Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa
File:                     a2f87879-6b97-4c65-aad0-f64bdcf78081.roa (raw, json)
Hash identifier:          kseGKLB+gwR1EHxAWdeP/PNw8fMyX7+8tX4AN+1De8I=
Subject key identifier:   5D:B0:3F:E0:EC:01:0F:A4:86:55:E5:AA:85:B2:E3:F4:CE:47:B0:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30485AE4D7B69A2C3B55301505BEB71E36B4AD09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa
Signing time:             Sat 01 Nov 2025 00:30:09 +0000
ROA not before:           Sat 01 Nov 2025 00:30:09 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        172.106.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:5a:e4:d7:b6:9a:2c:3b:55:30:15:05:be:b7:1e:36:b4:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:09 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=1c8719e04099a918fe11bd964fd16d32c801dc4605c0de265df3981c11274d6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:38:c7:f8:bf:21:57:d9:98:bc:31:13:b8:
                    a5:13:f1:ed:b7:51:1e:33:f6:50:57:73:46:bf:4b:
                    f1:ee:b1:a6:26:48:88:e5:5b:24:59:8b:f8:4a:87:
                    fc:44:a6:2c:22:a0:53:c6:d5:53:45:c1:12:28:0a:
                    63:dc:bf:15:5c:e9:d7:d0:9f:14:c0:fe:60:bf:f4:
                    7d:83:65:c1:07:e6:54:7e:20:81:fd:33:f1:66:37:
                    44:52:64:79:a2:8c:ad:b4:5b:00:23:99:6f:5a:49:
                    1d:8f:51:02:19:56:9f:9e:fa:7b:2f:31:7d:4f:d3:
                    a8:49:0a:1d:c6:12:1f:47:e3:a7:30:43:40:72:54:
                    72:c9:5b:fd:dd:c7:d2:c0:83:cb:82:37:0b:f4:3a:
                    c9:3d:9e:f0:da:85:4f:6f:ba:12:22:59:e0:76:c7:
                    8a:ec:dc:6c:d6:d5:95:9e:bb:b4:6a:ec:22:06:5e:
                    69:6b:7a:f3:cc:ce:1a:3e:78:eb:3e:a3:1b:fb:02:
                    63:1e:2b:25:bd:3b:41:4c:b1:99:3c:97:5f:25:e2:
                    a4:02:0b:1b:36:ce:e2:68:eb:a6:f6:88:a7:ec:87:
                    fe:1e:93:4f:85:e2:74:9e:c4:20:df:fc:14:61:bb:
                    60:37:8d:ea:a8:bf:91:c6:90:6b:b3:ac:68:d4:02:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B0:3F:E0:EC:01:0F:A4:86:55:E5:AA:85:B2:E3:F4:CE:47:B0:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         58:17:fd:62:b5:30:8f:e7:75:de:c2:53:f6:43:49:5f:fa:58:
         e4:e5:35:df:ec:80:af:4f:2d:36:54:b5:96:51:30:76:50:08:
         dd:fc:88:4f:83:6e:e2:37:e3:cc:69:0f:db:26:1a:8a:75:ed:
         c0:fe:d0:8c:11:e7:37:93:a9:4d:8e:45:88:df:95:05:9b:98:
         62:92:dd:03:32:be:dd:c8:cc:58:ea:aa:b6:93:7d:c1:84:43:
         39:73:5a:ac:31:a1:27:38:ac:55:37:cf:22:ca:94:c0:99:36:
         df:c5:d3:0e:2c:af:6e:9a:58:e1:b9:bc:8b:73:58:14:c5:dc:
         1f:e5:11:f7:aa:cb:64:e4:f9:6a:94:64:c7:80:be:24:48:6d:
         43:44:50:d0:bf:3a:e5:1c:91:61:00:ea:02:5a:22:3f:35:ad:
         e0:41:97:da:31:27:19:c3:b8:40:7a:79:cd:b2:6d:59:dc:75:
         fe:6f:ed:02:b0:6e:f7:24:5c:61:46:e3:c3:e9:9c:c0:3b:07:
         f6:fd:d4:33:29:82:fe:36:55:77:c8:e7:b6:10:c0:e7:0c:52:
         8e:fa:25:8c:12:36:c6:b5:be:46:b0:fe:d2:d7:80:c6:96:be:
         b3:e8:08:86:93:1d:11:05:31:c0:1b:1a:0d:51:e4:73:6f:9d:
         73:ed:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----