Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e6ffd91-14c9-413a-8bde-040c4d285474.roa
File:                     5e6ffd91-14c9-413a-8bde-040c4d285474.roa (raw, json)
Hash identifier:          0KjfdUJnqOYXLsFG3RMJwODLXmko08F2wZsYG6lqy/k=
Subject key identifier:   84:17:FB:67:F1:49:4B:45:24:95:81:25:72:22:F8:88:EC:05:03:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B8A036A077F18C7A8DABA37E49B23B978215E07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e6ffd91-14c9-413a-8bde-040c4d285474.roa
Signing time:             Tue 14 Oct 2025 20:40:19 +0000
ROA not before:           Tue 14 Oct 2025 20:40:19 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8a:03:6a:07:7f:18:c7:a8:da:ba:37:e4:9b:23:b9:78:21:5e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 20:40:19 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=cfe682c00bbb7fd355395a060b3fdf354fee9c6d7248d4ab0dd206232012b488, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:08:4f:0b:17:6d:d6:be:85:98:bb:e7:b8:
                    be:b4:e1:4a:d0:d9:68:4e:01:cb:55:11:3b:c0:8e:
                    d9:8d:28:b7:60:c5:91:b9:e9:8b:94:60:9e:7b:0e:
                    1c:98:a2:79:a9:6e:ef:5e:d2:58:ec:a5:09:bd:66:
                    c6:ff:26:09:53:61:ff:bf:c1:4e:e7:df:26:89:83:
                    36:61:14:d5:c4:c1:25:d8:04:88:ea:ce:29:8c:52:
                    5b:e9:05:f3:d0:f5:6e:a1:d6:87:32:63:71:03:b6:
                    84:7f:06:51:4e:41:db:fc:0f:db:2e:43:87:75:ac:
                    a2:7e:b9:e9:53:24:35:49:e3:04:b3:3f:0c:e4:1e:
                    e8:b2:a2:1f:45:68:e6:c0:04:2d:ef:f3:42:2a:40:
                    dc:9d:ca:a6:bb:cf:4f:71:c1:70:69:11:88:df:0a:
                    33:5d:23:b1:8e:eb:70:76:99:19:ee:96:43:f0:bf:
                    fa:f4:10:3d:89:90:dc:92:18:fc:1b:f9:6f:72:4c:
                    7a:83:0e:41:a7:fd:31:41:5d:84:aa:a4:3b:03:2a:
                    8d:0c:81:c1:4b:a1:8d:7c:a6:43:ee:14:95:89:a8:
                    c2:99:74:c6:2a:cd:a2:5f:04:57:13:69:c4:1e:6d:
                    a9:d1:05:a0:bd:9d:0f:24:78:16:6c:9f:95:fe:6e:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:17:FB:67:F1:49:4B:45:24:95:81:25:72:22:F8:88:EC:05:03:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e6ffd91-14c9-413a-8bde-040c4d285474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:12:f2:55:77:a9:af:db:3c:39:fc:01:3b:a4:25:03:f0:61:
         64:ed:b5:40:48:63:60:ec:c5:9f:ea:cb:af:a6:1b:89:50:e0:
         51:43:86:88:f2:9a:94:a3:94:bd:88:73:23:b5:63:90:e4:a5:
         8d:31:e8:1c:68:c3:c6:67:bc:fb:3d:49:04:3e:33:c3:5f:fa:
         40:6d:5c:c9:f9:4c:ad:2c:c7:94:99:31:93:33:07:84:f4:ab:
         c6:94:49:ff:c4:dc:d0:d2:bf:c1:6b:fa:63:b6:23:d1:5f:b3:
         e0:6f:47:d6:ff:e5:21:08:47:44:be:93:f9:df:59:d4:16:ec:
         71:ea:46:28:00:a3:d5:b7:36:67:8a:f0:27:08:63:99:a7:41:
         6a:ec:77:c5:79:1a:ce:bc:8e:b9:93:43:4f:c6:24:20:ee:76:
         85:93:25:6b:38:ae:5a:ad:9c:b6:66:20:1f:42:2f:9b:71:ba:
         ca:6a:11:b2:60:f9:3b:44:20:fa:63:7c:5e:18:fe:ba:15:49:
         b2:3c:f4:63:7f:7f:38:bf:a2:92:5f:70:45:f3:04:47:cd:04:
         6c:36:24:70:9f:a1:48:28:44:7f:e3:df:bc:9d:e5:b8:da:71:
         29:66:9f:92:a0:5c:d4:61:94:e1:62:05:28:56:23:55:9c:85:
         08:2b:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----