Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
File:                     41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa (raw, json)
Hash identifier:          9A0YXN6Nd4jh8vjwTIP0A7QCDm5bZmCmyaIJ4BzctuU=
Subject key identifier:   C1:B7:69:54:07:B7:20:50:B3:F9:4A:38:01:26:A9:49:EA:51:B5:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       657736B5077A636B99F91167D4883929533E309B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa
Signing time:             Wed 08 Oct 2025 00:12:49 +0000
ROA not before:           Wed 08 Oct 2025 00:12:49 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.19.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:36:b5:07:7a:63:6b:99:f9:11:67:d4:88:39:29:53:3e:30:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:12:49 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=fa51dfa567e553053d2fb429ee045eb2447cf4818a118b7de4e29d80d4b5b6b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:0e:e1:64:ce:97:b7:95:e7:da:67:7f:52:
                    ac:05:32:46:70:a1:c5:e1:b1:7f:a4:5c:59:ca:25:
                    dc:01:d8:7c:0a:87:37:d1:2a:5e:eb:0d:a2:35:b9:
                    e9:9e:2d:c1:de:c0:93:54:d1:9d:26:c0:f5:3a:30:
                    50:50:8f:54:a3:c2:0d:38:3f:0f:ac:e7:61:db:f6:
                    87:32:1c:59:29:ea:bb:6a:86:49:f5:f8:dc:49:f5:
                    29:07:69:00:b1:98:48:86:04:87:a2:dc:b1:af:cb:
                    cf:fc:09:18:d0:17:9d:05:46:72:6f:8e:f0:57:6e:
                    26:8e:a3:1d:8c:92:0f:b1:0c:5e:b1:e1:ee:6e:cd:
                    c6:c0:d3:dc:e7:7e:c5:bc:7d:1b:83:03:a8:d0:b1:
                    f2:47:ca:e8:13:5c:b5:1c:60:96:d4:76:b1:81:a0:
                    b6:1a:9d:40:da:d0:24:3a:0c:18:eb:a8:77:73:b6:
                    5b:fe:80:2c:98:b4:7d:25:74:49:23:63:26:5b:da:
                    65:8e:cd:33:d9:5e:c8:8c:79:33:d2:c0:89:b6:40:
                    b0:82:51:1b:a1:63:63:cb:61:a0:21:f2:cb:75:11:
                    d3:ed:cd:bd:35:27:08:05:74:9d:ef:39:65:97:bc:
                    34:6b:b0:40:7b:82:4f:db:4d:d7:48:b7:96:9e:89:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:69:54:07:B7:20:50:B3:F9:4A:38:01:26:A9:49:EA:51:B5:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41cde9cf-c0ce-4562-a2a6-f324bc8811c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:3a:34:6f:17:aa:3b:8f:22:90:5d:d6:6a:be:66:6f:12:
         60:0c:0d:cb:9c:4b:da:b6:67:1e:15:af:f3:88:b1:e1:9a:45:
         39:7c:e8:0a:e5:48:59:7e:a6:db:63:b4:be:b6:b8:27:63:1b:
         7f:dc:b6:62:93:19:9f:ee:a9:4e:d4:e1:ab:16:76:63:27:bf:
         00:73:6c:5a:4f:59:42:35:70:19:9d:d5:62:db:39:7e:eb:a4:
         46:d2:ff:f9:49:91:cb:dc:56:4f:03:a2:35:7e:ae:0e:c1:da:
         14:a4:46:0e:0f:1d:72:63:9d:b1:26:d8:08:d7:bb:06:63:d2:
         38:db:fa:1c:8c:2b:85:b5:8c:21:18:d9:3b:48:5d:3e:f6:f0:
         9c:6c:93:8e:fb:77:b7:59:0a:e8:fe:15:ed:94:be:7a:8e:56:
         8b:4c:5d:e3:b5:6f:f5:38:aa:8b:a4:2f:dd:b1:a1:e1:ec:03:
         b3:72:c7:c7:14:97:b4:c8:49:04:d4:8e:aa:75:23:a9:c9:ef:
         f8:0b:c0:72:8a:6b:57:0d:a1:ea:73:ac:b6:46:1d:fc:50:11:
         f1:0d:02:7f:7c:c0:b3:19:22:10:10:20:8a:fb:e4:b7:23:0b:
         a6:34:c5:9b:7b:14:fa:45:b2:f8:a5:f3:38:e6:85:2b:63:68:
         50:de:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----