Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
File:                     2504a759-2889-4336-bad8-56846963d889.roa (raw, json)
Hash identifier:          i+89xby7B8ralYMOezd/uASdliTsiDqxVLe/qLLOy3Q=
Subject key identifier:   DB:56:1C:48:E7:20:86:1E:AB:BC:A9:9D:46:D4:A6:B2:E7:5F:D4:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B30FCD689E61F9909ED357A48E23809D917029C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa
Signing time:             Sat 18 Oct 2025 04:00:06 +0000
ROA not before:           Sat 18 Oct 2025 04:00:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        139.96.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:30:fc:d6:89:e6:1f:99:09:ed:35:7a:48:e2:38:09:d9:17:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:00:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=4d1d1a11cb330908588b8333c4ef91bfeecbe5358a22ded9013af6dfb0f0c00c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:3c:74:39:3f:d4:41:97:2c:dd:ec:83:4f:
                    4a:6b:55:fd:08:da:65:19:f2:9b:08:d1:2a:12:b8:
                    5b:48:45:91:fa:1b:c2:49:93:ee:71:01:1b:2e:16:
                    25:56:b1:b6:4e:86:e8:85:0a:b3:f4:89:2a:d5:58:
                    1d:27:8d:5a:70:00:27:0f:9f:bb:ef:53:6b:22:6b:
                    d7:21:4a:44:b6:7f:15:e3:70:90:47:ac:ba:5c:8a:
                    f4:8e:61:ed:90:1b:9e:11:8f:b8:d1:05:cd:a7:48:
                    27:89:1e:a6:7e:7a:eb:a4:29:bb:b0:b9:48:17:a9:
                    4b:fd:8d:86:92:b4:ce:b4:70:bb:2f:43:77:cd:b5:
                    a5:88:f6:6b:68:ab:1d:45:b1:44:dd:83:eb:85:03:
                    57:87:6d:d5:a1:19:02:77:49:08:00:fd:6a:2a:75:
                    4a:df:a8:05:d2:4c:2d:de:12:85:ff:19:17:62:ff:
                    07:ca:31:c5:e8:d6:55:dc:7a:c2:6d:37:59:4f:f8:
                    38:20:85:7d:8b:4c:6b:86:eb:7c:cd:0e:d5:19:df:
                    e9:b8:19:18:a5:22:c8:52:07:40:51:7d:ab:09:74:
                    6c:47:d9:d3:19:0d:37:5b:01:7e:54:c4:88:df:de:
                    64:89:50:26:54:00:77:3d:d1:14:ee:be:df:82:1f:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:56:1C:48:E7:20:86:1E:AB:BC:A9:9D:46:D4:A6:B2:E7:5F:D4:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2504a759-2889-4336-bad8-56846963d889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:da:ab:0e:03:86:83:f4:58:30:6c:12:8d:a1:5a:9b:df:
         2e:ad:11:e0:f8:d2:75:90:c8:24:48:64:e4:54:84:4c:7c:b3:
         be:74:bc:6f:a6:0d:9c:91:19:6b:86:a6:82:c3:f0:87:9c:32:
         48:b5:4a:dc:9e:e5:47:a5:69:6a:a6:63:56:40:49:24:e9:73:
         0e:e6:e8:e2:28:70:b2:14:33:a4:85:61:61:9d:d0:55:71:65:
         2c:25:7a:1f:c1:95:53:d4:69:20:71:47:6b:87:ff:90:0d:a8:
         f6:3d:f3:7f:87:8a:1e:85:93:fd:bc:f6:b1:cb:c1:cd:51:29:
         b9:45:86:73:a0:65:69:7f:d5:53:48:2b:57:22:00:ac:36:0a:
         5d:74:d1:df:e5:7a:fe:af:9b:0c:9f:7d:94:60:54:de:c3:c0:
         cd:aa:18:cc:e8:c4:d9:f2:6c:b9:4e:67:88:34:f7:c7:63:cb:
         70:56:f2:d7:ff:2d:32:c1:2a:a0:2c:26:91:7d:d7:2c:3a:cd:
         a4:48:a5:7b:9f:1d:44:80:d3:64:7c:72:73:90:1a:a0:b3:c7:
         23:e2:e9:12:bc:df:c2:fb:a6:d1:32:e0:25:7a:ca:95:a0:29:
         a9:39:4a:67:37:80:2b:c3:c4:bb:26:ec:83:17:99:ed:ac:d8:
         6b:86:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----