Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa
File:                     ef414d28-7d98-4c41-931b-d7958ded262d.roa (raw, json)
Hash identifier:          ZKScvY0KT0LroN6nw2Iv6UqnJmzNuLXwEtPIsossXVg=
Subject key identifier:   2E:F4:9C:D8:4D:6D:6C:A8:6E:5D:8B:45:25:7C:51:3C:2F:9A:80:28
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10FFB421DD0A19A8EA25DF344001B5603A76ECAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa
Signing time:             Wed 22 Oct 2025 00:40:09 +0000
ROA not before:           Wed 22 Oct 2025 00:40:09 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ff:b4:21:dd:0a:19:a8:ea:25:df:34:40:01:b5:60:3a:76:ec:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:40:09 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=31946a64f44d5f8151b5ad95440dfd3f6e1517a12bd1edf36a24f54e50a381d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:f3:b4:f3:cc:59:5f:f7:c7:30:10:68:e3:
                    69:8f:18:42:5c:75:dd:48:a3:01:74:e7:b9:88:75:
                    50:31:02:2c:29:d3:19:3c:27:d5:96:38:eb:e1:4f:
                    b5:75:cf:78:9a:62:4c:da:c4:32:a7:a9:1f:de:87:
                    90:f0:03:96:53:d6:ba:29:3b:0d:c3:38:09:98:8f:
                    63:b9:64:71:54:c4:9d:df:27:ff:d9:63:37:c6:c9:
                    f4:2c:16:c7:91:14:28:e7:64:66:4e:10:11:21:29:
                    7b:e0:b3:d7:cc:96:eb:d3:1c:bf:8d:a9:e8:89:86:
                    2f:d6:5b:39:9d:1a:e5:95:af:0a:ed:b9:7a:bc:18:
                    c5:a6:b4:b1:fb:56:79:12:a1:6d:94:58:af:cd:70:
                    07:e6:16:31:a1:c9:d5:9c:59:3e:d2:b6:1b:dc:5f:
                    92:e5:c9:f6:91:ad:95:4e:20:98:19:ab:f4:67:c3:
                    b7:6b:90:04:a1:3a:4b:64:b6:22:08:7a:f3:7d:78:
                    c9:4a:c3:35:78:63:2f:e0:98:3e:2a:b4:e3:63:7e:
                    8c:2d:8c:c7:82:1b:d3:9b:09:63:5d:b3:57:46:7e:
                    54:5b:61:41:c6:8b:d4:2c:81:32:0d:75:67:d5:78:
                    d4:a7:5b:dd:3c:c0:91:61:ff:b8:f8:4f:85:a8:2d:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:9C:D8:4D:6D:6C:A8:6E:5D:8B:45:25:7C:51:3C:2F:9A:80:28
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.89.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:10:9c:08:9f:f4:39:f4:72:9f:22:75:72:2a:7c:2c:f5:89:
         a8:09:96:47:44:e0:f2:78:02:eb:77:6a:d7:c4:ac:47:71:73:
         1e:7a:7b:51:22:47:cb:25:38:59:ed:b9:e4:29:84:cc:0c:78:
         42:6a:ae:9b:02:5e:66:1f:28:6a:41:52:2b:0d:3d:b0:a9:fb:
         00:87:05:d4:9e:de:3b:c2:d3:72:28:97:3f:62:77:1f:24:97:
         11:fd:db:ef:e7:b5:38:c8:f4:05:3a:11:e9:e6:c0:53:a9:43:
         f6:0e:5b:9a:88:80:c9:6a:c6:00:1d:ec:23:4d:da:8d:f6:50:
         49:5e:a7:d8:44:27:71:2e:0e:fc:df:49:a1:4b:b1:97:87:84:
         25:73:bf:31:a2:9f:ac:b7:a1:ca:44:79:84:e8:5a:29:63:a1:
         8c:02:b3:65:2f:10:89:bb:c5:f1:af:bc:fa:28:39:74:40:b1:
         21:1c:29:11:54:28:28:fe:22:c4:99:17:58:2d:21:22:d5:9a:
         da:52:9a:41:bf:03:b9:65:37:b5:19:57:14:c3:a6:16:e3:a9:
         eb:25:35:75:ef:ce:2e:e7:a1:23:3c:8b:18:0e:00:cd:4a:78:
         8c:65:63:ee:3e:9b:0a:8e:61:67:16:8c:0b:05:39:f3:30:cd:
         14:ee:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----