Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3be175d-bad1-494e-9f32-cac15eff7602.roa
File:                     c3be175d-bad1-494e-9f32-cac15eff7602.roa (raw, json)
Hash identifier:          7Fnx/0HWb8Ocw7EQIaJY9ozulvAIjz4hAd5/OXdihCs=
Subject key identifier:   8D:69:E1:73:F6:1F:10:02:F2:08:8A:19:C5:DB:D5:9E:58:11:B1:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A0A2ED58DDB77900AA57194C31E392FF40FD3A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3be175d-bad1-494e-9f32-cac15eff7602.roa
Signing time:             Fri 31 Oct 2025 00:20:01 +0000
ROA not before:           Fri 31 Oct 2025 00:20:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.144.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:2e:d5:8d:db:77:90:0a:a5:71:94:c3:1e:39:2f:f4:0f:d3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:20:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=97019f524ce96bb538deed71c997f2b60a6648212b17e6ecb92d4c48a0d98709, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:eb:67:c7:6b:2e:48:2f:a1:b7:21:e4:59:
                    c9:0d:f1:c0:5f:d4:fb:46:e5:87:51:72:12:dd:8d:
                    78:30:8f:9a:14:d3:72:44:5b:3a:f2:a9:cb:79:48:
                    c7:53:f2:7d:d4:81:45:55:5c:5b:94:6d:ed:50:9a:
                    dd:c6:82:f3:48:1f:20:a8:1c:e5:0b:f5:17:56:2d:
                    4f:c2:2f:ff:78:e8:67:86:1e:24:af:9e:02:1b:bd:
                    6d:d7:a7:13:76:fc:6d:cd:51:6d:56:60:cf:e5:0a:
                    02:e0:d6:97:5a:89:6c:83:6b:76:52:cc:24:84:a7:
                    be:ab:fe:15:ee:a6:bb:f2:16:5f:d8:2a:df:45:fe:
                    04:d7:01:5e:b1:23:62:7a:ed:32:b4:0e:aa:96:f6:
                    8b:e3:80:10:b8:bb:9d:97:83:3c:4f:2b:af:1e:54:
                    35:68:01:56:f2:5e:97:31:e4:fa:ae:bb:11:c5:69:
                    38:96:fe:49:56:51:91:b4:a5:63:67:b7:f4:50:39:
                    93:91:95:29:25:cd:b9:2c:45:9b:33:a1:57:86:a2:
                    c8:01:90:f1:91:e3:bc:b6:bb:0b:2b:d8:db:ce:94:
                    1a:f3:fe:0b:37:52:86:8e:93:1d:85:0b:bb:71:4b:
                    98:6d:fc:82:99:4c:6a:26:38:e8:38:c2:81:6f:c8:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:69:E1:73:F6:1F:10:02:F2:08:8A:19:C5:DB:D5:9E:58:11:B1:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3be175d-bad1-494e-9f32-cac15eff7602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.144.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:15:2c:7f:8d:e5:fc:ec:1f:f3:f4:47:f3:6f:b7:2d:b5:
         9b:c8:01:3d:02:20:6d:33:64:d4:85:61:9d:38:67:8a:1f:0e:
         48:04:54:c6:1c:5d:9e:2f:8a:ca:8a:62:7d:d4:f0:18:a5:8b:
         f6:ec:71:03:c5:14:b2:bb:64:d6:4c:ad:0e:27:9c:b8:9a:56:
         77:18:ba:bd:f9:1d:7a:4d:01:79:2a:a2:53:6b:37:11:3d:e7:
         a8:40:b4:0d:7d:9f:72:31:56:a3:69:a0:24:12:2e:90:74:90:
         2c:80:a4:9b:14:a6:ae:fa:ef:02:40:e6:52:48:d6:b4:17:b7:
         47:33:90:14:4e:b8:32:b2:5d:92:23:d4:28:2e:e0:72:24:6d:
         5b:e2:e2:30:e8:1c:e6:e4:71:b5:1f:12:47:11:b9:a2:8f:01:
         60:a1:e5:b4:04:53:4d:a8:b6:89:2f:77:11:8a:55:e7:0b:e2:
         36:cd:d4:e7:b0:42:e9:5c:9c:3a:19:20:63:e7:3b:c9:cc:35:
         3e:c4:19:27:bc:86:30:c2:d4:1e:36:67:58:f5:b9:3d:ec:c2:
         94:34:c6:c2:f9:57:70:3b:7d:49:ec:ac:7c:4a:23:9a:11:81:
         6b:27:ee:ff:56:39:c6:e0:2f:d1:1e:0b:d1:f7:3e:be:d7:17:
         78:b0:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----