Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
File:                     461512e0-a72b-4e95-b675-27ac531c5460.roa (raw, json)
Hash identifier:          7I4JVMDc5CXMS3GNKCXm3zBrfD9KKgsNL0vFjbOMA8g=
Subject key identifier:   79:6F:EA:5B:4E:40:90:82:65:51:8B:15:D0:FC:28:7B:BF:3D:DC:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5827ECB0C97E4AA04E29C9F7A9E73DEDB8A73F53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa
Signing time:             Sat 18 Oct 2025 00:20:09 +0000
ROA not before:           Sat 18 Oct 2025 00:20:09 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:27:ec:b0:c9:7e:4a:a0:4e:29:c9:f7:a9:e7:3d:ed:b8:a7:3f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:09 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=1fb8b4aad5b7d7d91591d9c1c31ed1e1f923722c50501352805c1d0837768131, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:80:dd:1a:30:fd:f8:74:05:43:a3:38:b0:
                    f9:4a:52:b6:2f:af:ed:67:dc:12:47:04:a4:b6:42:
                    fc:b9:aa:17:67:8f:01:58:18:7b:c1:25:c8:41:04:
                    9e:88:3d:cb:e7:58:f7:1d:d5:01:a0:98:95:c8:02:
                    41:6e:cb:96:e0:5c:d3:1b:b0:6a:70:b1:bc:64:1e:
                    18:90:d2:c3:63:c0:92:18:2f:b2:27:e7:c9:51:22:
                    b0:6f:33:f0:db:6d:2a:14:f1:62:8f:1b:8e:04:b7:
                    ce:bb:60:bf:3b:4b:a1:e8:4d:54:f9:0b:2e:86:9d:
                    4b:92:62:3a:d1:ed:8c:17:97:70:bd:d2:66:75:9b:
                    b1:fa:6b:59:2e:4f:64:ab:07:61:f0:d5:0a:9f:26:
                    56:7b:a0:bb:e7:78:84:6b:6b:ce:4e:c9:75:0c:1c:
                    f5:ce:60:28:a0:35:1e:9f:32:82:63:54:cd:8d:ba:
                    aa:cd:e6:fe:d3:f3:20:25:09:cc:ef:ce:50:1a:b0:
                    6f:1f:06:4d:9f:29:99:c4:f5:f3:d1:e5:ca:57:04:
                    c1:e7:f2:52:76:0b:c2:9a:77:53:33:54:02:e1:9f:
                    56:06:00:df:05:bf:19:38:ae:8b:9d:99:84:31:83:
                    6d:0d:b4:28:28:46:33:29:31:02:d9:a3:c4:cb:05:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:EA:5B:4E:40:90:82:65:51:8B:15:D0:FC:28:7B:BF:3D:DC:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461512e0-a72b-4e95-b675-27ac531c5460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:65:be:1d:63:7a:d2:21:6a:64:3a:53:e4:a1:25:9f:8e:6a:
         1c:94:dd:9d:31:8d:03:4a:9a:33:02:f6:b4:e0:73:53:cc:62:
         d9:5f:8b:46:6a:de:75:82:36:f1:18:4c:6b:b1:8e:a0:9c:ae:
         92:6f:18:b4:f1:17:e3:94:32:ae:cb:02:90:ec:bd:05:e9:f9:
         23:d4:a9:b3:de:14:ac:ab:e9:07:0c:c0:8e:13:fa:1d:51:04:
         cc:0f:31:d8:35:06:5c:27:86:04:ae:34:46:31:c1:33:18:08:
         ea:f5:ca:dd:c3:95:9a:4b:c0:1c:be:48:b2:43:dd:32:c1:88:
         50:a6:64:ff:70:b4:1d:59:af:22:76:68:74:23:8d:87:46:ea:
         f4:ec:c9:8a:26:d2:41:ea:14:82:6f:fd:66:cc:14:6d:e1:3a:
         8e:9c:7e:29:57:7a:0f:4c:95:cc:c3:46:a7:dd:be:37:23:fd:
         9b:45:50:c5:85:68:c4:9f:9e:0b:ae:74:b6:47:7f:7e:0e:2f:
         b6:b0:c7:74:fa:1c:47:76:8e:66:94:a2:20:4d:c7:ec:0b:92:
         55:bb:8b:78:f9:26:60:5d:b3:b3:43:92:cb:b9:5d:a5:85:aa:
         c2:a6:1f:8b:74:ba:35:d0:a8:38:f7:09:04:40:67:03:01:0f:
         36:65:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----