Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa
File:                     c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa (raw, json)
Hash identifier:          d4xUnD3KyNE1ruNrjyL797zmefpO/yYpMlt6rFo4PTc=
Subject key identifier:   EF:2F:E6:67:7F:E1:B8:36:34:57:EF:22:93:98:E2:B6:98:9D:3B:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B0B378FEC8C3D042EACC6D82E07EEDF298D9A0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa
Signing time:             Sun 02 Nov 2025 00:10:14 +0000
ROA not before:           Sun 02 Nov 2025 00:10:14 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0b:37:8f:ec:8c:3d:04:2e:ac:c6:d8:2e:07:ee:df:29:8d:9a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:10:14 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=fb156142a4179f0a835a75e20f28d7d4dd60ad3a661c4ea2f8bd475565b4d32d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:88:d6:28:d7:9e:24:66:1f:74:aa:be:ce:
                    eb:80:e4:de:c9:6d:a7:15:8c:5f:02:a9:36:c7:d7:
                    e7:68:8a:1f:cc:dd:da:d3:28:e9:e9:e9:49:c3:c2:
                    d1:e9:7b:f8:30:b4:5a:7d:14:69:1c:20:8f:91:62:
                    8c:99:ca:94:3d:85:46:1b:94:62:c8:92:1b:8c:81:
                    24:d1:c0:fb:5a:a8:42:d9:af:88:f5:4d:e9:b2:52:
                    98:a3:7d:a6:cb:d4:42:a1:52:19:4e:86:f6:ad:93:
                    9e:c4:2b:da:54:b5:47:62:c1:17:4f:e6:19:47:ea:
                    ff:74:18:86:ac:d2:d9:2b:15:84:79:0c:05:b5:8f:
                    f1:a4:b8:bc:a0:05:7b:4a:b1:d8:d6:fb:78:59:80:
                    29:02:4b:da:bb:c8:37:d8:27:a2:4f:ec:62:cb:5e:
                    00:4a:c7:4f:25:57:2d:4c:63:26:fc:52:0e:b1:cd:
                    13:da:5f:ab:bf:55:40:b4:96:6c:36:af:e5:6c:67:
                    35:f8:ff:98:34:ba:25:f4:08:40:08:4a:8e:0b:f6:
                    40:59:5b:7a:9c:3c:20:9f:06:55:05:a0:64:c3:cc:
                    48:7c:de:07:d8:8a:59:e5:7a:94:40:b1:75:bc:9b:
                    1f:55:7b:63:83:91:42:c6:08:8c:c8:1b:8d:6e:ce:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:E6:67:7F:E1:B8:36:34:57:EF:22:93:98:E2:B6:98:9D:3B:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70ab64b-0a6b-40fa-be0b-31f3d2b35068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:9f:bd:cf:42:2b:a3:5c:75:7b:11:a0:05:54:9b:9b:bc:
         9c:1a:7f:40:a1:7a:bd:72:48:f3:8a:98:b9:24:db:9f:c6:9c:
         d4:96:b0:11:a9:47:cf:9c:b4:c2:8e:5c:6e:fe:e7:16:55:6f:
         8a:a1:11:85:e8:c2:d5:98:b1:e5:27:12:da:52:e9:1b:96:f4:
         78:ef:27:66:c6:91:24:25:ea:10:eb:22:c5:7e:d7:d3:60:fb:
         b5:ce:87:6a:fa:14:38:14:86:f9:78:c6:c3:97:56:f3:24:3f:
         c4:56:d1:b8:90:fb:5f:f0:04:c8:3f:6c:39:13:dd:3e:48:c8:
         10:39:e2:16:9b:d1:3d:27:c7:fc:82:2a:c7:43:1a:fa:40:e8:
         97:f9:4b:6d:2f:ca:97:4c:7d:4f:5b:2d:4b:7d:59:16:6a:12:
         24:57:e2:cc:4b:02:c6:ab:19:d6:1c:c4:2c:2d:5b:ad:ca:2a:
         b2:96:fa:5d:03:8a:2f:50:bc:05:3a:0f:63:e2:d3:3d:77:29:
         e7:ea:cd:94:72:5f:5e:ff:72:9b:b2:a4:e4:4c:33:21:1c:0f:
         a8:ea:a5:30:21:68:20:57:f2:09:be:e8:a5:ed:1f:d9:4b:73:
         51:9c:4d:79:af:7f:97:e5:da:8f:a3:b3:11:1a:27:ca:3a:bc:
         33:d0:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----