Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef9673ee-774e-4009-855b-63c7e6931b3f.roa
File:                     ef9673ee-774e-4009-855b-63c7e6931b3f.roa (raw, json)
Hash identifier:          EbGn8HNnoDdXS43gmfmxrQgPBlGUhlpAZFHrbDB+B/k=
Subject key identifier:   CA:0B:E8:6A:7A:53:82:C2:A0:55:F6:3C:33:55:2F:B6:3E:6C:DD:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12A664B9433A3E42B77A4053C42E182A845EA5C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef9673ee-774e-4009-855b-63c7e6931b3f.roa
Signing time:             Tue 04 Nov 2025 00:20:54 +0000
ROA not before:           Tue 04 Nov 2025 00:20:54 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.158.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a6:64:b9:43:3a:3e:42:b7:7a:40:53:c4:2e:18:2a:84:5e:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:20:54 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=6cd8e55fd6d48e8fef7b91d8afc27d7f5af887a0885ad8f324f57e9bc7a908e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:72:4f:ee:cd:0f:a3:4a:52:31:46:43:c0:
                    ec:ed:01:63:0d:9c:8e:90:f1:23:2d:e5:d5:99:7c:
                    8e:a5:6c:3a:69:29:34:d5:83:aa:43:16:0f:ca:7f:
                    9d:88:0d:0c:64:d2:45:a6:a1:13:fc:e0:96:ee:1e:
                    97:7e:a4:15:e2:9a:ee:8a:b3:01:03:dc:50:9c:cc:
                    1a:9b:0d:64:f1:6e:d1:a8:86:98:1a:8d:81:85:0e:
                    ca:25:6f:0c:3d:56:c2:1f:26:a9:ed:8c:55:5f:54:
                    91:ed:78:16:cf:54:24:3d:32:89:f4:ab:54:05:fc:
                    80:d1:39:8c:a9:d6:de:87:cf:84:53:d7:6b:dd:9e:
                    bf:53:93:ec:c8:0d:57:37:74:cd:0a:59:cd:36:73:
                    8c:37:7d:8a:45:2a:aa:29:5e:5c:3a:eb:43:cf:2e:
                    15:58:8e:4e:cd:93:f0:93:5f:f3:4d:37:1b:9b:e1:
                    a0:9f:a2:73:9f:0f:13:d3:33:8e:57:b3:e2:43:be:
                    08:3b:cc:2d:3b:1a:3c:88:53:61:3b:bf:09:ec:c1:
                    fa:17:23:58:d9:8d:68:df:99:51:7d:45:7b:6b:a6:
                    ab:92:65:94:68:5f:bd:a3:da:f9:90:66:a1:5d:48:
                    ad:b7:f8:3c:92:75:73:df:bb:b5:5d:f4:8f:8b:32:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:E8:6A:7A:53:82:C2:A0:55:F6:3C:33:55:2F:B6:3E:6C:DD:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef9673ee-774e-4009-855b-63c7e6931b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:51:43:1e:d5:16:8f:70:55:4f:06:ce:05:0a:5a:83:7d:
         c7:a0:6d:55:7b:0b:f8:0e:eb:c0:95:46:46:42:46:51:c3:77:
         e4:94:fc:a2:0e:26:af:c3:d4:9a:87:63:79:3e:38:f4:20:8c:
         43:68:da:b6:29:c0:1e:47:92:87:15:9d:7a:5d:5f:17:56:fb:
         53:e4:95:de:f9:a7:6f:63:3c:b2:af:cc:d7:99:ae:e6:c9:86:
         1e:99:57:b9:b6:df:0a:dc:50:0b:3d:0e:3e:82:40:be:93:fe:
         b0:56:88:b0:61:ee:76:db:e8:4d:0f:26:76:d6:24:c4:ed:65:
         81:9f:c6:fd:fd:7d:6b:b8:0c:f5:9e:74:ef:e5:d1:0b:fa:f3:
         b2:7a:04:59:26:0f:8d:12:87:92:dd:e0:af:3a:2a:1d:31:15:
         dc:63:92:f6:04:a0:3f:53:37:70:78:55:ae:43:60:a0:d4:66:
         6b:c5:ae:6e:99:74:de:36:b6:b7:b2:a4:11:04:a1:36:fd:47:
         5b:0f:3f:1b:44:4e:9b:f2:13:4a:30:f8:ef:aa:f3:15:fa:42:
         92:4a:93:26:16:2e:87:47:87:c9:49:12:65:2f:52:85:8b:06:
         42:de:df:65:05:83:41:f0:b6:c3:e7:3e:5e:e2:33:c7:90:ad:
         84:cc:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----