Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa
File:                     edabdce6-a3ca-4743-8403-ae737c3b4588.roa (raw, json)
Hash identifier:          S9reFpZQeO6MBLkNq74rO4T6/9Z+d4YbkxluRXqySv8=
Subject key identifier:   F1:38:64:EC:90:1A:60:7F:6D:38:5A:E2:14:5C:15:70:94:16:05:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C8EA1AA91D595CE9C7082A64AAA64B850E3FE43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa
Signing time:             Fri 31 Oct 2025 01:01:04 +0000
ROA not before:           Fri 31 Oct 2025 01:01:04 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.17.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:a1:aa:91:d5:95:ce:9c:70:82:a6:4a:aa:64:b8:50:e3:fe:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 01:01:04 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=4ad4440e0c68e64576369c9285b1a8aa5e59a1d7becd843689835a7a35586720, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:18:a0:a6:52:20:29:86:5e:86:21:fd:9f:0c:
                    59:12:49:fa:1c:48:ba:c0:64:cc:45:19:c8:2e:e7:
                    3a:97:ed:9e:87:ea:9d:2c:00:6a:a9:8d:f1:66:1b:
                    85:5f:90:af:ea:a5:fd:bb:b6:2f:f1:31:e0:ee:bb:
                    f6:22:08:a3:f5:2e:d6:8d:e5:ca:cb:fb:13:3f:78:
                    20:0b:1d:1f:b3:f0:89:38:a3:30:1b:d6:d2:7c:2a:
                    47:4f:7c:cc:ab:0d:89:ee:da:d9:bf:95:68:44:0c:
                    a7:d5:99:c1:d9:65:6f:01:19:ca:7c:e2:1a:43:8c:
                    4e:25:26:d5:a2:87:a5:b1:a2:5d:28:e1:b7:f7:9b:
                    9b:73:d6:70:45:19:00:87:fc:29:a9:7a:99:76:2e:
                    c1:c3:78:a2:d8:38:5b:1c:35:de:bd:d4:9f:ba:18:
                    53:56:76:0c:b1:47:09:7e:b6:c6:04:1f:84:88:b1:
                    58:09:d1:b6:b4:ad:38:8a:ce:bd:45:33:89:93:c8:
                    7c:50:9a:9d:e6:88:4e:04:fc:91:84:23:95:9b:af:
                    b7:74:2a:d9:04:ca:e1:23:37:de:9f:51:22:e5:82:
                    6d:59:ab:32:5d:9a:6e:91:98:f3:59:ee:67:ed:9a:
                    86:f7:12:b2:1f:5b:a8:8d:3d:16:06:85:26:88:f7:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:38:64:EC:90:1A:60:7F:6D:38:5A:E2:14:5C:15:70:94:16:05:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:11:41:ba:ad:51:a6:3f:b8:66:79:e6:61:6c:76:55:d7:
         6f:8c:41:2a:ff:96:f6:8f:13:95:95:56:d1:75:59:82:e6:9c:
         fa:a5:ea:c3:c2:91:f8:af:24:ac:c8:9f:04:8b:a9:74:cc:4c:
         83:8c:09:6a:ca:0e:99:73:21:67:8c:ea:ee:4a:7a:16:22:73:
         d7:e0:60:e3:00:fe:97:00:ec:9a:c2:ef:f5:75:f7:18:f8:62:
         54:a3:a7:fb:9b:5d:ac:f1:d8:96:dd:aa:6b:12:09:a1:07:1d:
         fd:da:77:89:ac:41:18:d5:d3:a8:e5:61:8a:f2:65:b3:d1:b5:
         99:eb:7f:32:f8:8d:9f:5a:c2:be:62:45:1f:d9:a8:c1:1f:62:
         50:d9:28:f6:75:80:a8:ef:fe:2c:44:a1:1e:17:bf:a2:b5:3b:
         3b:9c:fd:c4:b4:40:e3:b3:ae:30:82:65:50:e7:1a:76:ac:49:
         c2:e5:b6:d1:1e:e9:df:4a:99:b8:72:e3:c5:25:cf:ff:b5:c0:
         3d:5a:e3:43:59:c9:e5:ec:1a:8d:57:52:8b:01:9d:5d:a2:53:
         d0:df:a2:e3:fb:40:8d:c7:cd:c8:da:c8:50:20:d4:81:4a:51:
         00:66:7f:6c:3a:a6:1d:f7:1f:df:a3:30:18:95:f5:ef:96:bc:
         39:70:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----