Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa
File:                     036329c0-71d8-455b-b274-71838bbade22.roa (raw, json)
Hash identifier:          ebHpiNSvrZ18JdvEUBrvokWMAQFNO/fuqPra6S8wILA=
Subject key identifier:   68:86:2F:DC:1B:42:C5:ED:4B:6B:76:F5:13:E5:1B:99:51:E7:DC:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28EDC9B70C606ED04688F95EE7218DA4F2E05C2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa
Signing time:             Tue 30 Sep 2025 00:02:54 +0000
ROA not before:           Tue 30 Sep 2025 00:02:54 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.180.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ed:c9:b7:0c:60:6e:d0:46:88:f9:5e:e7:21:8d:a4:f2:e0:5c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:02:54 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=96b763819982e88453188f30575f6bb1c6253f4c3f830a58eff438e6f99e8674, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:32:42:a3:e7:82:e3:e3:1d:08:85:59:0a:
                    af:58:99:c9:34:dc:d5:1f:5c:65:ec:c7:f7:1f:07:
                    e4:0b:f2:33:a0:8e:38:9e:1c:df:0a:3f:84:57:17:
                    29:c2:eb:5c:c9:9b:40:e6:15:70:c7:ef:ce:8b:22:
                    db:d1:fd:16:a4:3a:c7:0d:a3:71:90:ee:9c:86:91:
                    b7:fb:af:f5:f9:24:ad:ab:02:fe:4f:91:66:ab:ca:
                    13:e8:df:6e:33:2b:bf:06:c9:e7:db:41:b5:1c:3c:
                    2d:27:6c:99:bf:44:40:92:fb:71:cc:d7:c4:97:3b:
                    b4:45:a1:9c:f9:a9:1b:c1:c7:c5:ff:2e:69:4f:51:
                    e4:d5:90:27:29:8c:d6:b0:19:8b:55:3c:7d:21:b8:
                    87:61:ef:d0:ac:13:1f:26:a3:97:67:f0:22:7c:96:
                    22:28:a8:5f:f0:15:aa:88:b1:64:88:95:0a:f4:9c:
                    ce:f8:83:28:50:c2:8c:25:e5:82:58:a1:88:96:e0:
                    e7:72:95:5a:47:de:e5:2a:f6:f2:00:4f:d9:52:18:
                    05:9e:13:87:76:53:2a:d8:5f:fe:cb:2f:bd:0f:51:
                    a7:06:68:39:da:33:db:79:9b:bf:d0:1c:7e:97:16:
                    c1:fa:1b:0f:e3:e1:cc:57:31:73:2f:e1:a3:b1:20:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:2F:DC:1B:42:C5:ED:4B:6B:76:F5:13:E5:1B:99:51:E7:DC:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036329c0-71d8-455b-b274-71838bbade22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.180.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:35:ec:3c:6e:e3:d3:f8:e5:05:98:2b:97:f8:9c:83:60:cc:
         9f:df:0b:44:5c:13:61:5f:30:bc:6a:8c:62:08:0b:90:0f:72:
         c4:a9:62:e6:cc:ab:dd:28:b1:86:23:e9:3b:6d:cf:e9:40:2f:
         63:be:73:54:03:9e:a0:4d:dc:66:82:f5:6c:92:c2:d3:2f:8a:
         49:5a:6e:c4:e5:e1:48:03:c6:b3:0b:19:9d:e3:12:71:80:8a:
         54:94:6e:37:27:fe:71:79:66:ba:80:dc:d8:03:a0:0d:07:93:
         66:3a:cf:e3:6e:92:f7:ce:97:2f:0f:d4:34:7b:31:e1:11:78:
         39:0c:a0:02:56:c9:36:6b:fa:77:b0:aa:41:a0:a4:24:29:66:
         25:87:03:68:f6:44:cb:33:31:30:06:3e:bb:26:62:d9:db:a7:
         db:b7:37:b8:94:ae:d1:14:e5:4b:8c:0b:c3:40:08:e7:2e:bf:
         31:15:7f:a8:57:37:fd:4e:d6:ce:db:97:20:ad:c6:f4:11:25:
         26:42:b0:b8:b5:db:93:87:1a:16:3b:1a:1c:44:17:84:7c:09:
         8d:c3:22:cb:8f:e5:b2:97:0f:d5:6a:78:d2:3f:ff:51:a6:0a:
         66:75:bd:93:44:84:06:06:1f:82:4f:9c:b0:e1:c3:38:61:9a:
         26:2c:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----