Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157c31d2-8f3a-49e2-99d2-b89887d0102c.roa
File:                     157c31d2-8f3a-49e2-99d2-b89887d0102c.roa (raw, json)
Hash identifier:          lKL+6RDlJxDM5E4ZdCpK5f6AnBU70OvY1fOU6rSlaIQ=
Subject key identifier:   48:25:B5:78:D5:46:BA:53:C5:5B:38:EC:8C:4E:4F:02:8E:69:FC:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DDE230381CA2A82F51057071DC9E3E5D1D727D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157c31d2-8f3a-49e2-99d2-b89887d0102c.roa
Signing time:             Sat 18 Oct 2025 02:20:09 +0000
ROA not before:           Sat 18 Oct 2025 02:20:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:23:03:81:ca:2a:82:f5:10:57:07:1d:c9:e3:e5:d1:d7:27:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:20:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=7d40687c452e88f8dcea275370a5ed06c2511a5ef3f0dd66f6c9c670799cbefa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:1b:41:79:7f:be:43:74:62:15:7b:d4:f9:
                    63:62:b0:4d:8e:ed:fa:84:b4:94:88:5f:c5:40:77:
                    b6:c4:0a:a8:aa:67:52:1a:b9:b9:78:24:c3:cd:b2:
                    3e:4e:87:1b:a8:79:57:b5:60:ee:98:87:66:d3:1b:
                    c0:5f:08:5f:a5:81:e4:6a:fe:d6:75:65:ad:8d:c0:
                    51:67:11:8a:43:11:47:e3:47:6c:dd:af:52:e7:97:
                    01:1b:4e:72:e7:46:87:f2:b9:f1:40:7d:fd:59:f0:
                    74:78:82:5f:37:b8:4c:8c:f3:8c:5b:95:7e:68:6b:
                    a3:e4:2c:4e:38:9c:bc:6b:54:99:32:c2:f2:1b:ce:
                    ac:6a:e4:52:2e:81:84:9f:b6:e7:e4:39:c8:a8:ac:
                    6f:80:de:47:80:6a:69:47:7f:58:bf:87:92:10:3c:
                    c2:91:25:eb:22:61:01:40:02:ea:87:53:1b:51:d7:
                    c7:53:30:a9:11:21:ee:54:ec:26:de:e8:66:b9:26:
                    b4:32:f0:67:82:23:c5:2e:b3:df:f0:1f:0c:74:cb:
                    47:f9:bf:fc:26:14:62:39:9e:58:1a:f7:24:55:a6:
                    d5:dc:f5:cd:a2:fa:80:66:64:7b:9d:68:36:3c:bf:
                    46:c4:98:0e:94:44:83:09:f9:57:2a:02:05:eb:c7:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:B5:78:D5:46:BA:53:C5:5B:38:EC:8C:4E:4F:02:8E:69:FC:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/157c31d2-8f3a-49e2-99d2-b89887d0102c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:fa:fd:fe:47:37:61:42:19:3b:2d:31:fe:6a:51:82:46:
         8a:bf:00:15:85:a5:d2:0b:ce:49:57:8c:3f:e9:3e:ba:f4:c3:
         cf:ce:2f:07:9e:6e:db:95:d6:bb:ab:d6:eb:d5:f0:4f:d0:87:
         eb:08:c9:9c:75:26:b7:17:db:34:d5:39:60:74:05:e0:ff:59:
         d8:6a:54:f9:57:48:2e:f3:fd:bf:bb:f3:72:bb:4f:a2:1f:33:
         46:00:6c:e8:1d:d7:dd:5b:bc:e6:50:8c:f1:a2:b6:49:18:24:
         72:93:27:d7:e4:68:1a:12:ac:3e:61:14:78:c7:7c:4f:52:fc:
         40:77:53:68:d1:ce:01:b0:e4:f5:c1:82:73:a3:38:24:ab:25:
         0d:18:77:ec:dd:02:b9:67:6a:d6:b7:fb:14:d4:51:58:0f:c3:
         c7:18:77:41:9e:21:ae:be:b5:71:13:e4:34:97:a6:61:48:e7:
         ae:d3:a6:3f:6e:a9:ef:5e:9f:6a:7e:21:23:a3:32:43:bb:2f:
         0d:72:f1:e0:78:ae:49:2b:b7:9f:75:c0:ce:3d:b1:b4:b7:d1:
         48:e6:8a:c1:a1:39:09:a8:fd:ee:8b:b9:c1:8b:e7:7e:c7:e0:
         e9:6b:a7:c5:b1:19:75:d5:c2:48:1a:ac:cc:e7:99:f4:67:ab:
         87:9c:94:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHd4jA4HKKoL1EFcHHcnj5dHXJ9YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIyMDA5WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZDQwNjg3YzQ1MmU4OGY4ZGNlYTI3NTM3MGE1ZWQwNmMy
NTExYTVlZjNmMGRkNjZmNmM5YzY3MDc5OWNiZWZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJJhtBeX++Q3RiFXvU+WNisE2O7fqEtJSIX8VAd7bECqiq
Z1Iaubl4JMPNsj5OhxuoeVe1YO6Yh2bTG8BfCF+lgeRq/tZ1Za2NwFFnEYpDEUfj
R2zdr1LnlwEbTnLnRofyufFAff1Z8HR4gl83uEyM84xblX5oa6PkLE44nLxrVJky
wvIbzqxq5FIugYSftufkOciorG+A3keAamlHf1i/h5IQPMKRJesiYQFAAuqHUxtR
18dTMKkRIe5U7Cbe6Ga5JrQy8GeCI8Uus9/wHwx0y0f5v/wmFGI5nlga9yRVptXc
9c2i+oBmZHudaDY8v0bEmA6URIMJ+VcqAgXrx655AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSCW1eNVGulPFWzjsjE5PAo5p/C4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE1N2MzMWQyLThmM2EtNDllMi05OWQyLWI4OTg4N2QwMTAyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCLMwDQYJKoZIhvcNAQELBQADggEBAJCa+v3+RzdhQhk7LTH+alGCRoq/
ABWFpdILzklXjD/pPrr0w8/OLweebtuV1rur1uvV8E/Qh+sIyZx1JrcX2zTVOWB0
BeD/WdhqVPlXSC7z/b+783K7T6IfM0YAbOgd191bvOZQjPGitkkYJHKTJ9fkaBoS
rD5hFHjHfE9S/EB3U2jRzgGw5PXBgnOjOCSrJQ0Yd+zdArlnata3+xTUUVgPw8cY
d0GeIa6+tXET5DSXpmFI567Tpj9uqe9en2p+ISOjMkO7Lw1y8eB4rkkrt591wM49
sbS30UjmisGhOQmo/e6LucGL537H4Olrp8WxGXXVwkgarMznmfRnq4eclIk=
-----END CERTIFICATE-----