Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddf1e97-cd5a-4958-b315-7541e5e380c2.roa
File:                     fddf1e97-cd5a-4958-b315-7541e5e380c2.roa (raw, json)
Hash identifier:          eNrsI95g0kWLr+JbRQrPt1s/bnaJmtGcp2jHnJjhohk=
Subject key identifier:   09:24:38:3B:A7:BC:A3:DB:A7:47:44:29:06:78:27:70:6D:60:BF:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36C4CC8631DB81C509A18CF9CF27A3C18E591209
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddf1e97-cd5a-4958-b315-7541e5e380c2.roa
Signing time:             Fri 31 Oct 2025 01:01:30 +0000
ROA not before:           Fri 31 Oct 2025 01:01:30 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.18.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:cc:86:31:db:81:c5:09:a1:8c:f9:cf:27:a3:c1:8e:59:12:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 01:01:30 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=bd3592ca7143f554cd34d4f79b060e2352f85b87705b6099e4b2b2bdcadd8045, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:a8:94:ae:b4:75:35:67:54:c5:64:6f:67:
                    69:7f:91:a4:0d:ae:60:84:ac:69:00:69:fb:3c:1f:
                    8b:36:dd:03:62:cf:40:14:cb:5f:b3:c9:b1:38:ee:
                    da:87:d6:e9:2c:e4:5d:c4:09:60:01:93:2b:e0:f9:
                    76:86:46:c6:a3:93:af:f1:c7:d3:0b:81:ce:5e:0f:
                    e5:f4:95:ba:6d:83:60:0b:19:e6:36:cb:2f:f8:26:
                    f8:d1:3a:02:37:1e:64:8e:ba:90:69:72:3d:bc:37:
                    ce:89:b7:90:75:e3:7d:27:df:08:97:57:92:3f:12:
                    95:ff:56:97:a4:fc:88:d8:6b:c0:50:fc:98:24:51:
                    71:bb:e3:9c:42:f5:d1:79:d9:28:5c:9e:c9:65:d3:
                    d5:7d:15:38:a2:bc:1a:00:d8:48:ac:5f:29:ec:c1:
                    ee:40:b5:3c:77:a5:df:8b:5c:24:38:56:ea:72:ce:
                    81:ed:c3:4a:bb:13:08:66:7e:69:a1:bd:23:fa:24:
                    b3:9c:bd:ef:d6:89:c8:d1:85:bd:18:f4:6d:19:d8:
                    cf:2e:93:90:55:30:c3:82:71:29:1b:78:f2:13:73:
                    08:5a:39:39:b1:6e:9e:c3:ff:3e:af:84:5f:e6:f1:
                    6a:18:3f:47:57:9a:55:94:12:fe:ed:eb:54:56:40:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:38:3B:A7:BC:A3:DB:A7:47:44:29:06:78:27:70:6D:60:BF:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddf1e97-cd5a-4958-b315-7541e5e380c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:4b:ce:7e:66:2b:83:49:31:55:0c:08:92:d1:bd:4c:b5:
         6e:c1:21:fe:ee:a3:cc:1f:e8:40:36:5c:62:5b:a7:ac:fa:99:
         c4:25:a0:d9:13:d0:dd:b7:d7:5f:f9:b2:2a:49:ba:66:be:18:
         aa:52:07:7a:75:9e:00:f8:a8:86:ac:e8:96:aa:49:54:93:d6:
         d0:d7:8c:c6:ea:85:c9:53:d3:28:0c:ce:61:82:ea:2e:f6:4b:
         42:43:f8:3b:0c:43:7b:ef:8e:c8:c7:8c:26:14:a5:c9:f5:a4:
         7d:0b:df:55:3e:65:e8:7f:1a:b5:1f:2b:52:ea:17:2e:de:b4:
         3f:92:17:f0:3c:5c:d7:4d:27:18:79:8c:74:f4:b4:7a:46:13:
         b8:7d:23:3c:2a:89:44:7e:23:75:f7:f9:0f:29:63:fe:97:1f:
         1d:aa:4e:b2:e9:55:18:54:c7:d9:a9:f0:90:e8:04:c3:82:00:
         45:a4:e6:61:c1:df:39:fc:f1:68:bc:67:ad:0b:15:f9:3e:7c:
         cc:06:20:40:3a:ad:dc:92:5f:6c:5f:6c:e2:e6:4e:9e:95:55:
         bb:2f:5c:21:e7:89:66:af:92:c6:ce:c0:12:0e:f6:81:02:2c:
         bd:b8:0d:85:a1:37:b5:90:24:5a:e0:56:5f:86:ec:85:4f:23:
         54:17:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----