Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa
File:                     6201dd74-1213-4bad-b129-0b23803b936f.roa (raw, json)
Hash identifier:          TPnsPJ6SgugxLy+hWi6EPOvzF2v94iHbCSu8YhgdibQ=
Subject key identifier:   EF:ED:7A:3A:F1:F6:09:BC:AD:A1:0C:29:E8:79:2D:AF:18:52:CC:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46AE5BA6C7B0533DC8E3FE0825AF1E12DF70FF03
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa
Signing time:             Tue 07 Oct 2025 00:40:21 +0000
ROA not before:           Tue 07 Oct 2025 00:40:21 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.73.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ae:5b:a6:c7:b0:53:3d:c8:e3:fe:08:25:af:1e:12:df:70:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:40:21 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=6bb996ec1563d016a06a2a942de2a0a308275f9a936c789ac87eeab4007c39ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:d1:00:d1:63:f3:ee:be:77:7e:8f:cf:a6:
                    75:9c:ed:6d:84:84:6b:85:32:6b:ee:5c:88:46:4f:
                    a4:d4:a2:fb:d7:c3:fc:fa:e4:3a:39:b5:80:50:48:
                    ce:b4:7c:7b:8b:c0:7f:20:25:ec:cb:78:92:a7:64:
                    b9:ba:90:45:77:97:0a:ad:cd:cc:9b:f2:a4:31:73:
                    83:9c:09:43:b4:cf:a1:56:7a:14:97:25:ff:ed:81:
                    8d:87:3d:bb:ec:fa:8d:46:8f:bf:e2:9d:22:ad:2c:
                    1f:0d:d1:2c:ce:c9:5d:0f:42:9c:ef:51:9f:d1:bf:
                    e8:26:c2:28:0a:f5:8d:b9:2d:9b:5d:7f:36:cd:c3:
                    df:10:fc:d8:c3:35:e8:c8:4e:8e:70:4d:20:c6:5d:
                    6f:50:7a:49:72:06:c5:26:0f:27:d7:59:9d:bc:1e:
                    e0:ea:c6:4c:af:81:6f:74:8f:6f:ee:84:2e:3e:41:
                    21:14:1c:51:49:fe:b9:1f:81:33:31:d2:ea:03:da:
                    b7:30:24:ac:dd:8d:2a:40:d7:91:0e:c9:90:05:c9:
                    9b:76:bd:50:33:21:49:b4:6a:db:15:d2:be:7d:38:
                    f3:51:ea:40:f8:dd:93:cc:36:9c:c4:eb:e6:60:2e:
                    a1:92:1a:e3:37:b2:6d:8b:06:54:a2:b6:74:d0:2b:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:7A:3A:F1:F6:09:BC:AD:A1:0C:29:E8:79:2D:AF:18:52:CC:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6201dd74-1213-4bad-b129-0b23803b936f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:df:e0:7d:a3:c6:23:50:99:36:8c:90:15:ca:99:26:84:
         0a:7f:09:65:d7:13:70:08:6a:4f:d4:b8:5d:3c:72:4c:12:b0:
         77:a8:4e:b7:64:f8:eb:5e:6c:09:8b:73:75:a5:5a:de:e6:ee:
         43:53:3b:e7:ac:18:a1:7d:fb:82:5c:69:92:90:10:d1:2d:1a:
         c6:e8:84:56:53:f6:e2:53:25:c9:85:c6:72:1e:78:03:e7:44:
         ad:25:14:77:7f:45:94:8e:06:02:2c:30:bb:da:36:fb:31:04:
         8f:79:c8:25:db:3a:5a:48:14:5f:31:c4:9b:68:13:f2:ac:d0:
         ad:ac:29:3f:a9:e0:55:5c:1d:f7:bc:39:8d:19:ba:f2:e7:24:
         5c:17:b9:78:b0:e9:27:22:32:84:1d:79:b6:55:cc:5b:98:92:
         2d:f3:e6:05:b3:21:a0:51:4d:df:0a:75:6a:d3:46:f6:85:f8:
         6a:9c:5b:67:7b:93:35:72:83:f6:2b:84:29:d7:64:9d:f1:54:
         cb:0c:4f:08:38:e9:06:7d:89:bb:bb:bc:f1:a2:4e:e9:69:ee:
         62:5d:b3:f1:ff:09:0c:c9:1f:52:05:dd:e0:07:c2:5f:7c:3b:
         47:ba:0c:11:21:8d:b2:97:64:98:40:fa:e8:74:49:b5:a7:16:
         43:e1:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----