Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa
File:                     4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa (raw, json)
Hash identifier:          835RH3OD+jbuOWa4UMOsixNmjX9zw2GKQS+voZnbvTs=
Subject key identifier:   3F:DD:63:FA:98:4B:8A:3C:E9:57:D8:57:21:8F:47:01:42:73:C1:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BC4ACC83F665723B803608A6624E43AC08095CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa
Signing time:             Sat 27 Sep 2025 00:40:43 +0000
ROA not before:           Sat 27 Sep 2025 00:40:43 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        77.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c4:ac:c8:3f:66:57:23:b8:03:60:8a:66:24:e4:3a:c0:80:95:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:40:43 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=20afbc57598c721d84ce4d51395f61dbbfd1ef672043df1551bcc229ed076b96, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:1d:c0:89:65:e8:92:5d:85:9e:e6:0c:f5:
                    39:0e:07:5e:ce:57:c0:d9:9b:96:c9:f0:77:d2:25:
                    d4:2e:7b:1a:74:fa:41:e4:12:58:91:6a:db:e9:c5:
                    5e:b1:de:b7:95:58:18:5c:0c:fa:28:e4:ba:51:56:
                    d3:7f:94:0f:47:1c:42:96:9c:3a:64:7b:76:69:30:
                    c8:0d:f2:9a:53:d1:9a:60:a1:8f:a8:f9:bc:9d:50:
                    bb:c0:ee:0e:29:61:5f:47:3f:46:2b:18:17:28:1b:
                    ad:9a:5a:4e:64:6e:5b:82:a5:30:3f:6e:8a:c9:bf:
                    fd:44:99:1c:1a:16:e8:d2:53:14:f4:42:dc:20:f2:
                    c7:a9:4f:22:59:d4:54:d6:d7:b2:2b:26:6c:77:aa:
                    9b:09:11:83:23:06:c9:94:e0:50:84:3b:ff:b0:1e:
                    6a:4a:7b:0a:67:cf:2c:26:56:b8:39:b1:85:36:46:
                    4a:47:69:88:9b:68:fb:78:f4:c0:69:77:da:ab:ba:
                    1d:df:96:f6:a7:40:c5:f7:a5:9c:5e:72:b4:87:26:
                    b7:35:b6:9f:76:bf:fd:bd:b0:c7:20:92:d5:21:f4:
                    bf:f2:83:aa:28:8d:47:de:69:1b:4b:58:a8:70:83:
                    50:ee:63:54:7a:ba:b1:e5:6e:7e:31:54:df:e8:22:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:63:FA:98:4B:8A:3C:E9:57:D8:57:21:8F:47:01:42:73:C1:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:a1:e2:b9:5c:e6:7b:88:67:8b:03:17:36:ef:f9:0d:11:
         76:f4:08:e5:b1:39:bf:fc:d3:74:36:dc:73:ee:ab:5b:be:54:
         b8:9d:5e:c2:a8:95:7a:ca:07:1e:05:5d:ed:36:9e:e1:70:f1:
         d0:db:30:69:9a:85:be:70:63:d3:41:cf:9f:7c:56:06:d4:c2:
         97:6b:2c:9f:44:f9:ee:da:24:b0:ee:50:a8:e3:ff:52:75:7b:
         76:bb:03:a7:b0:28:a8:78:03:26:2d:da:c4:b0:d6:1f:72:20:
         24:cb:a3:52:f4:df:cf:6e:3a:56:5c:17:7c:97:c7:8d:74:35:
         4a:bf:e1:92:d7:b3:0f:80:35:ba:20:fd:0d:46:f2:53:72:65:
         e7:5e:78:dc:8d:da:87:1f:02:33:38:80:91:6a:54:45:3d:c5:
         a9:2a:a5:79:3e:aa:fe:1a:6b:42:90:61:0e:ec:56:40:88:77:
         83:4a:da:50:f3:c6:f4:5c:c4:b5:0f:21:07:f9:62:82:60:ae:
         22:6b:f2:8f:c6:95:c3:13:3c:3d:78:86:0e:c4:21:75:6a:be:
         e2:7f:30:04:42:f0:04:bf:42:f7:15:ee:60:49:2c:05:44:c6:
         db:22:ed:57:8d:46:f3:ae:87:63:02:cb:ca:70:06:25:5c:98:
         40:fe:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----