Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da693591-855b-455b-a808-33c8fa0c4089.roa
File:                     da693591-855b-455b-a808-33c8fa0c4089.roa (raw, json)
Hash identifier:          aInqFBKOIivJfFZZIsZBx/15dv1keDGn/bZK6LZtnxY=
Subject key identifier:   AF:56:5A:9F:E9:4E:35:AE:37:AA:25:9E:22:65:2D:7A:D3:A9:DF:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C5012B7757ACD478531063A038E6170B3908CB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da693591-855b-455b-a808-33c8fa0c4089.roa
Signing time:             Fri 31 Oct 2025 00:10:45 +0000
ROA not before:           Fri 31 Oct 2025 00:10:45 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        50.19.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:12:b7:75:7a:cd:47:85:31:06:3a:03:8e:61:70:b3:90:8c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:10:45 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=a37bf28771f26ceb94a76425457a25ccf311257c67bbf910a690af22cda8f694, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:46:8f:32:b7:50:be:ff:a2:fb:be:d7:5f:
                    c0:ef:96:45:88:ea:e4:df:f9:ca:d5:65:70:ef:a4:
                    49:7e:f5:37:ba:43:b9:15:c0:ff:76:0c:9f:2a:16:
                    ac:f7:84:be:74:19:0e:30:30:c8:e7:f2:c4:86:cd:
                    44:c0:a1:04:68:45:93:7a:18:63:af:d2:04:83:55:
                    d1:6f:67:93:4a:22:ea:7d:4f:d7:6f:91:c4:b4:13:
                    31:16:cb:33:24:32:70:8b:b3:7c:b7:c8:28:68:34:
                    b0:c7:94:19:cc:56:df:19:0f:50:9e:78:fb:d7:0a:
                    6c:03:88:c2:d5:e7:53:40:b2:1f:e0:a8:13:93:45:
                    be:0a:77:d7:40:6f:02:fa:fa:7a:94:cc:8c:b6:ec:
                    fe:c7:5d:f9:32:97:5e:66:ee:77:d1:f5:ec:7c:ec:
                    95:2b:5c:83:ce:e6:64:a4:c2:ef:1c:b2:ea:dd:43:
                    fb:4f:2a:5f:ea:36:82:be:08:45:84:50:8a:f5:e6:
                    3d:da:33:ab:fd:5a:69:94:5b:16:ef:24:1c:93:cc:
                    18:c8:ef:fd:87:fb:da:36:d3:83:af:00:0e:bc:89:
                    67:46:74:50:a1:80:b7:5a:11:15:1b:81:05:71:2e:
                    73:94:d6:05:08:cb:40:85:da:b5:91:ac:be:75:84:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:5A:9F:E9:4E:35:AE:37:AA:25:9E:22:65:2D:7A:D3:A9:DF:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da693591-855b-455b-a808-33c8fa0c4089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:18:3c:35:19:00:4f:28:53:85:3b:3b:92:ef:45:7f:96:b1:
         17:20:da:43:54:ab:3c:d9:c5:72:52:49:d2:a3:1b:57:ab:13:
         8b:23:ab:72:77:1d:cd:98:85:4b:25:06:fa:43:cb:9f:b4:17:
         ef:dc:db:2e:c3:6c:ec:29:5c:2f:9e:5d:2e:af:1c:58:8a:54:
         2b:ba:81:fa:e2:c2:f8:34:0a:3c:5b:67:c4:d6:6d:4b:ab:04:
         ea:eb:07:b3:cc:af:9a:91:72:fb:0d:7c:4e:7c:a7:6a:b1:07:
         85:6a:f3:ad:0c:7d:2d:7a:e6:2f:cd:78:ad:b6:cb:e0:fe:8f:
         5e:1e:51:60:a2:c4:b0:97:0b:b4:79:c3:e7:8e:ad:e1:47:38:
         ee:66:16:85:a5:ee:eb:93:f4:a7:f6:5b:c2:4d:59:6e:bf:72:
         f2:eb:57:e3:36:10:88:03:c9:19:52:eb:1a:69:7a:bc:7f:b7:
         bd:ce:47:75:9d:41:ab:2c:fd:a6:ed:6e:3e:8b:ab:f6:21:4a:
         f7:cc:00:2d:f2:43:02:20:6b:63:97:41:a4:f4:21:e2:95:84:
         d7:08:6e:8f:3e:8e:14:8d:83:1f:12:de:55:90:fb:0d:1b:a5:
         3f:57:43:37:4f:f1:30:1d:93:1e:33:da:b3:f4:de:9e:55:89:
         9c:0c:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----