Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
File:                     269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa (raw, json)
Hash identifier:          uQUoLmVxlzC3aq68HNzA6JXleKz4nt4naDMtRpkaQZ0=
Subject key identifier:   36:A4:EC:C8:06:A8:4B:48:42:7F:26:AF:9E:C9:66:CC:C4:18:F4:89
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A8DCFC5B502E329AA4F2EB43AA069094FC14C7C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa
Signing time:             Tue 07 Oct 2025 00:22:25 +0000
ROA not before:           Tue 07 Oct 2025 00:22:25 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.72.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8d:cf:c5:b5:02:e3:29:aa:4f:2e:b4:3a:a0:69:09:4f:c1:4c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:22:25 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=0144c220788593722244f2652472f5b033c7e06336b7bce0563d4b6bc479eff4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:1a:46:d0:94:72:c7:f5:a4:f5:2e:10:be:
                    9c:b9:d5:ad:ef:60:13:44:9f:d8:30:08:eb:76:b9:
                    49:71:3d:b5:4a:f5:5d:b7:7d:b1:31:00:49:69:6a:
                    ec:fe:99:9d:34:a2:ec:f5:9e:51:2c:b9:73:18:5d:
                    42:c2:15:da:cb:09:1a:cd:60:f9:6a:e2:02:4e:79:
                    b9:bc:1c:da:2d:e6:91:dc:f3:b0:8e:62:89:d2:45:
                    57:fa:78:00:43:2e:57:ee:34:05:f1:48:84:43:05:
                    25:94:21:01:b0:46:79:0f:a7:bf:26:30:ec:49:f8:
                    20:d9:39:e0:33:d5:24:b3:eb:c4:a6:0a:5f:11:71:
                    23:c1:9e:d7:3a:b3:40:9f:62:af:ff:7c:1f:83:01:
                    30:a5:65:72:7c:1d:67:87:68:d2:19:37:b1:36:82:
                    04:0d:c0:e4:48:a2:0d:73:0c:de:bb:e3:38:ae:92:
                    1b:0e:28:d1:62:e5:5e:08:25:d2:68:61:8d:b1:f5:
                    6e:1d:d3:81:6d:c2:bc:88:d9:28:b8:07:92:1b:46:
                    fb:0c:b9:6d:d8:5b:32:a6:ac:41:92:f5:a2:b1:26:
                    e2:ab:aa:7d:db:f1:4e:f4:9a:d3:95:4f:4b:a0:d1:
                    e0:18:3b:f0:ae:d0:d3:95:b9:7f:92:b8:f5:60:01:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:EC:C8:06:A8:4B:48:42:7F:26:AF:9E:C9:66:CC:C4:18:F4:89
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/269cebc9-cd3a-46d6-b6ab-f2546cfc5f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:2c:40:85:f7:c0:e3:20:3b:ab:a8:0e:db:d5:3a:01:95:
         05:ff:2d:cb:f1:68:ec:9d:ae:66:38:87:29:91:77:f9:ba:48:
         b9:a7:40:fb:bd:3e:18:27:3b:f0:47:ba:ea:e4:8e:5d:b9:b1:
         d2:a5:7f:f8:9c:00:b0:71:00:71:93:a9:3d:15:7b:45:9c:0a:
         e2:a0:3b:fc:f4:f9:c6:01:69:4a:6a:80:78:01:db:13:0f:ba:
         a3:a5:1a:15:4a:aa:4e:a6:ac:67:da:1c:b1:c3:c3:8d:a3:2c:
         e3:cd:fd:26:31:fc:40:51:f2:02:f8:9c:d3:6f:28:b5:96:ef:
         c5:ed:81:c4:9e:b5:bb:5d:6f:7c:c2:19:fe:34:f7:b0:25:85:
         98:90:26:fb:a1:4f:ce:a8:2e:59:36:ec:2d:73:e7:e3:48:4c:
         ac:ab:f5:43:bb:71:b4:32:c1:da:d4:14:31:5a:9d:07:9f:4c:
         14:c6:77:d3:7b:a9:5e:d9:1e:4e:9c:b3:63:b2:e4:a5:ea:9d:
         53:3f:14:4f:c5:79:aa:61:57:d7:74:4e:7e:1d:d0:61:f6:7b:
         1e:4e:b4:3e:ed:a2:fa:73:ec:68:61:f4:2d:c2:60:27:b0:9c:
         d9:23:e6:84:52:10:eb:ba:68:c5:1c:da:15:31:8c:ec:5a:fe:
         64:8e:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----