Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9c880a-889c-409b-82ab-805149005072.roa
File:                     1c9c880a-889c-409b-82ab-805149005072.roa (raw, json)
Hash identifier:          qNR2AksKgLVYx61JzpzVBYsArllRhc46DL2VqBa69Pk=
Subject key identifier:   23:3C:12:4D:57:E0:73:07:F0:9C:0C:E9:BE:E2:59:BF:63:D9:B1:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A163E76BE41C99EB863C6F17F3E89101674C051
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9c880a-889c-409b-82ab-805149005072.roa
Signing time:             Sun 19 Oct 2025 02:21:32 +0000
ROA not before:           Sun 19 Oct 2025 02:21:32 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:16:3e:76:be:41:c9:9e:b8:63:c6:f1:7f:3e:89:10:16:74:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:21:32 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=926b7e456f945e38cddc4fc02b3f85b4ae241acee1ddab0055b2a707fb648252, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:a4:07:5c:f5:3c:d0:f4:97:7c:2d:af:04:
                    c3:5b:1e:a4:6b:47:3c:cc:3a:1d:7e:4a:71:bf:ba:
                    2a:91:9e:7f:a4:cd:d0:e4:ff:1b:34:e9:b8:41:af:
                    6a:cf:d7:3f:8c:7f:02:d9:a6:96:bf:15:14:6f:43:
                    70:c5:70:c5:63:38:0f:ce:47:60:b6:d8:26:c4:b5:
                    95:97:a5:4b:95:9b:0e:9c:3f:29:c1:65:dd:25:b2:
                    37:cf:cb:81:29:ff:ec:f6:20:42:f8:d2:00:9e:fa:
                    f3:2b:e9:c6:7c:32:42:53:a9:49:f4:7a:94:ff:50:
                    13:f9:b2:82:34:ba:ec:63:3e:2d:f4:95:47:33:ad:
                    2b:d6:59:07:c0:87:e9:e4:2d:67:e6:cd:89:a5:a2:
                    d3:c4:6e:f9:7d:62:1b:02:b3:51:4b:04:dd:3e:d2:
                    f2:3d:e0:09:70:97:ad:86:cb:c2:64:d2:11:b6:00:
                    8c:fa:7b:e5:d6:c8:a2:73:c3:d2:57:3d:c6:1c:cc:
                    4a:6d:9c:a9:98:c3:1f:ef:e1:33:1f:fc:75:62:09:
                    d3:61:68:22:9c:6b:d9:ff:06:8d:e4:d7:4e:72:c9:
                    43:6e:45:06:bb:ae:a9:82:66:a5:27:94:4d:f6:ef:
                    a8:b4:c9:98:57:bd:8f:36:cc:f0:19:e0:dc:4d:35:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3C:12:4D:57:E0:73:07:F0:9C:0C:E9:BE:E2:59:BF:63:D9:B1:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c9c880a-889c-409b-82ab-805149005072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:46:c6:3b:33:2c:5e:f4:17:76:ab:88:99:e3:34:38:eb:
         57:44:48:c4:66:d1:49:35:08:85:d2:55:b2:ed:cb:0a:25:e2:
         86:a7:69:4f:56:43:27:2c:d9:7c:50:72:af:36:fe:54:47:a0:
         71:d6:20:74:15:22:83:cd:5b:b9:09:f7:f6:d8:e4:ac:12:1d:
         a6:1b:4b:51:5b:92:83:05:40:7f:1c:d5:d1:06:e5:aa:0e:c4:
         6d:ff:c0:54:d4:f1:92:df:fb:bd:a5:9e:2c:d6:38:d4:ca:9e:
         09:ad:fd:8c:c5:36:21:d4:3c:6f:3b:23:13:5a:94:f8:56:41:
         7d:bf:6b:fc:3a:96:ec:96:f9:d6:1d:b4:63:ff:22:64:73:7d:
         ed:af:a9:39:d4:a0:db:c8:d2:3d:41:4e:eb:0f:94:6a:e0:04:
         28:fb:f4:46:15:6e:4b:ba:a3:1a:83:55:e8:9f:16:8a:8e:22:
         03:50:06:dd:0f:f3:40:96:c6:e8:7d:e2:be:97:7c:2c:71:01:
         3f:97:45:9c:a6:4e:5c:da:86:9c:69:d0:52:3c:be:43:a7:40:
         4d:50:e1:06:45:76:54:a6:98:b4:69:fc:3d:c0:1b:73:92:f9:
         c6:17:f6:dd:b0:e0:19:24:67:4a:82:ad:e7:3a:d0:6b:ba:5a:
         34:05:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----