Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa
File:                     abb7a40f-6237-40f4-a2b2-34645feeb43a.roa (raw, json)
Hash identifier:          Ih8+iHHGS14/Iu9RXv1BGkpFEF9FOAJzJucVsNeioSU=
Subject key identifier:   D6:34:BA:09:CD:89:CE:43:28:A6:0E:91:24:53:F0:01:04:FD:9A:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2152C4F842CD593D367A19721413118A4BFF7DF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa
Signing time:             Wed 29 Oct 2025 00:30:50 +0000
ROA not before:           Wed 29 Oct 2025 00:30:50 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.184.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:52:c4:f8:42:cd:59:3d:36:7a:19:72:14:13:11:8a:4b:ff:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:30:50 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=a52ab5cc70799c19557ef437e88d951b012a54a8afcb6c58b3409c621fd17693, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:6f:d3:5e:21:5b:74:3a:b9:86:ee:69:88:
                    bf:25:55:2a:d2:24:da:82:ac:c4:59:53:e6:9e:bb:
                    77:a4:c0:07:41:90:c6:ee:cc:11:fc:62:1d:83:81:
                    44:c5:fa:b4:8e:b6:66:41:56:86:ae:2b:df:4b:62:
                    96:df:f7:2a:59:a4:f0:e0:f1:70:be:0e:5a:75:aa:
                    05:14:31:bd:49:01:4f:1c:22:ab:bc:d4:f6:e0:11:
                    40:02:de:32:a3:71:de:a2:06:e2:19:46:64:b7:4a:
                    a1:2a:5a:81:b4:3a:ab:39:c2:fa:40:9e:06:d0:83:
                    0b:2f:e9:82:0f:5e:eb:06:1f:2d:d3:f7:3e:20:0f:
                    75:6e:6e:e9:2a:b3:ae:ac:d7:5a:31:10:11:d6:37:
                    d0:53:77:d9:9b:71:3e:76:6e:92:d7:c2:c3:5b:28:
                    5f:6d:d3:ba:12:43:be:a7:d2:1e:e2:4b:60:70:9e:
                    76:43:3e:c6:11:ad:fa:ec:65:17:c1:3e:4f:09:a2:
                    df:a0:3f:e5:b3:e4:bd:bf:3f:68:bc:03:8e:2e:ac:
                    f1:c0:42:e9:7b:97:44:5e:5e:6a:4c:ae:cd:57:0a:
                    a7:4b:89:e2:61:1d:c0:83:e8:81:d7:49:2b:a1:cf:
                    74:f1:53:c4:56:ce:98:4e:c9:52:27:4b:1e:74:8b:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:BA:09:CD:89:CE:43:28:A6:0E:91:24:53:F0:01:04:FD:9A:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:9d:fd:f7:22:3e:fa:8d:76:18:40:76:ec:ca:fe:a3:b6:b4:
         cf:cf:fd:fb:4b:c5:15:3c:c9:ee:74:32:23:74:18:5f:db:3a:
         7f:aa:25:b4:dd:0c:09:1d:21:b7:93:fe:ed:31:92:8a:89:0b:
         d2:4c:9c:84:9a:3d:81:92:b0:f3:62:e1:ad:5f:7a:b3:76:0c:
         67:3a:59:02:92:f2:48:5d:ce:f8:4d:c7:f1:02:46:4b:f2:50:
         1d:f9:00:35:32:b0:70:c6:df:04:b3:d6:75:54:2f:fc:fd:2a:
         e2:63:8f:f5:2e:e6:6d:7e:92:89:c2:03:11:b1:a0:8b:82:fd:
         d8:3b:4e:01:35:b3:09:8e:a4:13:5f:bd:f0:57:bd:9f:86:8e:
         0f:b1:96:dc:de:93:a1:dc:82:d8:44:47:87:68:32:44:b0:2c:
         b5:5c:76:54:c6:f2:33:aa:b9:f5:d2:3e:58:fa:bd:b6:59:e3:
         1b:2c:b2:f7:c8:8a:82:2d:92:5b:10:18:6a:c0:24:ea:a1:4c:
         0d:52:33:3d:75:64:02:13:36:56:fd:a0:c2:c1:8d:01:57:43:
         38:20:07:43:7b:86:26:d8:d6:43:cf:a2:e9:cb:4d:94:bd:0c:
         38:6e:30:e4:cc:75:a6:95:5b:c9:6e:f5:7c:82:38:08:c1:d6:
         96:76:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----