Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa
File:                     a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa (raw, json)
Hash identifier:          Q3d6l+n/35DN+PjgzCvy8J5J3mFO2UNSp+3vb0ytQaw=
Subject key identifier:   EF:12:5D:74:30:D9:D2:3D:A8:14:31:31:E3:B4:42:0C:1B:6A:71:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       132A3FCCE48A395703C4AA18D51CEA87A500C6C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa
Signing time:             Sat 01 Nov 2025 00:20:05 +0000
ROA not before:           Sat 01 Nov 2025 00:20:05 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        149.98.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:3f:cc:e4:8a:39:57:03:c4:aa:18:d5:1c:ea:87:a5:00:c6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:20:05 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=e9856c1b40542d3c17157e4e58a896fcde5fd21d44beeba8df61d0a618e1bc89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:ce:07:49:cc:06:88:e8:4a:d6:49:d3:00:
                    75:bb:6c:f9:67:55:d6:a7:c3:a1:9d:54:2e:af:d8:
                    23:68:1a:00:9a:ba:a9:53:99:47:6e:93:9f:1b:54:
                    4a:32:f4:d4:31:c4:63:ab:ce:00:47:2c:e8:e7:f1:
                    ed:3e:4a:b7:1c:19:bd:37:cd:c8:23:ff:3b:c9:9a:
                    7e:5d:10:ed:51:70:da:72:fd:42:93:26:5a:c4:2d:
                    0b:0d:27:f1:90:82:dc:9f:8a:40:aa:ef:ef:3e:65:
                    3a:38:8d:4c:d3:c8:dc:a1:c1:b3:19:5e:fa:ed:a0:
                    40:f0:c4:76:e6:4e:9d:fc:49:27:d1:0c:00:52:cf:
                    cb:6f:2d:e4:9e:48:27:08:9d:5e:87:0e:4f:ca:f3:
                    91:b6:67:2b:91:60:fe:47:d5:2e:d5:a5:75:9a:0b:
                    1f:62:50:38:e2:50:5e:7f:ed:b2:34:8f:0d:6b:d1:
                    dd:77:06:e2:fb:c3:e6:cc:64:2d:09:f9:06:08:26:
                    c0:9d:5f:09:ef:1c:5d:37:cb:01:90:ca:95:6e:b0:
                    cc:9b:08:84:d5:0b:0f:d3:0a:06:06:20:20:94:04:
                    c3:c8:08:18:b0:43:23:2e:f3:c2:ad:7b:92:52:3f:
                    bc:7f:f6:cf:40:6b:e3:d4:5a:7e:b1:72:aa:da:71:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:5D:74:30:D9:D2:3D:A8:14:31:31:E3:B4:42:0C:1B:6A:71:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a649a23c-1e8e-45ad-bd04-c8fa20a62c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:92:bc:0c:46:46:f5:17:4f:45:42:9c:9d:43:98:69:73:42:
         ae:f9:b8:01:4f:2a:ab:c9:af:83:1a:cc:73:64:c7:fb:36:86:
         63:da:57:99:e3:d9:91:46:30:fa:a0:5d:4a:7e:83:e8:13:1d:
         d5:bc:03:9f:9f:e6:a6:f4:68:87:3d:1c:3e:a5:d0:49:69:65:
         a9:c3:3b:d5:a6:57:c3:c7:6a:b7:6d:c0:b5:a7:d8:77:e2:6f:
         bb:4e:79:fd:84:30:ca:f6:5d:07:3c:ab:73:e9:b5:61:69:1e:
         92:89:97:52:ce:86:e8:78:25:f4:56:a4:bc:f1:e6:1f:ac:8e:
         ec:cb:3d:61:62:71:3a:d8:cb:74:8c:f6:26:78:74:11:7a:9d:
         19:7a:fb:42:c8:c5:10:35:4c:a6:17:88:c2:94:5b:58:95:be:
         d1:26:1b:5c:a9:8e:5a:4e:c6:d5:cc:0d:05:db:ef:b8:31:c3:
         11:cd:37:1b:e1:b4:ad:1c:7b:ae:e3:27:eb:34:55:12:91:9f:
         56:3f:9e:70:1a:cb:1a:09:d1:e5:df:48:0d:f8:d0:8d:9e:9a:
         45:e2:a4:83:62:0b:a6:6e:7a:78:d5:08:12:c8:a4:9a:95:23:
         4a:2c:58:1c:8b:93:8f:c1:0b:d7:7e:31:70:33:0f:c0:b6:cd:
         8f:23:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----