Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c5b4f9-0947-4c0b-bfdb-bb769f2d31b0.roa
File:                     48c5b4f9-0947-4c0b-bfdb-bb769f2d31b0.roa (raw, json)
Hash identifier:          rv7y9y7tOiefC8bIdY8ekEiNHc/NYg/P8G8qnkcSuOY=
Subject key identifier:   77:E7:1E:EC:4D:52:CC:E9:ED:27:07:EB:B6:F1:35:4B:C4:6B:46:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33CCDF9B781F70945593B2B8604A17C4560B5226
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c5b4f9-0947-4c0b-bfdb-bb769f2d31b0.roa
Signing time:             Sat 18 Oct 2025 01:31:52 +0000
ROA not before:           Sat 18 Oct 2025 01:31:52 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cc:df:9b:78:1f:70:94:55:93:b2:b8:60:4a:17:c4:56:0b:52:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:31:52 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=fc311aa590ad0c759cb015bb7082d0c8f1a6678953cedc6bff13d9ca3bc24cc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:bf:ce:c3:77:e0:fd:f0:ed:16:e1:f7:dd:
                    cc:b1:c8:1a:59:a5:e1:38:74:ad:33:10:5e:fb:7e:
                    0d:72:27:18:ca:8d:9c:b0:27:fd:40:ad:82:f7:54:
                    e2:6c:e8:3a:a3:e3:ac:87:af:3b:69:72:09:c4:e3:
                    3c:b5:89:45:fd:21:a6:3d:d5:f3:f4:e0:96:da:55:
                    24:81:66:d0:54:56:9f:ef:16:67:78:55:76:89:0c:
                    07:ec:51:06:bd:5f:0b:93:ec:88:df:11:66:ea:2d:
                    72:8e:52:4f:71:85:97:c8:7c:90:14:eb:f6:cc:19:
                    62:7e:73:d4:4f:8b:1c:af:e7:39:e1:38:80:11:e6:
                    3a:10:63:c4:7e:73:da:07:98:c0:96:cb:0d:72:c0:
                    ae:33:4d:35:27:9f:ae:71:be:19:0f:a1:93:83:9f:
                    d5:ea:d8:76:7a:ed:ed:93:51:d3:07:ae:c5:fc:f1:
                    f0:af:cd:60:2f:45:bc:b8:75:c9:6b:83:1a:1f:72:
                    27:39:1d:59:ba:0b:c4:f1:1d:70:4a:a3:ae:2d:5e:
                    4d:eb:41:73:e6:74:e7:69:af:dc:ca:c8:da:ba:a8:
                    2a:56:75:e1:3b:ab:33:1c:4f:76:cb:da:72:0c:06:
                    02:90:22:15:17:a9:23:b0:de:37:25:c3:d2:cc:23:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E7:1E:EC:4D:52:CC:E9:ED:27:07:EB:B6:F1:35:4B:C4:6B:46:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48c5b4f9-0947-4c0b-bfdb-bb769f2d31b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:b4:09:06:f6:b5:5b:db:5e:9e:89:d9:8a:d1:e7:7e:48:
         a0:8e:69:fe:ea:55:42:f5:2a:89:04:dd:d4:b0:b6:ad:97:14:
         91:df:22:c5:45:b9:d1:a1:e5:8e:f8:10:7f:83:68:7f:0a:a6:
         c4:a2:ea:9b:97:97:ba:9e:3d:22:ee:e6:2b:91:11:fd:8a:78:
         0b:96:38:a3:11:11:1f:22:3a:93:ed:d1:0d:4d:46:20:c7:a5:
         3a:59:bf:e7:97:aa:90:3b:85:60:b3:f5:e1:ca:67:03:d2:01:
         4c:b8:49:b0:e0:56:9c:2a:72:58:94:36:e6:4e:c4:51:67:80:
         96:78:35:06:e2:98:59:29:0e:d9:85:b4:e1:b1:48:43:f7:4c:
         e0:cb:b6:ec:f8:2a:5a:11:29:59:cf:c3:c3:87:f8:db:ff:d2:
         c4:3b:90:45:54:62:0a:f0:0d:b9:11:f4:a4:83:f1:87:58:1e:
         e8:15:ad:d2:3f:d0:ae:d3:4a:e3:a9:60:c3:51:a2:3c:a6:12:
         9a:e0:47:10:f6:62:10:c1:8f:6a:c2:55:73:4d:01:5a:20:a8:
         6b:ad:9c:49:1d:aa:c1:55:03:f6:71:e3:f0:b6:17:38:5d:7c:
         57:db:b0:af:99:9e:be:c8:fa:8c:f2:35:2e:50:ad:29:a2:b0:
         52:f1:c2:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM8zfm3gfcJRVk7K4YEoXxFYLUiYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDEzMTUyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzMxMWFhNTkwYWQwYzc1OWNiMDE1YmI3MDgyZDBjOGYx
YTY2Nzg5NTNjZWRjNmJmZjEzZDljYTNiYzI0Y2M3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9qb/Ow3fg/fDtFuH33cyxyBpZpeE4dK0zEF77fg1yJxjK
jZywJ/1ArYL3VOJs6Dqj46yHrztpcgnE4zy1iUX9IaY91fP04JbaVSSBZtBUVp/v
Fmd4VXaJDAfsUQa9XwuT7IjfEWbqLXKOUk9xhZfIfJAU6/bMGWJ+c9RPixyv5znh
OIAR5joQY8R+c9oHmMCWyw1ywK4zTTUnn65xvhkPoZODn9Xq2HZ67e2TUdMHrsX8
8fCvzWAvRby4dclrgxofcic5HVm6C8TxHXBKo64tXk3rQXPmdOdpr9zKyNq6qCpW
deE7qzMcT3bL2nIMBgKQIhUXqSOw3jclw9LMIyf/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUd+ce7E1SzOntJwfrtvE1S8RrRgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4YzViNGY5LTA5NDctNGMwYi1iZmRiLWJiNzY5ZjJkMzFiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCSkwDQYJKoZIhvcNAQELBQADggEBAAlNtAkG9rVb216eidmK0ed+SKCO
af7qVUL1KokE3dSwtq2XFJHfIsVFudGh5Y74EH+DaH8KpsSi6puXl7qePSLu5iuR
Ef2KeAuWOKMRER8iOpPt0Q1NRiDHpTpZv+eXqpA7hWCz9eHKZwPSAUy4SbDgVpwq
cliUNuZOxFFngJZ4NQbimFkpDtmFtOGxSEP3TODLtuz4KloRKVnPw8OH+Nv/0sQ7
kEVUYgrwDbkR9KSD8YdYHugVrdI/0K7TSuOpYMNRojymEprgRxD2YhDBj2rCVXNN
AVogqGutnEkdqsFVA/Zx4/C2FzhdfFfbsK+Znr7I+ozyNS5QrSmisFLxwjE=
-----END CERTIFICATE-----