Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb458187-d468-4405-8aa7-bec4cbd36145.roa
File:                     eb458187-d468-4405-8aa7-bec4cbd36145.roa (raw, json)
Hash identifier:          priO5boYauS7eb8D3mo480zTYprCTB0RuTwAarYdRes=
Subject key identifier:   7B:21:BB:79:5E:AB:4F:82:16:8A:90:06:ED:78:78:2E:A6:81:2C:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       180BDFD915ECECFC7BDE71FD9C1E626EDF35323C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb458187-d468-4405-8aa7-bec4cbd36145.roa
Signing time:             Wed 05 Nov 2025 00:40:10 +0000
ROA not before:           Wed 05 Nov 2025 00:40:10 +0000
ROA not after:            Wed 10 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0b:df:d9:15:ec:ec:fc:7b:de:71:fd:9c:1e:62:6e:df:35:32:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:40:10 2025 GMT
            Not After : Dec 10 23:59:59 2025 GMT
        Subject: serialNumber=a6151ac2e8ddefe6aca5f223360fdb7cf9f0eb6556fc78393c959659a55b1843, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:d8:1c:b7:f1:78:39:d3:2b:23:99:60:5d:
                    e1:8b:5e:83:96:f6:97:52:22:eb:e7:2b:4e:52:b9:
                    f9:9f:3e:34:22:f5:1b:90:52:f1:79:57:9a:74:4c:
                    89:84:b2:3b:8f:22:fb:b7:58:d1:4a:5d:21:78:52:
                    ec:f7:b1:3d:9f:60:96:84:a5:2c:46:31:36:5a:0c:
                    d5:52:fc:3d:5f:30:de:91:43:46:16:15:af:be:2a:
                    72:9c:fc:c5:b4:16:9c:a1:e9:f1:2c:79:d0:77:97:
                    f0:d2:e4:05:4f:8f:29:4d:f0:de:b2:da:21:0d:d4:
                    7e:eb:01:46:0e:cf:60:28:3f:ad:73:c1:79:5f:a0:
                    af:8e:b4:41:e8:e7:e0:12:f9:eb:ca:11:1d:11:4a:
                    b8:a3:9d:6d:36:22:1d:99:75:3d:c2:73:e5:34:81:
                    13:f2:a5:75:ef:16:22:01:bb:12:ef:8a:1a:68:fe:
                    2e:e8:a3:00:6e:1b:26:ce:a1:c7:0d:8b:47:71:e0:
                    83:ff:b8:56:e4:b2:1d:ca:61:4f:7d:52:27:71:08:
                    45:e5:b0:46:96:27:86:6e:9b:96:18:bf:c5:c6:36:
                    08:ab:ac:8e:49:ef:10:b4:1d:a0:b8:44:1a:d2:e0:
                    93:b3:49:51:14:ec:aa:5c:4f:d8:73:8b:35:8e:cd:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:21:BB:79:5E:AB:4F:82:16:8A:90:06:ED:78:78:2E:A6:81:2C:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb458187-d468-4405-8aa7-bec4cbd36145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:b0:71:54:2f:e3:02:60:1c:00:84:84:6d:13:ba:e7:84:
         84:2b:0a:eb:31:48:00:34:2d:ea:01:c1:43:60:96:ec:a8:b6:
         74:0a:ae:ba:2e:c7:71:b8:2d:8f:ec:47:32:cb:78:96:93:d4:
         33:a5:49:05:6e:2a:74:35:75:cd:13:33:9e:63:8d:ed:51:d3:
         52:eb:00:2f:fe:ce:f9:ff:65:5e:b7:c7:fe:80:3f:0e:80:55:
         2d:38:40:30:46:65:54:98:08:4d:b9:db:1d:56:4f:72:14:93:
         fd:74:ee:df:9d:b5:22:88:f5:fe:a7:55:6a:ea:ed:51:c2:48:
         fa:14:19:b3:92:47:25:12:18:1a:30:c5:53:77:fd:1c:dd:4f:
         31:ca:74:ea:8b:1f:92:3d:0c:55:16:fd:0c:4a:9b:bb:c0:9e:
         ae:be:ba:d9:f2:25:0e:1f:37:12:c6:48:3c:39:6d:60:74:c6:
         bc:17:24:48:49:e8:5c:b4:1d:49:cd:f6:03:64:47:f5:c6:2e:
         ac:a2:25:a0:54:75:4f:36:e0:75:4b:eb:79:aa:b9:f9:ba:18:
         b3:1a:c2:25:20:5e:6f:1e:2d:0a:17:3e:8b:4d:e7:15:06:99:
         c9:71:be:88:2c:7d:13:df:af:eb:4d:58:3f:26:41:35:2a:11:
         47:3e:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----