Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa
File:                     1732ff16-324b-4846-896d-bea216d30a89.roa (raw, json)
Hash identifier:          TdGiN90EvicUKfP+Yplo5dCA8PTlHfa7+lpaPwJBRSA=
Subject key identifier:   7B:EE:F5:49:CE:E4:B0:08:5B:6D:06:54:61:5A:5F:F2:50:42:B3:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FBC24567CF8BB246DD2BACED2537F8FE743D77F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa
Signing time:             Mon 06 Oct 2025 16:22:07 +0000
ROA not before:           Mon 06 Oct 2025 16:22:07 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bc:24:56:7c:f8:bb:24:6d:d2:ba:ce:d2:53:7f:8f:e7:43:d7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:22:07 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=9251f3b02d84e946b49555fef3b265c85e4802f6031b2da853f894368d586324, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:58:82:ff:5c:fe:5b:f5:81:c3:01:25:02:
                    59:98:17:f9:a8:a7:27:77:ab:e5:5f:b7:4d:24:ed:
                    c4:1f:8f:26:01:a6:03:03:23:dd:96:90:18:c6:68:
                    44:0c:f7:f7:51:ca:70:3e:54:de:28:a6:94:80:e5:
                    23:ad:a2:eb:4c:65:f5:b8:32:04:b0:db:0d:25:56:
                    58:1c:90:fd:04:f6:3f:35:97:00:8d:43:c4:51:da:
                    a8:4e:e1:51:05:f5:d3:d9:58:36:bd:74:e4:44:72:
                    fd:4f:f0:b8:d0:47:64:35:fa:91:bf:68:8a:1e:98:
                    36:e2:a1:c8:78:1d:e9:b5:93:c1:1b:36:b1:94:d7:
                    36:b6:70:61:44:62:a1:23:2f:ec:d9:ca:15:ab:95:
                    d3:e8:29:42:79:c0:03:b6:d4:4d:00:20:7b:c5:ac:
                    0e:9e:df:40:dc:60:87:a6:08:83:78:90:3e:23:8a:
                    5c:01:be:9f:5e:17:e8:30:b4:ed:e8:b7:af:2c:2d:
                    e4:a0:37:05:f6:c6:f9:63:b3:b4:c9:77:a4:bc:db:
                    be:98:2d:b6:bf:70:08:0c:67:d7:f8:92:b4:c9:73:
                    24:1f:fd:b3:90:fa:6a:40:db:41:bf:e7:a1:cb:c1:
                    25:74:c0:3a:4c:40:8f:24:0b:55:34:89:7c:31:f5:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:F5:49:CE:E4:B0:08:5B:6D:06:54:61:5A:5F:F2:50:42:B3:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1732ff16-324b-4846-896d-bea216d30a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:7b:6b:c6:73:cd:ac:f2:b2:48:d8:01:c3:06:73:5d:b4:
         56:04:37:4b:5c:9f:f8:05:73:16:14:bf:c0:25:0d:3d:70:5c:
         00:f2:8d:6b:3f:71:79:54:a5:06:df:e5:97:96:1d:c3:a7:7b:
         4a:ef:bd:74:d5:3c:c1:25:fa:04:d4:95:23:b2:34:f7:40:a4:
         c3:a6:e8:3d:51:b5:e5:3a:01:1d:4e:48:79:d0:bd:b6:6b:d1:
         f7:dd:63:1b:24:47:1e:e5:d1:da:31:1d:0c:83:81:18:08:87:
         22:96:06:aa:0e:73:4f:88:1a:65:12:bd:52:4e:cb:e6:c6:9c:
         46:2d:d8:30:db:70:75:04:e6:94:75:e8:f3:3e:2c:80:ab:ef:
         c8:32:dd:45:0b:23:bd:9c:4f:10:2e:4d:49:c9:15:b7:bc:6a:
         92:cf:42:a8:c9:d0:38:75:aa:18:40:68:53:c2:80:a2:c1:ee:
         b0:1d:3a:1f:d3:b3:95:30:d0:0a:71:ee:94:f5:b8:0f:cd:85:
         6b:8c:01:f7:41:b4:23:7a:24:f6:13:9e:a2:bf:48:74:53:d7:
         5b:14:f4:08:6d:20:2a:0f:e8:6c:ef:b2:41:9a:53:31:1b:ab:
         ab:20:47:94:ba:bd:63:2c:8a:df:6f:f7:17:20:48:4d:e9:b9:
         4d:22:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----