Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa
File:                     f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa (raw, json)
Hash identifier:          VevujQrVPlqV8jKSJ+Rb83gAU6EnSsUJS/i3T6nC1sU=
Subject key identifier:   0D:D0:CA:51:41:F2:A5:10:08:92:BC:F0:9E:9B:6C:E5:ED:A6:A8:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79FBBA51C7BFC49F31033B7FDE707E044A6A2B81
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa
Signing time:             Fri 31 Oct 2025 00:10:35 +0000
ROA not before:           Fri 31 Oct 2025 00:10:35 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        13.128.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:ba:51:c7:bf:c4:9f:31:03:3b:7f:de:70:7e:04:4a:6a:2b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:10:35 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=c5e46ab7781a164d52149f4377cb6d123506df57610baee0b0fa5f9e09822cec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:5b:95:4e:81:97:d3:df:74:b7:10:49:66:
                    d3:b6:b0:99:bd:81:41:82:7e:02:fd:95:35:8c:0f:
                    3b:0c:49:aa:20:30:42:37:6d:12:1f:09:9b:8e:c8:
                    11:56:36:b1:20:7e:d6:39:d3:f5:ea:ee:ce:39:dd:
                    78:27:1f:1c:0a:67:b6:7c:c7:5f:f7:09:de:66:58:
                    b4:77:04:e4:32:01:47:bf:3c:fe:f1:76:9d:ed:f6:
                    65:86:93:a4:63:84:f9:ec:4d:69:c0:a3:ee:4a:7e:
                    ed:e4:9d:93:e9:24:23:c6:1d:c2:8e:ea:20:5a:6e:
                    fd:c9:3c:6e:9b:2f:d5:f3:c0:02:35:12:9a:27:2d:
                    af:e1:fa:41:1e:42:59:fa:ea:ab:dc:fd:de:f0:65:
                    70:a6:11:55:2d:b8:6a:8e:6e:65:01:bc:13:6a:97:
                    2e:2f:bc:83:bb:28:80:a6:42:fc:fd:73:59:f7:24:
                    44:9b:f4:f0:d7:26:76:75:02:a5:0d:b1:16:3a:75:
                    ca:74:f1:1d:d0:40:27:12:8b:45:a1:a3:06:3c:54:
                    d7:ad:36:ef:b7:a1:a8:9a:fe:be:70:9a:2c:b6:5d:
                    66:53:c5:50:04:61:e9:21:55:3c:b5:6c:37:2e:64:
                    84:89:bb:e5:39:7c:59:29:42:23:d4:ce:8f:1f:1c:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D0:CA:51:41:F2:A5:10:08:92:BC:F0:9E:9B:6C:E5:ED:A6:A8:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c9:b9:e9:2e:33:8f:21:bb:df:34:d4:bc:97:e9:c6:ad:8b:d2:
         f1:73:58:2e:2b:dc:a0:6a:93:a9:18:0c:8f:01:80:20:4e:bd:
         de:28:ce:a2:44:22:60:48:57:2a:38:07:18:61:24:df:b8:0c:
         01:ae:dd:b3:7d:bb:91:22:25:2b:e1:44:33:63:56:87:e3:62:
         f4:16:cb:d9:5c:0a:f3:17:1f:0d:e8:7b:e7:aa:75:cb:a9:44:
         42:91:a2:f5:8d:57:c0:8f:af:51:56:84:4c:ca:bd:6b:91:46:
         2e:28:ce:ae:f4:91:a9:6b:8e:8e:1c:15:6b:27:bb:51:de:26:
         1b:e9:8b:9d:e9:c8:79:9e:7b:b4:37:47:5f:02:3d:d6:3d:74:
         82:2a:64:95:39:29:09:64:61:96:7b:2d:65:c3:73:d4:b9:4a:
         1e:fe:b1:b6:34:91:3a:00:45:b5:2f:ad:99:1d:29:1c:d3:86:
         7e:3e:ae:84:6d:09:55:69:11:2d:ef:89:b6:38:1f:76:36:49:
         c3:ca:eb:9f:5d:43:4c:2c:c2:f0:9b:a1:e5:34:1e:9c:16:a9:
         9d:ae:3c:b2:40:44:13:79:c7:9d:35:1f:d7:7e:d0:df:d4:95:
         35:fd:3b:c5:b0:a5:82:30:e2:53:23:2a:a4:bc:86:b1:a9:e9:
         c8:4b:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----