Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3568c54d-b5bd-4d2e-a2d7-efa0a824b2b7.roa
File:                     3568c54d-b5bd-4d2e-a2d7-efa0a824b2b7.roa (raw, json)
Hash identifier:          wn8I/B4wS/DtdRSfW+rWCzlz/+rNWQ7EZ5L0ABf5bgE=
Subject key identifier:   BE:82:F8:E3:D5:7C:37:23:DB:BA:30:F7:5E:95:B0:3A:63:DB:4F:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       71389483481E26DEC33D17EF9AD4F2F7BF0AD496
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3568c54d-b5bd-4d2e-a2d7-efa0a824b2b7.roa
Signing time:             Wed 08 Oct 2025 00:40:56 +0000
ROA not before:           Wed 08 Oct 2025 00:40:56 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.150.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:94:83:48:1e:26:de:c3:3d:17:ef:9a:d4:f2:f7:bf:0a:d4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:56 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=42b7261e5230c6c5b9fd3ea2d9da323690f32380ef90159993cb407776b110a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:43:ce:cf:9a:ee:68:28:16:2a:d2:2b:6c:
                    70:70:a5:68:5d:b8:60:fc:28:44:67:39:0c:ab:bf:
                    97:1a:a2:fe:b5:b7:c7:d0:ce:af:f5:f4:9a:0f:56:
                    b0:e7:e2:17:07:59:4d:bd:2f:1e:11:53:b2:02:1e:
                    4d:4b:ef:cd:71:35:18:17:1d:54:c8:51:a7:f7:60:
                    f5:f7:53:e3:f5:59:3d:16:90:6a:eb:19:a6:94:58:
                    d9:b2:87:98:43:97:f1:c5:56:43:78:a4:b9:86:7a:
                    c0:de:61:f5:5d:d0:01:ba:74:1c:d2:0d:f4:12:10:
                    34:ab:8a:ce:c0:95:54:9e:97:e8:c8:5f:76:be:76:
                    e1:8c:b5:eb:13:99:62:fa:4d:55:1e:ea:ae:48:d7:
                    6c:34:0e:1d:bf:0b:5e:b9:b6:c9:d1:84:2c:09:c4:
                    94:76:97:ce:bc:19:bb:7a:76:fd:5a:15:e1:cf:23:
                    6a:2d:55:f9:a1:a4:58:5a:7e:fd:29:08:4e:0f:89:
                    df:75:80:41:28:c6:d7:9e:3e:b4:e4:8c:e1:7d:ca:
                    04:58:71:f7:64:8f:1b:87:96:5a:92:bd:0e:aa:cc:
                    57:47:77:19:6f:18:8d:4a:30:52:76:84:18:9f:48:
                    41:1b:ac:53:40:d0:5b:1d:87:d7:c7:38:f0:11:00:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:F8:E3:D5:7C:37:23:DB:BA:30:F7:5E:95:B0:3A:63:DB:4F:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3568c54d-b5bd-4d2e-a2d7-efa0a824b2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:44:89:e2:11:37:11:4e:47:23:2e:9b:01:95:1b:4c:2a:f8:
         e2:9d:09:41:07:92:cc:c3:00:62:6a:b4:93:86:29:84:d7:9e:
         13:a9:02:dc:38:51:2a:d4:41:ce:37:c8:b9:cc:14:1a:05:fc:
         b3:08:08:05:ec:06:a5:90:7d:34:7a:73:0a:4d:eb:80:70:33:
         cb:5c:38:87:9f:ce:12:68:34:c2:46:92:9a:17:1a:92:0c:8f:
         96:df:fd:24:73:a8:1a:54:1b:d5:29:7a:cb:fb:3b:e3:aa:90:
         40:4d:0b:1b:a3:4d:51:a4:e4:c0:8f:b1:4b:b7:ad:78:a0:d1:
         e2:f8:8f:e5:4f:52:17:e7:2b:2c:50:c5:a4:75:a0:e1:2d:03:
         5a:d3:35:92:ca:41:9e:2f:2c:63:71:1f:d3:b8:ef:14:32:5a:
         9e:4d:6b:87:30:02:cd:15:0f:26:cb:63:6b:54:75:19:a8:4a:
         a4:af:f6:d1:11:fc:44:5a:75:f8:27:d7:f2:f3:e4:c7:50:81:
         8e:9d:80:c4:ed:07:eb:6f:f6:13:b0:62:f2:91:85:34:2c:07:
         a6:0e:2a:59:71:ce:4e:3f:73:a3:e4:e2:aa:ba:80:d5:bb:33:
         75:31:b5:ad:3f:fc:e9:15:d3:96:cd:b2:4f:f1:50:59:dc:bf:
         6b:63:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:43 2025 by rpki-client