Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa
File:                     1ca07e02-81c0-42bd-b83a-ff51138805a0.roa (raw, json)
Hash identifier:          u1Rp2a7uxd8dSeCz0BoxIzPX1dbuJTwlV5yQNev48dQ=
Subject key identifier:   E1:E8:18:5F:AB:AB:5C:DC:97:FB:FB:8E:DA:35:38:DB:0B:9C:51:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31C9E8DCD01BA5B1B9A06B83B9E7EB6CC43504
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa
Signing time:             Sun 19 Oct 2025 02:20:10 +0000
ROA not before:           Sun 19 Oct 2025 02:20:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c9:e8:dc:d0:1b:a5:b1:b9:a0:6b:83:b9:e7:eb:6c:c4:35:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:20:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=629aa2288e720ae58d91f65cf029af1b499120dab04dfeab2a88a26c7c28e153, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:24:4c:59:ce:bf:56:02:cb:9e:80:28:31:
                    85:67:93:24:bf:2f:8a:f4:d4:8d:89:0d:66:dd:bb:
                    e8:05:90:da:fc:2d:80:d0:6d:16:35:01:bf:08:32:
                    b2:dc:74:a4:b4:3e:58:a5:2c:6f:ec:60:28:4b:d0:
                    db:0b:cd:f5:25:14:ab:2a:66:44:00:fc:c5:26:67:
                    a4:b9:ef:f4:c3:94:97:1b:1a:6f:71:9e:61:91:5f:
                    6c:01:56:90:bb:9e:67:f0:58:98:9c:1f:ee:46:41:
                    5b:67:8f:03:51:3d:43:8e:1e:7a:7b:f6:de:b1:01:
                    ce:77:ce:e4:62:60:a2:b5:be:e5:69:99:ad:f9:90:
                    7c:23:d6:2f:a9:73:be:20:a2:62:3a:17:35:2b:25:
                    93:c8:91:18:e2:ef:95:13:2f:0d:7f:7a:b4:89:d5:
                    33:61:66:b2:ff:85:1d:b6:ca:2f:07:e4:f0:be:fd:
                    45:fc:a5:56:4f:7e:53:4d:fd:16:f7:95:d0:87:85:
                    a1:e8:27:2e:94:0d:40:70:1a:5b:d1:5d:5b:1b:4f:
                    c7:a6:99:00:f8:17:90:bc:40:f5:45:c7:99:d1:c9:
                    aa:eb:72:5d:64:df:c8:12:8a:81:1e:81:68:f8:5f:
                    1f:ca:6b:5a:c1:78:28:3b:45:2f:00:15:10:85:2a:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:18:5F:AB:AB:5C:DC:97:FB:FB:8E:DA:35:38:DB:0B:9C:51:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:49:67:f6:ba:25:fe:14:e7:9c:bc:63:41:f8:a6:ce:98:
         d4:d4:cb:ac:8d:eb:ae:39:01:59:f9:02:21:40:f1:b1:f4:a1:
         16:15:59:48:ff:05:8a:bd:52:27:ed:3b:11:d5:f8:9b:22:00:
         64:f8:f3:2e:a3:7a:e2:54:f4:af:61:e4:f6:d8:4a:45:95:60:
         8f:fd:ec:7d:83:0a:9d:3d:50:ca:81:2b:45:1b:61:c4:76:94:
         b7:85:f9:40:30:d7:7c:15:14:10:07:1c:12:b8:f5:cd:0b:94:
         d1:e5:87:7d:11:30:04:05:ac:2e:81:8c:3f:f9:99:58:b8:bb:
         72:d1:9b:cd:eb:51:02:96:7c:a0:98:db:91:b7:6a:a0:3b:f2:
         0b:41:44:92:7c:36:aa:6e:28:d3:57:b9:d6:72:d5:8f:36:bb:
         a4:68:19:e7:8f:3b:41:1e:9d:28:4a:b7:a3:69:8a:33:25:54:
         18:e2:bc:19:33:6b:7a:9b:58:c7:ee:2a:88:e6:2a:c1:06:9c:
         00:9e:f5:28:ad:be:16:19:fd:89:fc:25:8e:93:ea:2a:31:d5:
         e4:d0:7f:64:11:d5:84:1e:d9:80:2d:61:23:b4:4c:a5:c7:cb:
         7e:95:7d:d8:0b:b8:6b:cf:fd:8b:59:4d:d8:75:df:61:bd:43:
         bf:e6:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----