Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa
File:                     3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa (raw, json)
Hash identifier:          Yvq2BwU+GHUg/ofjbdShoa7mIbuQ0MQWIKofAi2aU4s=
Subject key identifier:   E8:24:6B:E6:E9:05:A6:4F:5E:8B:2A:0E:F0:13:C2:87:CD:07:69:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14ED78225D94B6EEC4E9C754CF016F64D2BE0E7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa
Signing time:             Sat 04 Oct 2025 00:39:03 +0000
ROA not before:           Sat 04 Oct 2025 00:39:03 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.216.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:78:22:5d:94:b6:ee:c4:e9:c7:54:cf:01:6f:64:d2:be:0e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:39:03 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=e8b9fef5de90a11760ed8fae7c5bf7ad16212611f1bba950f0a47b9ab846bd67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:7b:85:1a:ce:29:11:80:14:ee:6d:91:ec:
                    0e:b1:95:1b:6e:9a:43:5a:60:e8:cf:ce:ea:fb:36:
                    3d:c3:60:e4:5d:91:0c:b0:74:cc:cc:65:ff:44:4a:
                    0e:90:e6:8e:06:b2:48:0d:46:8d:42:a9:30:f6:7e:
                    2e:d0:dd:62:94:46:73:a0:ee:ee:58:49:5c:4d:7e:
                    de:9e:d7:34:b4:55:93:5d:e6:32:7e:fc:10:29:cc:
                    49:c3:b2:a6:bc:8a:66:76:61:f7:95:fd:fe:79:06:
                    bf:9b:90:8c:91:5e:4a:e2:0f:3c:28:e2:a5:7f:41:
                    53:c1:ed:ce:f6:7b:fb:91:a2:1c:a0:03:3a:cc:50:
                    b8:5f:c2:bc:74:e9:31:a2:da:4e:5d:b9:2b:33:89:
                    f0:dc:dc:02:2b:1b:40:70:97:27:29:e3:62:e6:a5:
                    89:53:6a:f7:5c:16:e6:12:20:96:ba:d9:1f:85:22:
                    f1:dd:b1:cb:00:1f:1d:04:66:fd:24:f1:49:15:f3:
                    a2:d3:c2:51:a9:36:46:79:c7:81:93:9d:c4:8e:f8:
                    9e:68:57:c9:62:a9:8c:6c:fb:62:f3:63:86:16:c6:
                    6c:00:77:62:20:cd:77:b6:8e:14:95:d7:0c:e1:e9:
                    5b:af:dc:be:20:2f:dd:50:21:bb:9e:28:12:0c:0a:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:6B:E6:E9:05:A6:4F:5E:8B:2A:0E:F0:13:C2:87:CD:07:69:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e72e62b-6891-45f4-a8c7-d6b2fcf6089d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:61:ce:a9:db:85:ee:bf:a1:26:07:38:5d:bb:97:3d:f4:
         9e:84:8b:13:79:93:1b:bd:07:c1:7a:f0:1b:6a:02:0a:52:ee:
         6e:77:0d:65:b7:41:a7:10:87:25:32:91:7a:65:fe:66:de:c7:
         ca:fe:23:56:6d:8e:ec:cd:79:97:21:f0:c0:d1:84:c4:26:16:
         3a:23:d4:e5:40:8d:f5:95:7b:1e:8e:87:08:83:65:f3:47:73:
         08:9b:b9:e4:58:38:0e:06:10:02:a0:7a:bf:f2:41:c0:08:24:
         ea:ae:52:90:3a:0c:c1:cc:55:a7:92:63:d4:0c:a6:06:cd:0d:
         13:f4:0d:e8:12:fe:79:de:ad:eb:6b:dc:98:87:b4:6c:95:f2:
         79:d4:0d:b6:bf:f3:84:bc:ac:7a:a8:2d:b2:7b:98:17:ca:ae:
         b0:44:71:12:5f:23:f8:f2:36:fb:e3:de:30:52:d7:91:bf:9c:
         65:22:3c:ca:16:c1:bf:c6:9c:13:61:25:42:88:e9:cb:82:7c:
         a5:d4:48:43:17:9b:e0:db:98:e5:c0:c1:3d:49:fc:88:59:19:
         f7:66:9a:45:12:4c:64:b3:1f:90:7d:2c:60:46:e1:2f:2a:8d:
         72:e6:a7:1c:d3:b5:3a:ff:b2:1b:2b:af:5b:bf:29:7b:61:f6:
         15:89:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----