Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa
File:                     2f53e86e-9190-41c5-ad32-08c02983e9bd.roa (raw, json)
Hash identifier:          1wv5SyAf6IbGFhJ1/Gdo+9QzzYTDyQGzvReDThdG378=
Subject key identifier:   F7:C7:53:68:51:AE:17:12:C8:CC:3A:77:E1:CE:07:BD:8F:08:22:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       244EA5A18C813BCE0A1EC6952B46C0481F770F12
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa
Signing time:             Fri 17 Oct 2025 00:42:37 +0000
ROA not before:           Fri 17 Oct 2025 00:42:37 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.184.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4e:a5:a1:8c:81:3b:ce:0a:1e:c6:95:2b:46:c0:48:1f:77:0f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:42:37 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=c087388944a7c900304913ec4508d4dd273e226a206af027341a8435b9cefe93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:7f:81:ca:29:27:86:e0:e1:08:f1:b1:9e:
                    c7:2b:e9:c1:75:9b:1f:8b:75:cf:a2:c3:b7:17:87:
                    61:28:fa:a7:12:39:f2:12:11:12:0b:7c:6e:32:6a:
                    7d:bf:e3:61:13:1b:ba:6f:d5:44:16:41:f5:dc:06:
                    12:56:ee:0b:f3:fb:8b:bf:14:1f:97:03:be:d5:52:
                    c8:a9:68:4c:63:e2:b6:23:0f:ba:b1:5c:5a:bd:67:
                    67:8d:31:ad:42:1c:03:03:43:dd:42:6c:96:fc:55:
                    10:6d:17:34:5e:fd:dd:ae:73:48:e2:80:0b:94:ee:
                    a7:64:9f:03:4d:cd:88:7a:5b:bb:fc:bd:e2:86:10:
                    4a:1f:d1:09:bd:49:bc:86:24:e0:90:bc:04:93:2d:
                    2b:d6:84:8a:be:7b:cd:ec:85:b5:ac:7f:b1:73:48:
                    4c:30:7d:fc:63:0a:5e:0e:a2:d7:63:5d:39:24:33:
                    d6:4f:bf:97:14:49:01:68:12:6a:3d:25:42:7b:50:
                    91:77:a6:8f:3a:be:94:83:5a:74:77:f5:57:ec:45:
                    09:03:f2:06:6c:72:50:e8:26:8b:55:89:3e:f9:35:
                    0b:bb:65:0e:6c:a0:05:dc:73:d9:e2:67:a8:75:c4:
                    4d:b8:54:5c:f2:25:97:3c:10:ae:c0:ed:ea:c4:75:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:53:68:51:AE:17:12:C8:CC:3A:77:E1:CE:07:BD:8F:08:22:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f53e86e-9190-41c5-ad32-08c02983e9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:17:0f:6e:fd:5a:41:57:65:ff:0f:e1:29:ce:56:f4:17:
         ab:d7:44:b1:8c:7b:ec:fd:fb:e9:26:6e:8f:e7:a9:64:6b:5d:
         22:95:95:30:91:5d:f3:0f:bf:02:ca:10:68:b3:a0:6c:83:40:
         84:35:69:3d:21:71:55:f0:b8:7b:ee:91:30:09:36:b2:7c:ff:
         53:34:0f:9e:b3:20:4f:a6:77:a4:0c:6d:bf:c4:e5:09:c2:51:
         8f:03:96:b6:27:1a:6e:72:8f:af:d5:5e:ae:d6:c4:7f:38:b6:
         8f:bf:04:1e:93:c2:41:2d:0f:6e:3c:7d:57:27:d1:28:79:a3:
         36:01:71:74:73:45:8d:aa:1c:98:74:2f:ec:aa:e1:32:ae:d9:
         db:dc:9e:e1:b2:19:87:fc:a8:a1:35:2a:69:66:89:dd:2f:c2:
         5e:b3:98:2f:bf:76:be:10:2b:d6:11:05:27:bc:09:8d:49:4d:
         1f:f3:d3:6f:19:2d:40:4b:cc:62:98:af:21:ab:90:56:57:f5:
         4e:2c:a8:6e:26:9d:1c:67:33:d1:13:e1:57:f0:eb:75:3b:c3:
         ad:04:b7:84:c8:78:80:4b:98:29:ba:dc:fc:a8:5a:1c:de:40:
         06:6d:ab:a4:bc:0c:98:f2:ee:6b:1d:99:0e:7b:c5:a2:5e:f3:
         72:6e:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----