Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa
File:                     5d972978-417c-4273-8923-d994ac6116e2.roa (raw, json)
Hash identifier:          o74DEy1v97Tlg5iovxGUjGkbXzEmsZp7jS8BfduNaSw=
Subject key identifier:   8D:60:5A:45:F7:86:FB:D3:39:07:38:3A:90:4F:06:0A:18:08:A7:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5684DBFBCA6FD25E98C779A73A709ECA47BEA7B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa
Signing time:             Sun 19 Oct 2025 02:11:03 +0000
ROA not before:           Sun 19 Oct 2025 02:11:03 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        155.197.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:db:fb:ca:6f:d2:5e:98:c7:79:a7:3a:70:9e:ca:47:be:a7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:11:03 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=3ba0802d1f37d6ddf519461e57e19849ac000e6a75f51a343724ba45ccfa6274, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:ab:82:49:74:05:20:d5:cf:19:b3:40:1c:
                    29:57:47:ef:f2:13:50:f6:69:dc:3e:ba:00:1e:cc:
                    17:72:b3:85:93:35:9a:57:3a:a3:e9:f9:66:20:6a:
                    65:91:a7:60:22:ca:e9:f8:9e:b1:00:f2:68:79:8c:
                    7d:69:4c:64:27:db:3c:17:0c:25:63:d8:1a:19:70:
                    86:97:55:ec:46:a7:c4:63:98:73:12:f0:a9:66:7d:
                    34:4e:6a:e5:87:8e:e7:df:bc:56:02:50:39:9a:bf:
                    94:e1:b5:63:f5:bb:f0:7b:1c:a3:58:12:db:6c:e7:
                    1b:23:d6:44:d7:54:17:df:7b:7a:3f:49:59:ad:32:
                    d3:1f:36:f3:7f:5a:f2:e5:4b:82:17:f7:9b:5b:af:
                    b0:72:ee:1d:d1:0d:ed:92:3f:ee:9c:6b:52:d5:c4:
                    d4:14:92:88:54:04:24:af:05:02:3a:56:46:2d:82:
                    7c:24:af:8c:e1:8d:75:49:70:77:14:6c:44:10:db:
                    f9:9b:f1:d3:fd:18:4a:55:75:11:fe:f5:90:ac:f4:
                    d4:1c:df:73:f9:11:eb:ff:42:39:b7:15:1d:0d:1f:
                    91:6e:60:95:81:8c:ba:c0:db:3d:1e:ce:b7:e2:91:
                    0f:d6:90:87:8c:8a:3f:01:46:85:f9:73:5c:b9:e2:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:5A:45:F7:86:FB:D3:39:07:38:3A:90:4F:06:0A:18:08:A7:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:8c:14:c0:2d:2a:be:e3:6e:83:c0:58:89:cf:12:e9:05:
         a7:4e:eb:d6:20:31:d1:7a:b5:60:17:12:b8:0d:03:37:8c:a3:
         66:57:f3:5f:01:87:21:11:0b:42:b1:a0:0e:ad:28:22:96:b7:
         1a:98:9b:ef:b6:87:a1:2a:b2:cb:cf:77:33:9a:61:e7:b7:17:
         21:64:26:98:1b:b8:0c:41:40:81:d2:ca:a6:61:08:cb:39:c7:
         34:93:75:c5:d8:c6:87:cf:ff:67:23:da:63:67:9a:46:81:c7:
         cc:48:65:08:b5:7a:db:d5:d9:9a:32:c4:84:6c:cc:c2:e1:d0:
         58:49:64:c6:12:b6:39:f4:d3:44:85:3a:01:87:ae:fe:ae:77:
         33:77:5c:01:3f:aa:d8:5b:53:fd:b5:00:97:c1:ba:b7:52:76:
         4f:1e:4f:ff:82:d5:43:6f:f3:46:71:29:d8:3f:5a:57:b2:3d:
         b4:00:d2:1b:56:fc:29:00:7c:7f:79:5c:10:d5:7d:86:2f:6e:
         81:aa:26:df:bf:7d:3d:f7:c8:c0:24:1d:95:fd:52:76:d8:49:
         8f:28:4c:b1:64:fe:99:1e:24:bd:ce:d2:43:70:da:3b:85:4d:
         f5:15:20:27:bb:6e:c0:03:a0:aa:db:b1:10:6d:37:96:b7:41:
         dc:2b:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----