Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6aed18e-4181-45db-aec2-a8eeb50789dc.roa
File:                     c6aed18e-4181-45db-aec2-a8eeb50789dc.roa (raw, json)
Hash identifier:          xzU66jpBpoMGlDuRGfY60JoRWjRsNvBkFnAievXz1Y0=
Subject key identifier:   E8:14:94:E6:33:6F:9E:A2:E7:F5:BE:6C:AA:D4:80:75:13:37:13:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3024B10E8343D4D4F1F4837CE7871333C5771097
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6aed18e-4181-45db-aec2-a8eeb50789dc.roa
Signing time:             Fri 24 Oct 2025 00:00:27 +0000
ROA not before:           Fri 24 Oct 2025 00:00:27 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        98.68.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:b1:0e:83:43:d4:d4:f1:f4:83:7c:e7:87:13:33:c5:77:10:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:00:27 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=ee47173e16583955231636a8332fac8da2266197ca17f6ff35bddd6d04e7a8af, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:0d:a4:31:96:5f:4d:10:9d:33:dc:cb:95:
                    04:ec:e1:78:ba:39:4b:ed:c4:62:03:2f:9c:a4:62:
                    df:62:57:20:43:72:16:7a:3e:87:3c:42:d8:b9:de:
                    fc:93:38:1f:7c:7e:0a:7c:75:11:5e:94:91:29:d1:
                    e0:d6:3a:4a:66:ed:42:88:1f:ac:1e:58:08:7d:51:
                    72:ab:69:b4:b4:fa:03:13:f8:ef:b0:ed:0a:03:a3:
                    57:64:29:75:f2:68:75:ef:c7:99:3a:0a:d2:0d:c5:
                    e9:6f:36:e2:e0:68:f7:97:16:19:7a:43:59:b7:bc:
                    1d:67:52:e4:f4:9a:89:8a:94:6e:5a:1d:74:6f:12:
                    3d:d8:ec:44:6f:3c:74:73:5c:0c:76:aa:5e:64:17:
                    14:13:fa:b9:76:8d:86:30:bf:ed:73:15:fd:11:bf:
                    d1:94:88:46:cd:94:85:a0:d9:7c:97:0a:73:08:d8:
                    68:d2:62:b2:f0:d5:89:77:91:4a:ce:db:8f:71:71:
                    bf:ae:f2:6d:ac:67:0e:8f:da:81:29:e1:e5:62:6d:
                    62:bf:e5:e2:86:33:7d:79:1f:28:9c:47:4c:d7:e2:
                    7b:67:6a:1f:df:f3:35:70:5c:e6:67:43:4b:07:1f:
                    b8:28:ee:0c:48:bf:d4:b4:47:8d:89:6d:4c:f5:09:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:94:E6:33:6F:9E:A2:E7:F5:BE:6C:AA:D4:80:75:13:37:13:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6aed18e-4181-45db-aec2-a8eeb50789dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:59:32:fe:4e:55:f9:2a:f7:20:dc:94:2e:f8:9d:83:ad:
         40:90:3d:81:e2:3e:15:f9:47:32:e6:e3:f1:5d:7c:b9:41:21:
         c3:b9:90:4a:a0:7a:75:7b:e3:bd:cf:15:b4:97:83:e6:16:e5:
         91:91:46:a4:f7:36:64:43:af:7e:44:22:ae:b4:0d:5b:76:ae:
         da:11:b2:8f:53:8c:4c:9d:fa:79:9d:30:65:d3:91:1f:e7:7a:
         98:ff:6b:fb:71:ec:bf:92:37:62:97:39:51:2e:d7:0b:49:98:
         7a:6c:bd:f7:26:38:02:41:6a:11:81:27:d2:cc:01:8b:a5:cb:
         a5:89:ab:3c:9a:01:bf:6f:c3:fc:1e:83:84:94:36:5a:50:2f:
         11:3b:53:8b:6c:c6:37:e6:e3:e0:f6:00:16:3d:06:2f:98:bc:
         7b:a7:8f:c8:10:f6:54:6a:d4:d4:d9:e2:70:92:62:d6:7a:e3:
         66:e2:38:4d:cb:eb:b9:f7:04:c9:6b:81:49:98:10:9b:20:58:
         23:9e:e1:b1:1a:7b:dc:61:f8:99:c6:62:b7:52:ac:2b:0d:5d:
         8a:39:76:68:17:a8:97:7a:9b:e7:59:d8:57:99:b6:33:5e:be:
         7d:bd:ed:c2:73:b8:4a:e2:e8:5f:98:0b:23:15:15:59:5d:03:
         a1:ae:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----