Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2759d534-7485-4f65-8a4c-94128226264d.roa
File:                     2759d534-7485-4f65-8a4c-94128226264d.roa (raw, json)
Hash identifier:          wxU3n3Rf1Who28tkyUd+P1GFDvBbuU8/h/bArVIDOkE=
Subject key identifier:   EE:F0:D8:1D:6B:81:F6:84:EE:B4:E4:90:F3:A6:17:5E:B2:F8:A3:29
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CCCCC325A02F7E2BBA3A137AC3D3665064FD7B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2759d534-7485-4f65-8a4c-94128226264d.roa
Signing time:             Sat 18 Oct 2025 03:01:06 +0000
ROA not before:           Sat 18 Oct 2025 03:01:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cc:cc:32:5a:02:f7:e2:bb:a3:a1:37:ac:3d:36:65:06:4f:d7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:01:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=f766573f35239ef5f1d18661239d4638d0dc13ffcd4853dd7ce47f57b70f6ecf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:99:7a:14:45:b9:05:ea:2d:dd:54:af:4a:
                    aa:de:e6:cb:00:87:ab:1f:be:51:57:a6:91:a2:a4:
                    20:dc:6a:a3:21:1b:72:0c:2d:48:84:59:12:38:f3:
                    79:99:9d:dd:6b:e2:9d:91:e1:ce:8a:16:e9:90:42:
                    f1:01:b0:6a:fc:33:03:c2:30:c0:0d:f3:2b:1e:ae:
                    19:45:dd:62:66:d2:75:5a:96:d4:54:5c:c6:5f:4e:
                    45:e6:f9:9b:fa:47:f0:c7:8e:09:69:11:ef:09:2c:
                    ef:05:cc:b5:c4:37:c6:a4:ef:ad:61:6b:68:70:ea:
                    f2:73:f1:52:70:01:bf:83:3c:12:67:6c:02:2f:86:
                    d1:1e:4b:29:83:9d:9a:3c:eb:7c:4b:01:4d:a5:38:
                    9c:00:41:1b:08:7f:5c:a6:78:7c:f5:4e:91:d2:17:
                    fa:8e:9b:77:15:5b:4f:fa:76:98:9c:40:e5:ed:11:
                    67:82:dd:fc:d0:e5:49:32:11:b7:41:6c:14:77:a2:
                    60:8b:5a:9a:2d:bc:5b:95:ff:3c:cc:a2:c4:30:c4:
                    9e:34:66:4b:57:b6:3e:2b:cd:da:10:94:1b:c3:19:
                    a7:e5:82:8f:f9:90:7d:fe:38:66:d8:03:b2:b6:a4:
                    fc:dd:38:3b:91:f1:16:b1:d3:bf:45:2f:6b:5e:28:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:D8:1D:6B:81:F6:84:EE:B4:E4:90:F3:A6:17:5E:B2:F8:A3:29
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2759d534-7485-4f65-8a4c-94128226264d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:80:f9:b1:0e:e5:ab:b5:e4:93:b4:5e:ce:e9:af:45:9a:f3:
         d8:e1:00:91:b8:31:4c:3c:5e:2a:92:c9:1d:8a:a6:21:a7:c8:
         e2:96:78:11:4d:ff:f9:ab:9b:20:b5:e1:88:f1:75:88:71:a2:
         40:eb:0c:cc:e1:13:f8:0c:b2:2c:ec:42:66:40:b3:01:47:a3:
         d2:23:ce:ba:4a:ec:8a:df:23:eb:b3:a4:82:c7:88:6b:e2:57:
         59:9c:13:4f:de:b5:5b:a8:8f:f2:0f:35:71:5f:9d:81:55:f2:
         de:2e:68:03:db:44:0c:91:5e:37:60:66:14:82:bc:7a:75:0b:
         99:7a:04:dc:60:57:c2:06:b2:73:74:4d:94:10:6a:49:8e:73:
         a1:4b:58:7b:65:53:77:18:e0:5c:aa:21:93:97:97:11:ee:c8:
         25:61:6b:de:9b:61:11:9d:f3:da:5e:47:93:42:0b:43:2b:f2:
         3e:aa:89:fe:be:65:f4:a1:4d:a7:d9:5a:64:44:06:1f:07:b6:
         80:29:4d:4c:53:54:db:91:20:7f:c6:69:88:e1:33:97:fe:53:
         d2:a9:ad:04:0e:59:f7:8f:7a:69:79:bf:6b:bd:cf:8e:6a:03:
         6f:00:6c:7e:c8:a3:14:c2:a2:91:42:d2:ae:df:f4:c7:5e:c4:
         f4:78:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----