Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa
File:                     cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa (raw, json)
Hash identifier:          47zahqvGuk/SSEMC3sPicERLMClcwzjsQ+FBrpk7Zgw=
Subject key identifier:   46:A8:96:50:F6:B6:65:8A:07:D7:8A:E8:B0:C8:ED:81:6C:1A:16:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2737BD7302928F41C7853F40A5A9D65666C8939B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa
Signing time:             Wed 05 Nov 2025 00:40:07 +0000
ROA not before:           Wed 05 Nov 2025 00:40:07 +0000
ROA not after:            Wed 10 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        121.94.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:37:bd:73:02:92:8f:41:c7:85:3f:40:a5:a9:d6:56:66:c8:93:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:40:07 2025 GMT
            Not After : Dec 10 23:59:59 2025 GMT
        Subject: serialNumber=da93f3ee5b9d017d1ba59aedbb89a3ffbb09ad25039257f1523ed06ac25f6e43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:a4:01:bc:5b:58:05:42:60:81:df:83:61:
                    1a:1e:d7:27:04:e8:87:d9:9c:5c:7d:4b:6a:ec:33:
                    f3:41:ed:7f:7a:99:c6:48:f2:0b:ed:ed:4c:61:d6:
                    55:1f:0a:95:3f:f6:16:12:2b:fa:3e:07:8c:43:57:
                    a2:ef:b6:bd:87:d5:b9:00:8b:20:97:50:9e:ba:7a:
                    d3:44:10:9e:b1:6d:7e:76:d0:01:a4:72:10:b0:26:
                    e8:0b:ab:22:3d:2a:ee:a7:ed:72:ce:9f:9b:9c:75:
                    23:26:39:65:50:18:f2:5b:11:e5:6d:71:b9:87:21:
                    3c:9c:a4:1f:9d:9f:2d:df:0c:4e:94:0c:5b:20:a9:
                    96:2e:07:f0:c0:2f:2b:1b:57:fd:26:27:0c:17:a0:
                    96:40:5f:88:fb:62:ef:db:1f:0c:8f:8d:0d:48:ca:
                    df:f9:33:3c:af:4d:47:e5:47:31:88:1f:e8:4a:ae:
                    ea:44:ed:01:81:09:4e:79:27:88:a7:9c:b8:e3:bc:
                    9c:df:38:78:a3:17:f7:2d:10:20:a2:eb:51:1b:d1:
                    22:40:99:ee:da:b1:c4:b6:73:c7:e2:ab:8b:f3:8d:
                    e8:d5:c0:94:da:53:b6:b2:c7:7a:a5:60:ae:be:d7:
                    3b:b6:19:f2:16:5f:99:74:8e:71:e1:5f:b1:54:fa:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:96:50:F6:B6:65:8A:07:D7:8A:E8:B0:C8:ED:81:6C:1A:16:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbaa1461-b7bb-4b89-b0ee-19f4d4353102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.94.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d7:a7:d3:de:36:c6:31:2e:6c:71:1f:e9:7d:e3:c5:10:10:7c:
         ab:c8:7b:4e:1e:0d:84:88:f4:c4:54:06:71:2b:97:0d:0a:c3:
         35:1f:ce:d9:e2:78:e1:fd:b9:41:2f:89:c5:35:9a:70:dc:7c:
         b4:1b:c1:5c:15:2c:4d:a4:da:61:14:a2:c2:57:34:b9:5a:0e:
         93:7a:28:a0:58:71:b1:ac:e9:51:4a:fb:4d:f1:77:31:0f:db:
         ba:c3:d7:2f:f3:66:a7:50:11:48:0b:5c:3f:b9:e1:6a:0c:ad:
         e0:a3:90:94:12:17:3c:c7:3f:45:d0:77:d4:a0:05:d4:19:31:
         4b:94:18:56:17:79:4c:1b:a3:88:6a:ac:97:53:e0:3a:4f:4e:
         e6:89:a9:44:f1:ed:c1:ff:b8:f3:06:23:66:e0:84:92:04:2f:
         3a:da:08:b4:3c:d9:56:2c:74:e0:e4:d7:74:3b:12:da:45:c3:
         ae:18:5e:e1:09:0c:81:01:58:10:72:22:e7:b8:be:ff:1a:14:
         dd:55:b1:62:be:5e:96:74:98:c0:82:39:fd:c4:55:62:78:82:
         b2:0a:1c:6d:87:47:28:f9:d2:9e:30:66:43:dd:58:6f:27:89:
         d6:d8:ab:c3:12:c5:8c:b5:02:82:47:1a:25:3c:eb:bb:83:86:
         21:51:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----