Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e8959c-3e95-45bf-8fa5-6a35bfc7e313.roa
File:                     53e8959c-3e95-45bf-8fa5-6a35bfc7e313.roa (raw, json)
Hash identifier:          M9yBJbT8wcWCRydpOekE2Efy/9UOFZV27Izr6Tv6Sts=
Subject key identifier:   6C:6F:1E:CF:AF:E1:00:A0:60:E9:BD:64:16:35:2A:ED:93:6B:05:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F08D1306E0E42B21C4B3A5E3AF2A6B77ABF10E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e8959c-3e95-45bf-8fa5-6a35bfc7e313.roa
Signing time:             Sat 18 Oct 2025 01:50:08 +0000
ROA not before:           Sat 18 Oct 2025 01:50:08 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:08:d1:30:6e:0e:42:b2:1c:4b:3a:5e:3a:f2:a6:b7:7a:bf:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:50:08 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=22c88074e782d08cd4077d9c0599cd7b5b54d332d69208534969a0d0102b2718, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:36:66:db:de:6b:4f:8e:5a:dd:83:56:4e:
                    f7:8f:87:75:f1:ed:31:b2:55:37:3a:9a:1b:03:a6:
                    cc:ca:78:d3:fe:74:dc:42:a9:91:7e:11:33:0d:b7:
                    62:87:7d:c3:3c:86:18:45:4d:ff:a5:51:db:8b:97:
                    50:a2:99:38:a7:9c:62:52:e7:ec:c5:d6:f4:f9:8b:
                    72:d7:3a:5a:c1:ea:2e:b4:e2:fc:2d:e1:e3:7b:f6:
                    15:8a:7f:c7:78:8d:53:da:32:f6:4d:a6:fb:ed:0c:
                    cc:1a:7b:23:ef:d6:11:57:7a:ed:5a:a9:c0:65:d0:
                    35:e4:61:f6:ec:11:c3:92:3a:3e:80:19:b9:8a:69:
                    6b:db:da:f9:dc:46:c8:af:c3:56:fe:96:a6:30:26:
                    86:7d:7a:e9:e8:d6:25:d9:e1:cc:56:88:ae:b9:70:
                    f0:da:0d:9d:44:e1:a9:61:51:70:9e:a1:8c:52:70:
                    4f:cf:aa:86:da:0f:99:ac:a6:51:a6:1d:ca:06:64:
                    2e:6d:8b:cd:3c:48:85:5d:98:25:73:89:26:e1:44:
                    9a:d9:84:8c:fc:6f:a4:f8:6f:10:b0:6b:eb:6c:33:
                    90:18:3e:7f:f6:b0:2a:8b:de:34:5e:5e:47:ce:d3:
                    c7:0f:57:c2:f6:a9:21:d4:3a:30:b8:03:42:6c:f6:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:1E:CF:AF:E1:00:A0:60:E9:BD:64:16:35:2A:ED:93:6B:05:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53e8959c-3e95-45bf-8fa5-6a35bfc7e313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:8f:3a:62:eb:6f:cd:5e:b7:38:b9:c5:48:29:44:50:92:
         6d:ca:b0:70:5d:8f:9d:40:7d:a1:e1:9e:b5:ef:bb:40:5b:9c:
         1d:44:69:5b:9e:86:49:8c:69:4d:22:a9:32:63:0d:cd:49:d1:
         61:2d:ab:db:ef:c7:d2:1b:a9:b6:62:e5:54:45:80:fb:53:14:
         b2:2a:be:21:ea:5f:97:75:40:d3:6c:2f:aa:05:c6:3c:ac:d0:
         44:7c:cc:ab:2d:03:d7:eb:68:91:cc:06:c3:c6:f1:05:96:fa:
         e4:05:32:1d:59:6c:b9:f9:52:64:c2:7f:8e:7a:d8:6f:5e:1d:
         d9:b9:9a:e0:d1:f3:d6:9c:1d:5b:66:94:9f:fd:0f:ec:2a:3f:
         5c:70:9b:dd:ff:3d:e4:57:49:c2:80:f5:7d:3e:95:06:72:1a:
         a1:66:0c:26:e4:2b:05:1d:81:99:f7:d3:19:21:b8:3c:90:5c:
         32:3c:38:36:24:e6:68:0c:67:21:ef:5d:35:8b:32:8a:a3:35:
         43:d0:2a:dd:39:d0:68:d5:79:68:63:00:34:6e:02:e6:bf:0a:
         ce:99:0f:7e:31:81:93:58:4c:23:d1:27:10:3b:0d:9c:14:3f:
         7b:bd:84:85:cc:4f:8b:07:86:b2:a4:b9:29:58:c5:ed:b8:e0:
         5c:34:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----