Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa
File:                     0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa (raw, json)
Hash identifier:          m79auLi146FBplqNQdZnhEA6YZgLsxkze64rmacwJK0=
Subject key identifier:   8D:8B:15:CE:26:88:19:DC:DA:DC:41:98:CA:DD:85:07:CD:2B:09:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       38DCEC9874941E92E82641C2332FD023119A12C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa
Signing time:             Sun 19 Oct 2025 00:41:31 +0000
ROA not before:           Sun 19 Oct 2025 00:41:31 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dc:ec:98:74:94:1e:92:e8:26:41:c2:33:2f:d0:23:11:9a:12:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:41:31 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=1d729f7ac5ba8ebef1646a2c4d5d9de487a7511bdaf197d0b45641dda98bcd29, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:b2:c3:54:ec:ff:44:96:3a:a0:a7:f4:79:
                    fb:09:27:79:64:c4:55:25:9e:77:a0:94:31:e4:5d:
                    f3:f4:ff:49:f3:b4:5b:4b:73:e7:66:83:d5:34:56:
                    3f:d4:b3:da:0a:b4:25:b4:ba:1f:db:d8:5b:90:5e:
                    86:53:a2:a8:0e:ac:ce:30:e1:e1:22:9a:60:9a:fd:
                    59:74:ad:d8:d5:97:c4:44:96:f5:9c:25:2c:25:3c:
                    c5:e0:10:f3:d4:20:7e:b2:6a:3a:81:27:a0:c5:d1:
                    e4:e3:55:cc:75:91:90:a0:e1:4a:3a:75:86:c2:83:
                    46:4e:e1:76:5c:f2:8a:97:7a:75:79:80:07:bb:1f:
                    00:cf:97:36:eb:0d:55:d0:15:7b:8b:d6:59:83:85:
                    7a:f8:43:fa:92:16:8c:70:05:61:7c:ba:d2:1e:53:
                    8c:45:1a:f7:3e:de:c0:92:67:d5:d4:ec:af:75:46:
                    f0:fd:13:eb:72:c3:2a:23:b2:ee:ce:6c:7f:5f:80:
                    41:be:a2:50:a4:07:6e:ca:31:70:bf:39:c7:31:48:
                    ac:bd:bf:b2:e3:09:4a:6b:4f:80:e7:4f:66:4d:78:
                    aa:a7:d8:0a:bd:69:c5:4b:51:1d:31:3d:83:a8:0c:
                    76:e4:2c:46:fe:6f:c5:db:59:0a:ce:2c:ec:29:ef:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8B:15:CE:26:88:19:DC:DA:DC:41:98:CA:DD:85:07:CD:2B:09:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:35:cc:8f:8c:61:0a:7f:22:0d:a8:80:06:4f:f1:f9:10:
         7c:98:d8:03:68:e9:fe:cb:78:ab:b5:75:e7:50:cc:aa:cb:d1:
         84:ae:90:b7:fb:37:1f:2b:aa:05:10:a6:14:a3:39:d5:05:b0:
         1d:4e:68:7f:ef:aa:71:5b:f6:bb:1a:1c:79:09:73:2e:1b:a9:
         25:6d:0d:26:7e:97:86:3b:72:6c:14:e7:fe:8a:42:b0:5c:2a:
         ad:8e:fb:75:36:0b:4f:50:f0:b4:3b:15:6a:90:69:5a:f9:c1:
         50:11:ca:05:d2:34:94:96:29:54:7f:c5:48:4f:70:5c:87:fc:
         6e:c3:4c:27:7c:13:ea:1d:02:f7:21:22:08:02:cb:19:42:7f:
         03:a3:64:fe:35:d7:48:61:0e:0b:c7:09:07:41:15:12:72:fd:
         6e:2b:57:30:8c:5b:56:93:3b:3a:03:2a:e4:dc:69:ce:b6:46:
         47:87:7e:04:99:a0:ff:f8:a8:cc:1b:b5:05:82:a7:f3:92:c9:
         62:e5:90:09:f6:1b:34:40:a7:8a:c8:0e:a9:fd:b6:de:17:18:
         85:83:5f:c9:2b:53:6c:71:fc:be:33:05:f3:74:cd:46:46:d3:
         08:cf:29:f0:7a:a3:ef:95:1b:a7:62:cc:c9:55:d5:b0:4e:71:
         f5:1b:7f:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUONzsmHSUHpLoJkHCMy/QIxGaEsQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDA0MTMxWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZDcyOWY3YWM1YmE4ZWJlZjE2NDZhMmM0ZDVkOWRlNDg3
YTc1MTFiZGFmMTk3ZDBiNDU2NDFkZGE5OGJjZDI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqnrLDVOz/RJY6oKf0efsJJ3lkxFUlnneglDHkXfP0/0nz
tFtLc+dmg9U0Vj/Us9oKtCW0uh/b2FuQXoZToqgOrM4w4eEimmCa/Vl0rdjVl8RE
lvWcJSwlPMXgEPPUIH6yajqBJ6DF0eTjVcx1kZCg4Uo6dYbCg0ZO4XZc8oqXenV5
gAe7HwDPlzbrDVXQFXuL1lmDhXr4Q/qSFoxwBWF8utIeU4xFGvc+3sCSZ9XU7K91
RvD9E+tywyojsu7ObH9fgEG+olCkB27KMXC/OccxSKy9v7LjCUprT4DnT2ZNeKqn
2Aq9acVLUR0xPYOoDHbkLEb+b8XbWQrOLOwp7xMvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjYsVziaIGdza3EGYyt2FB80rCYwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBmYmI2ZjFmLTk5YmMtNDM1Yy05Y2ViLWJhNTQ4ZWUzYTU1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVLA4AwDQYJKoZIhvcNAQELBQADggEBAKOxNcyPjGEKfyINqIAGT/H5EHyY
2ANo6f7LeKu1dedQzKrL0YSukLf7Nx8rqgUQphSjOdUFsB1OaH/vqnFb9rsaHHkJ
cy4bqSVtDSZ+l4Y7cmwU5/6KQrBcKq2O+3U2C09Q8LQ7FWqQaVr5wVARygXSNJSW
KVR/xUhPcFyH/G7DTCd8E+odAvchIggCyxlCfwOjZP4110hhDgvHCQdBFRJy/W4r
VzCMW1aTOzoDKuTcac62RkeHfgSZoP/4qMwbtQWCp/OSyWLlkAn2GzRAp4rIDqn9
tt4XGIWDX8krU2xx/L4zBfN0zUZG0wjPKfB6o++VG6dizMlV1bBOcfUbf5I=
-----END CERTIFICATE-----