Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
File:                     0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa (raw, json)
Hash identifier:          FYLB7h0qrPrto8GW1tuu8dWbzNYAPGVKD67PS/umVVo=
Subject key identifier:   C2:AA:B7:DF:B3:2F:EB:FD:48:1C:3E:BC:06:31:9D:34:A6:1C:BF:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75DD736A10F069D824C1806979994BEA18B0F068
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa
Signing time:             Sat 18 Oct 2025 03:31:16 +0000
ROA not before:           Sat 18 Oct 2025 03:31:16 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        92.201.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dd:73:6a:10:f0:69:d8:24:c1:80:69:79:99:4b:ea:18:b0:f0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:31:16 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=be01d2c028f8d42c5877db9fa918be4f116626e6b0ce7b3f0b1363c29c01a3d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:78:72:78:95:1a:24:a0:bf:18:f8:3c:82:
                    a6:24:9b:4a:34:c0:22:c8:dd:51:5c:a5:e7:d3:9d:
                    cf:03:b5:ab:67:bc:e9:d8:cd:db:8a:29:8b:cb:da:
                    74:05:37:61:08:9e:dc:b4:39:76:45:e2:8f:f3:58:
                    c1:ff:be:99:e9:77:25:75:85:62:8f:84:8c:4d:f6:
                    0d:68:79:86:1d:0f:08:90:7d:57:83:7e:48:cc:8e:
                    f2:41:15:31:6f:0e:29:25:0c:e9:1b:12:91:40:b5:
                    ba:1a:76:1c:62:d1:6f:51:20:09:d0:55:2e:36:0c:
                    fc:80:92:62:68:7f:86:71:03:2a:20:79:d5:5b:12:
                    1f:f2:46:39:60:85:eb:c6:a9:6b:f5:3e:9f:39:20:
                    cb:ef:92:64:92:75:bf:3f:9c:2a:34:50:fd:b7:36:
                    3f:7b:73:c9:7d:58:37:30:6f:bd:d8:ec:61:ae:1c:
                    39:6a:34:96:7d:62:b9:7c:9e:74:ad:f8:ad:b1:f1:
                    62:7b:d4:6f:fe:fd:55:ec:94:26:f3:72:f1:90:13:
                    40:5c:ea:25:6c:27:ea:8b:47:06:d6:72:cc:01:ac:
                    a8:b8:16:20:18:ce:af:06:57:bf:08:2f:2b:8c:9e:
                    b5:f0:c3:76:2c:06:5b:28:e7:10:3d:b5:59:c2:94:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:B7:DF:B3:2F:EB:FD:48:1C:3E:BC:06:31:9D:34:A6:1C:BF:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0114a896-9728-46a0-a9f2-a6fdf1c6fb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         90:34:25:dd:9c:02:b8:72:ee:d9:8c:31:bb:25:d9:85:31:53:
         a4:09:d6:02:8a:1f:a0:7d:49:18:83:16:0a:66:21:5d:76:8e:
         d0:b9:ae:01:bb:13:a5:9b:4a:0a:95:8e:5c:f0:57:69:26:cf:
         b4:9a:00:10:ce:dd:96:ea:4a:86:a6:7c:b0:1f:f3:05:80:27:
         b1:13:de:4c:50:1e:2e:13:04:2b:08:64:cf:24:6a:11:42:41:
         bf:a2:e7:3b:ec:1c:bb:fd:60:8d:f2:bd:39:6f:cc:4e:00:fa:
         0e:05:39:91:0f:c0:ca:6f:84:9c:6a:ff:49:ea:9a:5e:c9:87:
         0c:16:1a:36:3d:5d:da:5b:e5:13:38:d3:be:af:a6:dc:5b:a2:
         e4:04:82:f6:e4:b3:ac:a8:63:08:52:14:2e:f8:a5:e8:e1:9b:
         bc:6b:9b:74:72:f0:f5:c7:2b:de:d5:b9:2c:c2:98:13:60:7c:
         e6:24:9c:6e:83:8f:e8:2e:eb:be:5b:13:06:40:ef:f1:f9:a5:
         10:61:be:6e:ad:d8:af:43:2e:1d:25:5e:80:ec:1d:4d:59:86:
         92:b6:15:24:82:51:bb:6e:39:89:b9:a5:66:5c:25:41:97:2a:
         07:89:d5:c9:a7:9b:72:52:6a:dc:d5:5e:ad:28:89:ed:6e:03:
         44:cf:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----