Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa
File:                     2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa (raw, json)
Hash identifier:          DW/UAt/CQWUZBF5BVmZPaBuKE+h+mNMr9fcFEb0ZkQ0=
Subject key identifier:   AA:9B:88:BD:0C:72:82:F9:51:21:E6:CF:64:FB:CA:AB:1E:E5:62:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31DC308F7CC4B6986FDFB50B6CA572736A196250
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa
Signing time:             Tue 30 Sep 2025 00:22:02 +0000
ROA not before:           Tue 30 Sep 2025 00:22:02 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        194.148.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dc:30:8f:7c:c4:b6:98:6f:df:b5:0b:6c:a5:72:73:6a:19:62:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:22:02 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=5b4591c24e5bebee638db421fa527a3caca3ca88550a53ca856a65255616344b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:b9:31:f9:04:f9:fc:50:e7:08:32:67:71:
                    f3:4b:f6:6f:05:c3:49:31:50:ca:f7:b7:7b:0f:50:
                    d1:27:4b:e8:6e:e4:99:22:99:44:76:36:74:13:43:
                    52:6b:d3:a8:cd:a1:09:26:f4:d5:28:8b:ee:24:05:
                    c7:27:bc:d6:98:66:58:21:38:e4:a0:64:6c:c2:13:
                    1b:96:53:0a:21:7b:fe:64:df:1a:41:2f:b9:ea:4c:
                    66:da:5c:21:ac:6d:d2:4f:7b:c6:2a:d5:bb:83:03:
                    44:f7:73:ea:f0:c5:05:0c:01:19:de:e5:b9:aa:bb:
                    c8:59:a3:12:fb:3f:cd:cb:cb:e5:0f:ff:20:ba:44:
                    9b:5f:63:1b:9a:1b:f5:70:4b:59:15:18:94:b8:2c:
                    2f:29:fa:a4:8e:b0:af:fc:73:f3:a1:b0:d7:9f:5a:
                    a6:34:60:e4:ed:70:70:d4:f3:05:be:5d:4e:45:d8:
                    8d:f8:57:95:51:b2:f8:83:ef:6a:07:03:5f:14:31:
                    10:8d:0c:ae:2a:51:68:39:1c:23:ab:55:e7:f8:d5:
                    f2:ea:33:2a:e8:6e:8b:f7:f2:ac:d9:fd:65:6a:44:
                    f8:05:17:f0:6e:8e:f3:96:5c:96:7c:47:3e:0e:c2:
                    af:9b:44:4a:9b:26:4d:68:cd:a0:08:0c:94:60:ba:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:88:BD:0C:72:82:F9:51:21:E6:CF:64:FB:CA:AB:1E:E5:62:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.148.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:10:a1:94:3a:94:72:65:07:b7:25:b5:21:59:a6:c8:ab:a3:
         a0:92:2f:b9:20:ac:fd:5e:86:54:a7:37:9b:cb:ba:26:d5:14:
         65:71:8f:a9:2f:08:3f:39:fd:91:b3:f7:2d:77:d7:e3:10:05:
         1a:a5:83:43:44:7b:ee:58:b1:98:bf:23:4f:54:ae:e1:19:41:
         b4:b8:82:83:58:81:d5:ac:ec:29:ee:c2:fd:bd:c8:e3:03:a7:
         34:e7:6e:65:13:c3:a8:41:2d:be:ff:24:e2:13:60:a5:67:ac:
         cc:00:7e:79:7b:b5:33:bb:9a:75:19:19:cb:13:ac:8e:42:a5:
         05:5c:6d:15:19:c8:5a:ff:ed:47:0c:c9:48:21:e1:51:25:eb:
         e7:78:2d:1f:0f:bf:8d:2e:5a:72:45:60:53:1b:f0:67:e6:7f:
         05:e2:60:f0:d5:f7:9d:b5:da:d7:77:2b:65:62:2c:2a:e4:31:
         72:56:8f:2e:9f:70:b4:2f:ee:c5:84:9b:fb:55:6c:3b:12:94:
         ac:6a:88:f6:bb:71:49:c1:3f:53:5c:57:d4:cc:b4:39:06:60:
         7f:2a:3c:19:32:e0:af:92:7f:2b:6c:34:36:bc:4b:86:59:54:
         85:2b:7c:78:7a:b8:2e:70:bd:ab:f1:4d:b3:94:cb:46:43:88:
         a3:0e:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----