Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa
File:                     57433c2d-3f13-4242-9b51-a6f8d1307f78.roa (raw, json)
Hash identifier:          6KyaQaNh/6/vE0ykmOxCGC4N+1I9AggEe5eKMngKp3o=
Subject key identifier:   02:C7:44:F7:52:AB:A9:96:9C:E7:F4:44:27:90:A5:FB:86:0A:10:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BB1E5BF1B9302055365943EE4211900158ED100
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa
Signing time:             Mon 06 Oct 2025 16:39:54 +0000
ROA not before:           Mon 06 Oct 2025 16:39:54 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.16.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b1:e5:bf:1b:93:02:05:53:65:94:3e:e4:21:19:00:15:8e:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:39:54 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=845d69a9964cbf9aa3da4eb82d62325a97c781aef0591a4fa355b38dc61b32ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:55:4c:9a:09:ec:fe:e4:16:5e:b5:70:7c:
                    1f:b7:fb:85:27:af:40:82:ba:69:2b:07:1a:d1:95:
                    4b:88:7a:a0:5b:bc:99:f2:e1:c0:d0:a5:f6:34:12:
                    4e:28:57:8f:b2:b1:9f:24:7f:83:cc:d7:03:a7:b8:
                    80:5f:05:8b:76:74:61:b8:51:62:d4:11:d7:93:bf:
                    c3:f6:ee:f6:41:0f:4f:4b:9d:db:54:dd:84:cb:89:
                    7c:4b:36:60:86:fe:ce:c8:06:ec:2f:9c:34:1b:05:
                    8a:28:cd:4a:db:6b:04:b1:e0:22:5b:6b:81:37:e1:
                    3d:49:e7:48:79:83:6f:48:6d:3c:01:91:ef:11:22:
                    1e:de:74:70:0d:b8:1f:0c:87:bd:67:d4:27:9b:7f:
                    0f:73:87:16:0c:83:9e:ac:29:1b:a8:45:ec:37:fd:
                    3c:f3:e2:3c:ff:d7:d4:07:44:77:22:5d:9c:67:8d:
                    0f:c6:be:c1:0d:8e:7f:dc:59:ba:10:a2:c1:f4:11:
                    8d:a9:a6:13:dc:e4:bd:45:dc:d4:fd:72:29:64:3c:
                    e9:58:c0:05:d9:50:a7:8e:38:25:6e:68:83:54:e2:
                    25:74:52:4e:a9:a3:50:2e:38:10:27:a8:f4:ce:8d:
                    52:6d:23:a2:51:0c:b3:c5:ed:5f:98:ac:62:3e:32:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C7:44:F7:52:AB:A9:96:9C:E7:F4:44:27:90:A5:FB:86:0A:10:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57433c2d-3f13-4242-9b51-a6f8d1307f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:b5:3e:ed:ce:09:6d:81:93:68:5d:99:38:f0:b5:c2:d1:
         c3:97:bc:6c:d3:02:15:0a:b9:e2:e3:1c:42:47:81:9e:92:d2:
         a8:85:44:cc:7b:7c:05:b4:16:62:48:72:bd:5b:cf:d0:91:d8:
         ad:57:da:79:a3:c2:20:d5:4a:87:83:bb:e5:42:10:0a:c2:8f:
         ae:ba:48:c0:56:89:26:dd:b2:ca:e0:f9:39:64:82:3b:fd:ed:
         69:e6:66:90:c3:91:fa:8c:1a:4f:ce:e7:96:88:60:5e:bd:d7:
         ae:98:d6:ea:36:13:a2:53:c5:95:af:1d:98:37:4d:74:e8:bd:
         2e:45:90:4a:f2:48:5c:be:3f:49:50:25:45:3b:08:e3:e0:f7:
         50:9d:e2:8a:16:90:ee:9a:11:97:52:84:93:9e:be:07:c6:5a:
         26:92:97:7b:f1:38:3e:16:a6:a1:9b:22:71:a1:7a:9f:40:4e:
         2f:80:0f:67:e9:51:18:1e:1b:76:d1:04:f1:92:fb:a7:56:4a:
         5b:e4:e0:d8:9f:4b:e0:7f:37:1f:d1:79:5d:4c:3e:63:34:f3:
         43:63:47:af:76:50:7c:80:44:09:ce:e3:6a:d9:7b:42:47:24:
         88:f3:c0:c3:8b:a9:f4:e4:8c:89:bd:4a:d8:cf:2f:7b:32:01:
         61:2a:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----