Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa
File:                     4644ff0b-fedf-419f-93c4-1665a93ad50b.roa (raw, json)
Hash identifier:          8yX8jgg/Vn12KvTY1fDLTbx1BwOV+J9CP0mszHJDhhk=
Subject key identifier:   7B:DF:D9:34:24:EF:43:B4:A6:79:45:BD:E1:AB:3D:60:90:81:D7:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B465523944BBC334E9D16A38C476B8963A9B56B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa
Signing time:             Wed 08 Oct 2025 00:51:21 +0000
ROA not before:           Wed 08 Oct 2025 00:51:21 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:46:55:23:94:4b:bc:33:4e:9d:16:a3:8c:47:6b:89:63:a9:b5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:51:21 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=b6e19f67d3ece89ea3d11b478418e7121bb835010c76c9d6bac55953c5156e14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:d5:d2:72:7a:11:a3:66:2c:00:e4:e6:a4:
                    f9:91:72:62:4d:f1:97:b5:a6:bf:be:60:a1:84:91:
                    2f:10:eb:9e:f6:c0:98:c1:5b:3f:2e:5e:16:2e:5e:
                    e9:99:7d:3f:90:b8:ef:1d:de:4c:2f:e5:3b:5e:f8:
                    4e:ca:69:b1:27:ca:30:77:be:f0:c0:65:b0:20:20:
                    10:04:29:e9:cb:bb:20:19:e3:35:d2:23:c3:f1:28:
                    62:dd:10:9e:51:50:2d:af:31:e7:cd:d8:fd:78:65:
                    ac:af:dd:cd:f4:25:1c:1b:9e:4a:1c:8e:02:c2:ce:
                    f7:de:66:86:0a:20:0f:52:c2:da:7e:07:e7:63:62:
                    fb:b9:c1:30:bc:da:a0:68:81:0e:bb:b9:2c:db:11:
                    7e:64:10:1b:4f:38:90:29:74:f5:f7:d2:9d:b2:8e:
                    38:b3:91:b3:34:b3:b6:ee:af:94:46:1f:a7:a9:72:
                    b6:cd:b0:04:9b:de:50:ae:22:20:7d:a2:22:4d:00:
                    a7:29:df:91:13:f4:cd:a3:fb:e1:69:88:bc:ef:27:
                    66:cf:41:57:10:62:73:34:00:ad:2d:af:9d:5b:dd:
                    68:06:e4:2b:79:6f:6c:cf:63:99:6e:6c:73:0b:41:
                    35:15:ad:c1:05:56:5e:79:72:f2:ed:a7:63:4e:12:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:D9:34:24:EF:43:B4:A6:79:45:BD:E1:AB:3D:60:90:81:D7:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:b2:d6:2a:11:2b:30:50:36:cf:f1:2d:e0:1c:74:c0:84:
         f0:7f:99:5a:50:73:19:af:ee:29:fc:ab:31:15:d5:cd:5e:f7:
         6b:14:47:41:64:d1:f7:82:05:b7:f7:34:d3:cf:84:1b:9f:ef:
         83:e6:6b:d7:3c:24:ef:6d:a8:19:a7:eb:ab:d3:2b:2c:2e:16:
         b2:4c:d1:61:39:2b:30:80:d2:8b:f5:32:21:b6:0c:6a:9d:5a:
         80:95:0e:b2:71:65:8f:c5:e4:48:ed:83:4b:7b:5f:a0:38:31:
         f3:63:de:6c:ec:d5:96:79:18:66:b2:58:ea:06:1e:37:88:d1:
         6d:af:ad:d7:72:7b:9b:cc:ae:1d:f0:91:73:89:4f:d7:cc:6e:
         1a:f8:6c:6c:43:c2:ce:ae:a2:91:6f:ab:ce:05:48:89:45:ee:
         70:1d:06:2d:87:71:9c:1a:79:be:c6:a6:2b:09:76:fd:26:88:
         4e:d7:c4:08:29:d8:49:9f:9c:94:01:12:86:35:df:c9:19:68:
         69:f9:54:41:42:a5:a5:29:24:16:12:47:03:09:49:cd:71:9a:
         b3:cb:70:2f:2a:7e:16:10:d4:73:c7:74:43:58:94:d3:b9:86:
         96:2e:71:5d:16:4d:88:47:1b:69:76:b7:a0:f6:45:41:8c:65:
         e4:ea:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----