:93:26:fe:37:9c:55:2d:55:d2:46:c3:a8:f6:
         67:e7:f7:51:e1:64:ea:0c:56:6f:1e:97:ee:41:43:be:55:d3:
         86:fb:5f:50:98:8d:2b:df:dd:9b:f1:18:30:18:08:19:69:00:
         f2:ce:42:12:2e:43:7f:57:8c:24:7b:78:69:61:66:12:d7:3c:
         f4:d9:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----