Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d0973bc-95ca-490e-8882-f2e49bc7e52e.roa
File:                     0d0973bc-95ca-490e-8882-f2e49bc7e52e.roa (raw, json)
Hash identifier:          OjIWxYUXNesHGV5ZR+QMHzQ7s3moET/QH0CiXatNOC0=
Subject key identifier:   8E:EE:59:DA:EF:55:6E:72:BF:ED:E9:46:4B:33:53:D3:86:BF:8F:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F9720F74F38F54EEA9022AAFB9B70A6B6BB92E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d0973bc-95ca-490e-8882-f2e49bc7e52e.roa
Signing time:             Wed 15 Oct 2025 22:06:45 +0000
ROA not before:           Wed 15 Oct 2025 22:06:45 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.92.46.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:97:20:f7:4f:38:f5:4e:ea:90:22:aa:fb:9b:70:a6:b6:bb:92:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 22:06:45 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=8ab8cc62b9cc8c0665a4251dde0191b4b3505d50351fdba2e162b3104d38a5a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:88:3e:09:5a:bf:cc:78:5e:cf:83:51:52:
                    43:00:79:09:ea:fc:5c:3f:a7:f3:99:45:b6:27:f6:
                    34:20:8d:3c:44:97:49:ff:49:28:25:df:bb:49:d7:
                    a3:8d:41:b6:ee:44:32:7e:14:45:17:34:f9:76:2e:
                    29:5d:0d:53:36:0b:eb:cd:e4:dd:19:a5:dc:86:ab:
                    61:15:aa:ba:6e:98:2b:f2:20:ce:81:b9:2b:6a:fe:
                    32:aa:3c:b9:27:b4:7a:bb:4b:8f:e5:bc:b6:8d:8e:
                    d2:bc:72:da:7a:fc:88:7c:fb:2e:ba:aa:36:b4:15:
                    45:dd:aa:86:e4:60:a0:c9:56:1c:be:be:f3:76:6d:
                    5f:d7:dc:da:0e:aa:f9:fe:ef:6c:3c:97:d4:91:6a:
                    6a:d1:6a:26:92:2f:eb:10:94:55:a6:c8:6c:7f:c5:
                    d3:e8:2e:d5:94:3e:6d:68:d1:fc:02:8c:3c:86:70:
                    41:ba:8d:e9:08:dc:ed:33:d3:c3:4a:42:5f:36:2a:
                    a4:a3:e3:c1:08:cd:02:cc:dd:e0:28:21:05:07:83:
                    1c:9f:3c:0c:01:07:20:d8:c8:e7:53:7f:ed:8d:10:
                    9c:61:28:7b:29:7d:47:47:50:30:d2:fd:4c:0b:b3:
                    95:82:82:84:5f:aa:bf:a5:17:4e:13:06:98:c1:a4:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:59:DA:EF:55:6E:72:BF:ED:E9:46:4B:33:53:D3:86:BF:8F:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d0973bc-95ca-490e-8882-f2e49bc7e52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:e4:ea:50:1b:3b:06:9b:42:84:a8:ae:c5:dc:cf:df:e3:4e:
         85:54:98:70:6a:52:5d:29:d3:fb:02:7a:6c:83:56:35:4e:41:
         0e:04:dc:0b:3e:bb:aa:d8:23:da:33:64:4c:7e:0d:0e:98:f5:
         ca:0a:41:62:89:4f:ee:82:9f:46:7d:f9:d9:6d:18:88:c8:d8:
         50:91:fc:1b:20:c2:fe:6d:0f:1e:e9:d4:d5:9b:3c:ae:75:4a:
         57:72:c6:f5:ff:26:1c:59:1d:f7:b8:cc:c6:0c:91:cb:28:83:
         68:58:5e:23:40:e7:c1:d2:42:ab:50:4e:06:28:aa:36:9d:3c:
         bb:27:17:a2:30:c9:8d:86:f5:d4:97:54:63:c6:7e:97:e0:b0:
         72:79:39:8d:5b:46:15:9b:74:81:d9:20:cb:23:e6:8f:00:08:
         37:41:39:39:ae:31:be:37:02:d1:e5:b9:1f:d2:a9:fd:8b:79:
         bb:2f:77:5f:91:83:f1:d6:e2:a3:e3:c6:fe:a3:f7:d3:25:a1:
         eb:4c:03:34:16:35:78:aa:e8:bc:ca:5b:2d:6d:96:51:94:87:
         08:90:58:ed:50:e7:24:f5:0b:29:5f:69:2e:d6:a3:f9:05:b1:
         ea:6c:d0:5a:35:08:94:c3:8e:0a:b9:15:1d:c3:ea:39:eb:62:
         38:e5:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----