Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
File:                     1b5753b0-d542-44ed-a4ed-def12dec14c4.roa (raw, json)
Hash identifier:          qjbKNXqBqBRGV/uNAtcHrvsCUqLHEnO35zBDJXiOZ0Q=
Subject key identifier:   EF:78:DA:B2:8D:4E:16:D0:51:72:D3:A2:C1:24:92:DB:C6:B4:E3:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A2BF544DF0291EE951EEE5B1FA33811B2621C78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
Signing time:             Tue 14 Oct 2025 15:40:09 +0000
ROA not before:           Tue 14 Oct 2025 15:40:09 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2b:f5:44:df:02:91:ee:95:1e:ee:5b:1f:a3:38:11:b2:62:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:40:09 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=3e510f661a82c0984da7f6cca5bd42d8c8d86db7c759f4c9091c5342e61371b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:f0:9f:48:22:e7:4a:88:85:c5:39:18:2e:
                    1b:27:bb:ac:a5:01:68:44:d2:9d:a5:18:2c:ae:aa:
                    d1:51:06:65:d3:c4:09:6f:41:4b:8d:ca:fc:50:a9:
                    a8:38:1e:05:17:b3:b0:f4:69:34:27:c3:5e:56:55:
                    05:8b:db:ed:b4:3e:48:29:ff:b0:48:e8:ad:12:80:
                    7c:50:1f:14:df:0a:eb:86:a0:5d:cb:d7:c4:69:69:
                    c5:16:8b:44:3a:35:d9:6e:de:68:e9:0b:61:12:fb:
                    84:84:b5:2e:81:25:e0:81:9b:99:ca:8d:8a:6e:64:
                    0e:c3:df:4f:10:77:f7:cf:72:b7:6e:3f:c4:0d:fe:
                    5a:c3:4e:2f:1d:08:47:ef:7f:fc:f3:41:c6:92:29:
                    ff:3e:35:fa:c7:dc:bb:4f:e7:de:ec:34:6e:1a:12:
                    e3:05:01:a9:c9:84:ba:3f:8d:1a:2c:3a:71:e2:0a:
                    4a:0f:e8:ac:c8:01:d0:89:8c:f8:6e:ba:25:b3:74:
                    1a:f9:bd:83:78:66:35:38:17:1d:19:be:6a:24:2f:
                    ae:89:5b:0e:4b:8f:e1:3e:e2:bb:71:2c:02:75:33:
                    d5:74:af:44:41:6e:c5:8f:8f:a5:9f:13:e5:77:4e:
                    47:d5:75:05:18:51:66:f9:78:74:9e:12:99:08:25:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:DA:B2:8D:4E:16:D0:51:72:D3:A2:C1:24:92:DB:C6:B4:E3:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:44:7c:ea:a9:72:48:0b:53:ce:64:7f:a9:bc:82:d1:36:19:
         4e:03:af:73:f0:b8:77:6d:ce:47:45:f3:bd:86:94:3b:59:3e:
         19:bd:6e:a0:d0:24:f0:b2:e4:c8:8e:be:1e:cc:d2:04:f3:cf:
         2e:8a:56:45:70:26:2f:86:22:2d:47:79:fe:f9:9a:26:2d:56:
         4f:35:d5:71:f8:10:f0:1c:67:9c:c1:53:82:47:1d:37:e8:8b:
         fc:3c:81:eb:f5:5d:f3:70:e5:c4:7f:fe:c5:fb:2c:21:ad:56:
         55:0f:73:5c:00:5f:02:23:90:cf:00:40:bd:ba:93:60:1a:bd:
         43:41:c4:74:7a:dc:45:8c:80:3d:cb:d4:8e:53:ae:62:34:61:
         f0:27:49:93:a5:93:53:62:9b:d9:dd:c0:1f:43:2a:ed:10:b9:
         6e:35:ae:69:0c:68:59:0c:da:95:4c:f4:26:d0:d2:c6:0e:85:
         8b:fb:1e:f4:3b:44:c7:ff:f3:3c:e9:89:ef:51:89:71:8f:c1:
         65:ed:4e:89:32:db:df:0a:e5:57:04:20:7c:a9:74:42:16:eb:
         f1:65:f2:5c:e6:e4:c7:84:8a:58:e7:7b:c4:01:c7:53:19:b6:
         cb:95:1f:8a:34:3b:22:07:5c:81:d1:a9:5f:be:1f:15:71:cb:
         dc:8a:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----