Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa
File:                     9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa (raw, json)
Hash identifier:          3r5VmBHu/zpO7PvX3dnsdjugJpYJsDhrXCxzhkEw1UU=
Subject key identifier:   1F:DA:3E:D0:37:D3:0F:25:56:56:18:59:5B:76:E7:74:FE:53:C5:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59E5E85A475B9B6E5A214ADDE458041AB26AE691
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa
Signing time:             Fri 31 Oct 2025 00:00:19 +0000
ROA not before:           Fri 31 Oct 2025 00:00:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.17.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:e8:5a:47:5b:9b:6e:5a:21:4a:dd:e4:58:04:1a:b2:6a:e6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:00:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=5c084447ec4161a5243421dcf07265172060bd436a5b15fea080b486e7ddab65, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:24:90:ee:b8:ff:7c:e9:c7:29:7f:91:96:
                    d8:26:c7:d8:af:ac:dd:81:47:a1:3f:26:dc:34:87:
                    ef:ca:5f:9a:e0:a5:0b:bb:f0:03:0c:c4:98:c3:ac:
                    a1:db:db:c6:1d:3e:d0:e0:4f:48:81:18:38:83:dd:
                    33:67:4a:4c:52:67:de:ac:4f:78:81:c4:c8:da:bb:
                    60:9e:28:1d:7f:7b:37:bc:9a:fd:a0:1f:13:f2:31:
                    14:fa:e9:c5:4c:dc:9b:da:68:30:2c:ef:a9:7f:20:
                    6a:b2:47:dd:e8:65:17:cb:ba:74:49:0e:29:b6:54:
                    ce:70:ea:ad:3a:25:7c:b4:bb:27:da:ac:c5:33:24:
                    ae:97:4a:ea:03:69:af:78:31:cd:39:d7:09:af:02:
                    a3:6b:95:62:56:08:fa:de:58:f6:11:e6:35:73:8a:
                    30:ff:6e:58:ff:16:d7:46:62:f7:48:62:06:50:66:
                    65:62:c7:1e:4e:88:cf:8b:d1:a2:31:dc:1c:b9:6f:
                    2f:e3:11:bf:c6:a8:9a:86:0d:ad:72:0c:76:c0:13:
                    6e:35:2a:d5:77:26:1c:ee:e1:88:7d:d0:d0:13:9d:
                    7a:16:33:13:02:94:31:cc:4b:8d:ed:34:82:be:22:
                    81:32:81:a7:40:6c:ef:b4:43:7e:a1:fa:3c:11:29:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:3E:D0:37:D3:0F:25:56:56:18:59:5B:76:E7:74:FE:53:C5:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ef197d5-dbf9-48d6-bb5f-f07aedb3be08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:1b:e5:09:16:29:f0:b7:ec:d6:31:2e:0e:4d:6d:6f:c5:
         9b:bf:52:d6:69:dc:60:fa:e2:a1:88:ff:23:8c:d2:72:41:6b:
         a5:63:1c:61:2c:44:e7:8c:18:0c:ca:50:7a:4a:0b:54:20:be:
         50:0a:2d:c3:a3:1c:c5:fb:b5:f5:de:e5:19:2f:5c:97:39:47:
         cc:7e:6e:b0:3b:78:c9:73:b6:cb:8c:06:e9:d9:bc:04:38:3a:
         12:11:f1:94:b3:b9:37:a6:2f:64:6b:e3:c8:f6:3c:65:e5:63:
         c4:09:a4:53:14:9e:de:d2:4a:2b:0d:7c:21:a9:4e:2a:2a:c4:
         9b:0a:9b:b2:9b:d6:ee:74:8b:7f:90:c1:d2:3c:6f:54:3e:93:
         01:0d:f9:89:6b:8c:2c:96:d5:ad:bd:37:1f:2c:55:e8:93:ae:
         32:19:6b:50:df:39:84:2f:ba:38:e7:d6:04:1f:0c:70:a6:60:
         98:4f:28:d1:95:22:8d:45:56:64:6e:71:3c:d8:18:5f:3a:56:
         35:e6:17:62:52:a9:ef:b8:59:19:26:5b:e6:7a:45:50:f2:b9:
         c9:7f:96:f0:8c:58:32:f0:e4:e4:01:4c:13:da:bf:28:aa:d7:
         a0:39:fa:80:3c:e4:2a:a5:dd:32:5a:43:cd:20:8c:2b:82:f8:
         d0:d7:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:58 2025 by rpki-client