Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1dc4b5-fe34-45d5-9b1b-d8f997193bb3.roa
File:                     2e1dc4b5-fe34-45d5-9b1b-d8f997193bb3.roa (raw, json)
Hash identifier:          tETJlekpllShzSqW35d8HcUevPnZTvZTYanlOceZ4pY=
Subject key identifier:   17:E6:83:32:CF:1C:BA:28:83:C8:58:C9:49:3D:A8:CC:49:FC:54:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B6228E8CDEF7E830DBF20E12B04DB61D6433315
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1dc4b5-fe34-45d5-9b1b-d8f997193bb3.roa
Signing time:             Sat 18 Oct 2025 03:11:51 +0000
ROA not before:           Sat 18 Oct 2025 03:11:51 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:28:e8:cd:ef:7e:83:0d:bf:20:e1:2b:04:db:61:d6:43:33:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:11:51 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=90be3e50ef5f498cd93a154f2bf623895979b88a3ab7167290a9774ffd175487, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7b:d3:61:9a:22:0e:99:02:f9:ca:25:ba:c5:
                    c9:48:8f:55:c6:6a:d3:c7:6e:32:f2:44:98:49:fd:
                    83:5f:f1:e9:e0:88:29:6b:40:dc:b5:bf:31:40:73:
                    2d:2b:9a:a5:e5:4b:7d:f6:86:1d:8d:39:b3:e1:32:
                    9a:40:0a:80:aa:26:15:22:88:4c:e2:c6:b0:98:3a:
                    e3:24:9e:dc:f7:3a:61:bb:31:9c:e5:81:ab:e5:1d:
                    f0:cc:3b:d2:0c:d5:38:a7:73:24:3e:dd:70:86:10:
                    c3:9b:67:06:0e:92:5d:f3:71:f9:f3:0d:13:03:6c:
                    9d:58:8f:5f:eb:ea:2e:4e:9a:a0:05:e7:f9:ea:cc:
                    94:08:29:39:09:bb:33:52:b3:b7:ba:1e:a0:0b:51:
                    7c:fc:40:2f:9b:63:7c:5e:c5:fc:33:3c:41:60:50:
                    40:80:29:43:53:f0:ab:9e:a7:d1:8b:70:4f:21:7c:
                    ae:33:80:ab:f5:9d:7d:a3:cf:d4:d6:6d:e6:df:11:
                    25:c5:95:3e:e4:d8:86:b1:74:13:cc:f6:eb:60:34:
                    6e:6e:f4:d8:d8:f5:22:03:4d:d8:80:fe:18:7a:f5:
                    5d:e3:91:37:87:83:66:35:15:5b:c2:ab:21:4b:2b:
                    d1:ab:6a:ea:8a:ac:64:a4:12:6a:e4:8e:0e:0d:94:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:83:32:CF:1C:BA:28:83:C8:58:C9:49:3D:A8:CC:49:FC:54:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e1dc4b5-fe34-45d5-9b1b-d8f997193bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:30:f3:73:39:05:bf:3a:2f:fb:1d:3a:5d:95:3c:8d:85:8e:
         a5:46:b0:e5:8d:00:5c:2f:57:b1:c1:9d:1d:0c:93:db:66:da:
         6d:4b:a3:31:e7:7b:cf:70:2b:5e:fa:ba:85:2c:85:93:2f:94:
         1c:2b:ee:60:01:bb:a8:44:19:07:18:46:6b:ec:6b:9d:e2:3b:
         06:9d:d3:d8:92:d8:1d:3b:e0:13:8f:d9:2d:c4:de:2e:08:5c:
         ee:1b:1d:19:a2:f6:6f:05:71:14:3e:f2:8e:60:a6:0d:5f:ff:
         e2:eb:22:be:65:76:71:4b:61:59:25:5d:41:53:97:2c:5b:a7:
         93:47:88:f9:db:71:0a:89:3b:49:b7:0c:c7:f5:b3:e9:04:23:
         dd:3a:0e:92:df:3c:3f:8a:ab:be:66:f5:30:c4:33:07:94:be:
         0d:ba:8d:e2:83:e8:f6:1b:b6:f1:ba:d3:d8:38:af:0f:f5:e2:
         27:6d:45:1c:b0:fe:b6:22:16:e7:73:c2:e2:9e:64:56:44:62:
         e8:1e:84:2b:cb:a0:c1:a9:a0:31:18:a9:38:4a:73:2c:30:ee:
         8e:10:72:b2:4d:8f:b3:79:c2:b8:00:5b:24:32:a4:cc:10:51:
         3d:02:e2:a0:6f:42:4e:b7:27:59:ad:db:d8:0b:1c:3e:c5:f7:
         b9:af:0b:7f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe2Io6M3vfoMNvyDhKwTbYdZDMxUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMxMTUxWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MGJlM2U1MGVmNWY0OThjZDkzYTE1NGYyYmY2MjM4OTU5
NzliODhhM2FiNzE2NzI5MGE5Nzc0ZmZkMTc1NDg3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpe9NhmiIOmQL5yiW6xclIj1XGatPHbjLyRJhJ/YNf8eng
iClrQNy1vzFAcy0rmqXlS332hh2NObPhMppACoCqJhUiiEzixrCYOuMkntz3OmG7
MZzlgavlHfDMO9IM1TincyQ+3XCGEMObZwYOkl3zcfnzDRMDbJ1Yj1/r6i5OmqAF
5/nqzJQIKTkJuzNSs7e6HqALUXz8QC+bY3xexfwzPEFgUECAKUNT8Kuep9GLcE8h
fK4zgKv1nX2jz9TWbebfESXFlT7k2IaxdBPM9utgNG5u9NjY9SIDTdiA/hh69V3j
kTeHg2Y1FVvCqyFLK9GrauqKrGSkEmrkjg4NlH/3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUF+aDMs8cuiiDyFjJST2ozEn8VIUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJlMWRjNGI1LWZlMzQtNDVkNS05YjFiLWQ4Zjk5NzE5M2JiMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCV8wDQYJKoZIhvcNAQELBQADggEBAEAw83M5Bb86L/sdOl2VPI2FjqVG
sOWNAFwvV7HBnR0Mk9tm2m1LozHne89wK176uoUshZMvlBwr7mABu6hEGQcYRmvs
a53iOwad09iS2B074BOP2S3E3i4IXO4bHRmi9m8FcRQ+8o5gpg1f/+LrIr5ldnFL
YVklXUFTlyxbp5NHiPnbcQqJO0m3DMf1s+kEI906DpLfPD+Kq75m9TDEMweUvg26
jeKD6PYbtvG609g4rw/14idtRRyw/rYiFudzwuKeZFZEYugehCvLoMGpoDEYqThK
cyww7o4QcrJNj7N5wrgAWyQypMwQUT0C4qBvQk63J1mt29gLHD7F97mvC38=
-----END CERTIFICATE-----