Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa
File:                     d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa (raw, json)
Hash identifier:          vh2hjVQglNNnUnjJm1ILtfdUzgLGRmmqjXld9BOLaD0=
Subject key identifier:   59:82:D7:F2:CC:01:55:A5:B4:C7:B0:9F:35:82:5C:28:15:F4:36:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70E7335D75A422E7534C478D4FB3D03E011E75C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa
Signing time:             Tue 21 Oct 2025 00:30:13 +0000
ROA not before:           Tue 21 Oct 2025 00:30:13 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.5.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e7:33:5d:75:a4:22:e7:53:4c:47:8d:4f:b3:d0:3e:01:1e:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:30:13 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=07b71923b325c0870d0bec30c803f0162e414d0af7ba6468514538d3f58791cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:04:d6:f4:0b:1f:b0:10:a0:0a:a0:d7:e2:
                    b2:0a:98:13:32:2d:db:94:24:70:25:1e:db:a9:b4:
                    c9:b1:94:a3:c3:e1:0e:b1:12:e7:2b:3f:61:24:ff:
                    0b:d1:81:7d:9e:86:9a:ae:3c:e8:41:04:6c:25:6c:
                    d1:ac:58:5e:07:36:5c:47:98:22:79:68:29:c2:ec:
                    95:18:52:ff:aa:14:10:40:56:49:77:a3:d0:6d:60:
                    7f:cb:9f:78:bb:c9:ec:31:1d:be:6a:56:9a:c4:e0:
                    bf:bd:bb:6a:18:c7:bc:a3:dd:78:5a:60:27:b7:76:
                    04:9b:c9:c4:f4:7c:23:89:54:f2:35:a1:c5:1d:ac:
                    c4:f5:dd:58:9c:61:21:b4:7f:31:0a:9a:dd:98:29:
                    4a:4b:6a:bd:27:e5:a5:6e:12:34:62:4d:3d:3c:94:
                    23:67:f3:71:0c:3e:42:eb:97:f8:6b:eb:95:d7:3b:
                    34:6f:2c:b7:17:61:ae:57:18:07:e8:0d:40:cc:e2:
                    c9:29:47:f6:7d:91:fe:00:48:9f:d9:62:dc:60:66:
                    86:bd:68:6c:1b:f7:18:21:ed:76:e3:23:a7:39:cf:
                    51:63:8d:f2:c6:ff:26:6c:12:64:10:13:87:cf:b2:
                    f7:04:2a:0f:be:5c:35:e8:94:d9:d9:bf:d3:7a:40:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:82:D7:F2:CC:01:55:A5:B4:C7:B0:9F:35:82:5C:28:15:F4:36:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0e3fb9a-1677-41cb-ad7a-b5231049acda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:d4:aa:62:5b:e1:7d:29:f1:79:34:46:72:69:f2:5f:8b:
         7f:93:36:73:d4:3e:18:82:64:5d:fb:cd:4e:dc:75:43:92:42:
         78:34:66:a9:5d:7b:e7:e4:69:40:2f:d7:40:79:c0:e0:6b:48:
         1f:0a:bd:ba:d4:29:e1:ec:5e:f8:39:c0:e6:20:9e:1f:9b:15:
         ed:db:ed:ed:2f:97:02:0c:43:03:e0:59:46:fa:f4:f9:5d:c1:
         39:06:97:4b:f6:4b:77:69:83:39:aa:ce:1d:33:f4:13:a3:9b:
         fb:5e:63:fa:74:af:f1:31:75:1d:bf:1d:d1:38:aa:47:ba:de:
         79:61:cc:45:13:35:33:5a:fd:ec:74:b1:18:b3:fd:41:de:fe:
         46:26:97:27:c5:d7:80:b2:7e:3d:38:20:c7:b7:33:d1:ce:fb:
         7b:31:8d:6c:f1:00:d6:da:a1:0c:12:e2:78:44:64:f5:92:7a:
         e6:87:3f:5a:07:40:3b:97:91:af:93:30:bf:70:4e:5d:67:f8:
         10:09:c9:62:8c:d3:23:0d:1b:da:31:5e:4a:5f:ec:77:7d:7e:
         e4:b1:cb:3f:73:1f:cb:87:41:b4:cc:4d:29:06:d3:df:6e:a5:
         c3:9f:3c:14:b1:61:ca:c9:58:b7:9b:75:85:47:d4:51:3d:32:
         e6:90:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----