Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
File:                     9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa (raw, json)
Hash identifier:          +WDyiBocf3ES7VFNBqDnQlnkf2vpkSyPQTFNYOwH+Ck=
Subject key identifier:   F7:AB:23:59:19:99:AD:0E:7E:70:50:90:48:7F:0D:27:9F:A6:A1:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       351AC2EA71DAE8BDDA9CD008700953055D25D7B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
Signing time:             Fri 31 Oct 2025 00:20:43 +0000
ROA not before:           Fri 31 Oct 2025 00:20:43 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.128.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1a:c2:ea:71:da:e8:bd:da:9c:d0:08:70:09:53:05:5d:25:d7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:20:43 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=e73ac7f3950f9a024c9b799e9e197472dbc8944a893e52d066b821b92b64b22d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:ed:13:6a:ef:57:aa:af:29:4e:11:97:2f:
                    a2:ea:55:95:73:0a:50:e3:6c:1b:fc:fa:c1:83:16:
                    94:2a:43:6e:e1:da:c2:20:b0:e4:9b:3e:9a:73:12:
                    29:65:b5:0b:50:03:c8:2a:8d:33:72:6a:0f:4f:f5:
                    02:a6:3d:4f:ed:37:77:e2:f4:bc:3a:bf:ba:cb:30:
                    3c:ee:83:04:55:33:47:e7:d4:f4:7d:b0:71:ad:b4:
                    c8:01:51:bf:70:29:31:bf:e5:98:56:3f:5e:88:44:
                    c5:db:c7:4e:a2:a7:13:4b:84:a0:05:2e:f8:09:eb:
                    4d:37:d8:46:30:01:79:5e:32:ee:cf:32:e9:8d:6a:
                    b1:91:b2:80:d5:06:26:1e:21:66:55:44:2e:42:74:
                    ea:70:1e:f8:da:b3:7f:10:14:f1:04:b4:1f:11:e3:
                    b5:9f:2f:e0:7a:87:90:cb:34:63:ca:3a:69:5f:65:
                    55:86:c4:70:d8:90:6e:2f:6d:d2:3f:99:34:5b:8b:
                    08:ea:46:ec:ef:4f:d9:37:18:fc:f8:c1:1d:59:c3:
                    a7:34:04:a6:b8:77:c5:5f:d7:01:31:cb:ce:9f:fe:
                    0f:b4:36:e2:88:6d:52:61:fe:d4:ab:c1:92:8f:fb:
                    ef:a0:61:9c:fd:0f:5b:76:95:6a:b7:24:40:64:ec:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AB:23:59:19:99:AD:0E:7E:70:50:90:48:7F:0D:27:9F:A6:A1:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:b2:49:cf:48:d8:9b:f2:b7:cf:84:84:a7:09:71:95:e1:
         d2:14:94:4f:56:51:c3:4a:c4:c3:fa:2e:e2:23:24:5e:34:d7:
         89:d5:ab:b3:c1:ec:79:60:d4:54:2b:77:e5:7f:b0:57:ab:73:
         46:d0:75:6f:a5:21:60:e9:7c:0c:1c:78:fd:b2:a7:bc:b9:2b:
         72:de:34:b7:25:8c:7c:e3:df:c2:dc:ba:43:37:4c:0d:b5:14:
         77:88:a5:43:0d:5e:3c:a8:f9:9e:39:7d:b0:0b:15:64:67:87:
         6a:7a:dd:f9:8b:4b:23:ab:8a:32:2c:63:63:45:e3:df:de:32:
         0b:e5:07:ef:b9:8c:6c:18:b5:a5:3f:f8:1b:d5:33:6d:10:e3:
         cb:39:6c:fa:0a:8d:87:a7:f4:f9:83:d7:97:a7:00:e3:c8:ba:
         32:89:77:65:d2:ca:0c:47:e2:1d:17:ef:ab:ec:f4:53:92:56:
         7f:ca:87:14:8e:db:07:d7:5d:99:ba:68:8a:b1:fe:61:1e:a4:
         46:b5:32:4d:9f:67:e8:eb:87:84:2b:a2:34:80:9b:67:c0:ee:
         d5:3e:64:c2:6f:1b:b4:a1:a0:ef:8a:d2:a8:cb:a8:74:bc:3a:
         cf:8c:60:42:25:55:86:b4:f7:90:b7:77:d5:7d:2a:15:c9:c4:
         9a:d5:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----