Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf326e3-e3f5-4e24-81db-b3229ac03a45.roa
File:                     cdf326e3-e3f5-4e24-81db-b3229ac03a45.roa (raw, json)
Hash identifier:          ij9QQhO4wBgXfqHj5cTH1HUQJGTXGvENBvcxkpxlXBs=
Subject key identifier:   AC:83:E9:80:2D:E6:AF:75:C9:D1:20:83:88:48:F3:F4:F4:83:1C:76
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       60F3EEBE15DE24EF8488FB759A57CE2B62A7C7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf326e3-e3f5-4e24-81db-b3229ac03a45.roa
Signing time:             Sat 24 Oct 2026 01:50:05 +0000
ROA not before:           Sat 24 Oct 2026 01:50:05 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        18.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f3:ee:be:15:de:24:ef:84:88:fb:75:9a:57:ce:2b:62:a7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 24 01:50:05 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=d7e4b5f1f3bccf6947cf36569e2923302ac86ca247ee94ec3805947db75000d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:a6:10:e0:fb:97:3f:b0:75:6f:2b:b8:bf:
                    58:21:5f:3f:cf:94:e2:fb:bf:79:aa:ac:5f:da:34:
                    b3:4e:26:ed:5e:df:7f:f5:4c:e6:c2:4a:1b:03:09:
                    27:25:7e:47:f8:38:84:4c:41:42:f6:e3:cc:71:b5:
                    a9:81:6b:41:46:1c:8b:f4:3a:ee:db:05:ef:12:79:
                    a4:c7:92:0c:a4:8a:c0:96:58:bb:17:97:af:05:f5:
                    03:a3:d9:dc:46:96:a8:20:e8:64:62:57:6a:bc:cf:
                    a3:75:04:a8:b6:5f:14:fe:f6:e4:47:5f:35:31:d2:
                    00:3c:9f:69:58:97:2a:61:cc:b5:53:79:e6:55:fb:
                    73:7e:ec:f5:e5:44:1b:60:41:be:c3:ad:09:87:48:
                    07:99:32:bf:20:3e:87:41:8a:e8:1a:a5:79:b3:8a:
                    77:61:15:c4:b9:e0:0c:54:4c:a6:2b:44:e5:b7:7c:
                    5f:bf:cb:75:92:0f:df:e1:57:bc:4e:a2:79:16:5d:
                    61:44:6e:78:6c:90:52:a8:2a:38:71:03:8f:ae:4d:
                    1e:ad:ee:58:98:ea:82:56:c5:6e:5a:1f:9e:d4:0a:
                    48:d0:bf:54:d0:72:21:2f:26:48:ac:fa:fe:5e:06:
                    95:bc:99:82:ec:4b:45:4d:ca:1a:b5:d7:89:f3:9f:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:E9:80:2D:E6:AF:75:C9:D1:20:83:88:48:F3:F4:F4:83:1C:76
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf326e3-e3f5-4e24-81db-b3229ac03a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:6d:fc:21:78:8c:39:79:51:aa:9f:a7:63:74:db:b4:d3:
         8c:99:62:0f:3b:d1:05:ae:8b:eb:1d:b4:70:d9:ea:bc:59:a6:
         42:c3:6c:11:d3:8b:49:d6:0e:93:34:2f:43:ab:b3:ae:8b:af:
         0c:92:05:00:95:55:2a:8c:cc:39:4a:c1:99:66:9a:70:2d:37:
         a7:89:34:8e:4c:b2:e5:ea:3e:d8:88:89:ea:97:4a:85:aa:7c:
         07:3a:8e:cd:4c:87:ab:9e:e6:a7:e2:4e:cf:62:e7:15:ce:82:
         ba:81:a2:c2:98:df:6b:f4:fc:74:6d:18:15:81:c7:e2:88:93:
         57:12:3a:dd:44:2d:85:d1:e4:73:47:a9:f5:39:4e:b9:a2:82:
         c9:ba:f8:15:d9:3d:ee:d5:c7:b4:9a:5f:90:d2:1a:69:9a:6a:
         04:3b:7a:cb:62:2d:47:93:4c:68:a7:53:2e:66:7b:1a:b1:5a:
         4d:fe:89:dd:04:0e:05:3b:d6:5d:92:a5:a3:02:2f:53:95:35:
         49:0a:fd:44:1c:92:d8:3a:44:84:0b:e4:fe:7e:c7:4a:30:50:
         d8:cc:62:41:be:25:b1:4a:a8:b5:63:89:d4:4b:14:cd:0b:a1:
         e8:16:b3:1e:d8:05:06:ce:4c:61:0f:84:9d:a4:45:1e:a2:1e:
         bf:c4:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----