Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/afeeb8b2-1d77-47bf-9aa4-fc2aaec74b23.roa
File:                     afeeb8b2-1d77-47bf-9aa4-fc2aaec74b23.roa (raw, json)
Hash identifier:          B2quuVaiqNl4SsPv8ug9nPUiXdxYufpGQov/SI4waNM=
Subject key identifier:   16:27:18:1F:FA:EC:F2:FD:93:10:D8:78:B0:82:EF:76:01:2C:50:F5
Certificate issuer:       /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial:       382440FEA388F01D3E8011C7105F376A871E692F
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/afeeb8b2-1d77-47bf-9aa4-fc2aaec74b23.roa
Signing time:             Wed 04 Nov 2026 17:10:37 +0000
ROA not before:           Wed 04 Nov 2026 17:10:37 +0000
ROA not after:            Tue 02 Feb 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        146.162.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:24:40:fe:a3:88:f0:1d:3e:80:11:c7:10:5f:37:6a:87:1e:69:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
        Validity
            Not Before: Nov  4 17:10:37 2026 GMT
            Not After : Feb  2 23:59:59 2027 GMT
        Subject: serialNumber=c200ef8bfdbd51db0a6d5dcacf15fa7458d04d36e9417845b6b4a1bc8cba5289, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:97:9d:ad:1e:63:6a:f1:30:79:30:35:90:
                    97:b6:49:43:fe:a9:80:65:f2:87:4f:8b:1a:e0:c6:
                    91:5c:f2:97:a1:65:68:96:ba:4d:9a:9b:2e:62:75:
                    00:0e:43:23:c0:a0:a3:b3:8c:9b:0d:33:78:2f:e1:
                    77:e2:d5:b6:bf:49:bb:81:4e:29:75:62:3b:e5:78:
                    b5:c3:39:cb:de:8e:5b:03:7d:2d:90:a7:43:f7:c3:
                    2e:1c:ce:2a:78:8f:a1:f7:fb:41:ba:b8:fc:34:36:
                    2b:fe:92:0a:88:64:8f:12:09:14:1d:76:80:15:79:
                    78:62:46:e7:4b:30:62:62:83:f8:cc:ed:de:b4:d7:
                    99:ad:48:fd:84:96:87:e9:e8:11:47:b9:6e:6c:de:
                    a5:9f:95:10:4f:6e:a4:e7:80:19:86:10:bf:23:7a:
                    6d:3a:f7:91:2b:82:9d:0d:bd:00:3e:a3:dd:28:12:
                    0f:a3:1f:de:8c:b1:18:50:70:04:b2:4d:e6:eb:90:
                    a9:cb:0f:40:26:65:fd:c0:ab:1b:4a:ea:25:3f:0b:
                    b7:2b:c5:c2:46:c9:9a:fb:2c:c2:aa:9b:03:5d:70:
                    bc:7f:df:4d:e7:a1:5f:6a:99:db:8a:e2:8b:6f:e5:
                    d2:9c:77:00:14:0d:de:72:14:1f:28:e0:6a:00:4d:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:27:18:1F:FA:EC:F2:FD:93:10:D8:78:B0:82:EF:76:01:2C:50:F5
            X509v3 Authority Key Identifier:
                keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/afeeb8b2-1d77-47bf-9aa4-fc2aaec74b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.162.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:a4:e1:33:b3:5e:0d:dc:ee:52:a3:dc:a1:84:59:a8:28:
         ee:0a:f6:b1:c5:79:e3:9d:20:45:10:ae:a1:43:67:f5:83:ad:
         c1:03:f2:49:c6:5f:59:a1:ed:ee:0a:65:a3:19:c9:c0:e4:1d:
         4a:10:0a:06:ba:df:b8:d4:61:64:eb:f5:20:d3:1b:ee:53:a9:
         43:28:61:d4:5d:d9:4b:f1:8e:a3:fb:89:49:58:24:63:98:a5:
         f9:f6:a7:ca:b9:6c:b2:e7:6d:1d:35:4a:14:08:17:c7:da:7e:
         3c:63:7a:8b:d9:86:59:68:70:4f:58:fd:27:0f:4f:be:05:30:
         9a:35:27:2b:35:fc:68:3e:2e:b3:e7:39:8b:ef:1b:2e:8e:cb:
         f8:9a:18:d8:48:29:24:22:89:c5:e7:a9:c9:59:bc:29:56:a5:
         9c:6e:fe:1d:af:f8:f6:a7:f1:e8:63:4f:e4:66:ab:01:5f:d5:
         dd:ca:74:f3:e5:a5:54:1b:6d:8e:31:53:e7:93:86:c6:20:34:
         1f:73:a3:02:2a:ac:a7:7c:a5:5a:2e:f2:53:6e:f0:3d:55:79:
         30:c8:8f:34:ea:33:c7:b6:0b:3f:5a:0f:4b:5e:87:08:ca:df:
         a7:4e:ce:0f:ae:4f:39:83:81:3b:d0:53:bf:c7:f4:6b:42:d7:
         73:7d:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----