Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa
File:                     b30f0045-88bf-4cab-804d-bca257af8bb6.roa (raw, json)
Hash identifier:          No0y/G0j/lWvwFh+ZQ8kQ7pUMQXm6Uae6Aa89H2WVFY=
Subject key identifier:   24:13:20:E4:F1:33:20:01:74:B4:CC:AF:15:24:1E:DF:03:5F:53:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58360B2917B54EB31B86AD59BF35B3D51ABBF56C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa
Signing time:             Wed 22 Oct 2025 00:30:11 +0000
ROA not before:           Wed 22 Oct 2025 00:30:11 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.207.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:36:0b:29:17:b5:4e:b3:1b:86:ad:59:bf:35:b3:d5:1a:bb:f5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:30:11 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=2bbf73a31dc20b09d91d3b09ee05b0af13edff1eaa2baf16ff80d091e2d12d7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:16:fb:0c:e4:df:03:44:43:04:f9:cc:2e:
                    80:f2:db:d8:9f:1f:89:42:0e:65:51:3e:83:ad:0d:
                    d9:ec:27:73:f4:04:91:b2:1a:83:1c:3a:8c:c5:60:
                    80:89:47:4d:4e:cc:44:02:79:13:71:49:c7:cc:45:
                    17:12:fb:00:44:c2:49:98:23:98:46:a5:5c:76:b9:
                    ff:21:2e:59:ca:52:e7:39:92:bb:68:a9:b1:30:02:
                    60:47:39:58:d9:97:84:6f:c5:79:77:0c:71:ff:f4:
                    34:54:74:5f:b2:71:1c:c1:33:ec:5e:e2:5a:3f:e5:
                    2e:27:31:54:94:cd:e0:93:e8:90:30:9e:7b:2c:8a:
                    0c:1f:00:ad:9b:a4:69:74:95:52:64:5d:c2:97:fd:
                    96:34:76:ff:ea:15:21:99:20:41:fb:18:1b:b6:23:
                    a4:62:7d:40:82:67:8f:6f:af:a9:b2:0a:6d:b2:a7:
                    78:e1:b4:04:f5:a0:62:06:c1:58:49:22:4d:bf:46:
                    80:1d:18:c2:12:b9:cd:73:54:e7:a5:36:74:ab:4d:
                    ee:9d:8f:a3:7b:4b:bf:04:40:54:ac:79:54:89:36:
                    8a:96:ec:b0:69:5a:2a:ed:72:84:87:09:02:d2:59:
                    f0:90:3e:18:9c:2e:5b:51:36:24:b7:4e:9e:2d:2b:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:13:20:E4:F1:33:20:01:74:B4:CC:AF:15:24:1E:DF:03:5F:53:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b30f0045-88bf-4cab-804d-bca257af8bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:ee:49:08:32:22:8e:ae:f7:0d:cc:f3:e0:8e:a9:11:6d:
         6a:7a:b4:9a:70:20:c9:94:2a:1d:41:63:ef:b2:8e:9c:22:45:
         c5:88:18:19:c2:72:84:3d:39:82:28:06:c6:f0:04:ad:7e:e3:
         6b:6b:16:1e:37:ec:6c:f5:11:da:08:fc:17:b4:f2:25:61:d9:
         a5:35:db:45:e7:6e:95:32:fa:d2:23:a4:28:52:ec:65:d3:bd:
         b0:a6:f0:43:5a:32:60:5c:74:3d:79:9b:e7:80:8c:6f:36:19:
         d7:2e:ee:9a:cc:c0:02:d3:99:21:9c:7f:c0:35:de:4f:ba:1f:
         81:27:5f:c0:49:84:05:bc:ae:41:58:5a:36:74:cf:84:3f:ef:
         65:fb:24:d9:c0:8e:ca:da:d0:b0:fb:8d:18:16:4f:a6:7d:91:
         cd:bc:dc:31:f5:a7:a8:f5:93:a0:c2:9b:bb:06:f2:94:39:55:
         69:c8:0c:84:48:2d:be:e0:f6:6f:9e:6d:c0:7c:75:8e:cc:26:
         be:1b:3a:76:e7:8e:12:a7:1e:69:25:ef:99:80:e8:fc:57:d5:
         82:2d:5d:80:fa:0c:ad:88:9d:da:5a:b7:4e:d6:80:0f:b9:e8:
         0b:34:9f:72:fd:05:47:13:5d:9c:91:44:84:89:9d:5f:c5:28:
         90:8d:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----