Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a7362-e583-47b6-a477-44ef54138188.roa
File:                     672a7362-e583-47b6-a477-44ef54138188.roa (raw, json)
Hash identifier:          TKZaIxqFbaREdjMxHP0QqFchKWwdx5+JwgKC7YHOHZA=
Subject key identifier:   94:0E:31:07:1F:3C:2E:58:C8:63:06:1A:4C:EE:F6:74:1E:43:43:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F011540F44F463978A11D20410AE60DDBB81B42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a7362-e583-47b6-a477-44ef54138188.roa
Signing time:             Sat 27 Sep 2025 00:13:13 +0000
ROA not before:           Sat 27 Sep 2025 00:13:13 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.26.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:15:40:f4:4f:46:39:78:a1:1d:20:41:0a:e6:0d:db:b8:1b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:13:13 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=bac56b89c3ec27ea7b0f2daf9223c29d40b87805dac576bb2e33787b47f5b02c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:ff:e2:de:c6:fb:3c:16:d3:8f:7d:c0:5c:
                    52:d0:44:8b:d2:f6:e2:18:3b:2d:d7:c1:de:99:54:
                    7d:22:2a:b0:72:9b:bc:a5:59:48:4c:a1:15:aa:bd:
                    c8:0d:63:5f:52:78:90:50:ae:8b:52:5c:7a:9d:9e:
                    e4:4a:a6:1a:4c:af:f6:c6:1d:33:38:fb:04:9c:8f:
                    b7:a7:20:4b:02:18:b2:a4:df:84:f8:e9:37:1e:cd:
                    18:95:32:47:25:af:ef:48:b2:aa:8f:2b:65:6e:55:
                    20:b9:ff:c9:ca:51:8b:e0:12:40:86:fc:ee:d8:91:
                    cc:fa:83:3c:a4:ec:cc:46:9f:fe:7f:ca:f5:5c:6a:
                    5e:55:99:f0:72:b1:c8:19:f1:80:c6:cf:6c:2e:ae:
                    67:6a:ad:96:93:87:98:1a:95:75:7f:61:d2:e0:61:
                    d3:ad:6c:84:72:f7:d0:87:60:cd:ce:b5:db:29:ed:
                    16:ea:b1:21:63:49:db:8a:2f:25:99:fc:94:6f:db:
                    91:56:8c:56:26:92:a2:30:6b:0b:7f:36:90:46:4c:
                    e8:0e:e9:0d:7b:99:95:49:df:f3:7c:42:0a:45:ba:
                    83:c2:53:e5:f2:26:10:9a:3f:9d:25:c6:ee:cd:fc:
                    e7:88:9a:86:03:53:13:53:29:db:ef:7b:37:ac:e9:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:31:07:1F:3C:2E:58:C8:63:06:1A:4C:EE:F6:74:1E:43:43:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/672a7362-e583-47b6-a477-44ef54138188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.26.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c1:91:14:5f:ae:18:31:4a:76:a1:78:2b:ff:c4:bd:81:5f:14:
         d7:a1:4b:9b:ed:28:02:67:30:53:a6:05:21:da:e0:2e:3f:43:
         6b:0d:14:fe:96:59:0e:20:63:17:21:47:40:d0:da:02:73:45:
         fb:b6:08:33:72:6a:c2:b8:7c:3b:28:86:92:2c:ab:b1:d9:7d:
         7d:d8:da:d4:32:82:58:8f:1b:a0:c7:45:2b:b8:b8:05:87:c3:
         10:41:a9:75:20:81:3f:ae:56:4a:e0:94:af:0f:1e:34:9d:c9:
         4b:49:ab:bc:ab:1d:2c:2c:fd:03:08:40:1c:cd:1a:b4:cc:1c:
         e4:56:fd:a7:f1:43:09:29:a8:01:92:54:45:84:6b:17:61:74:
         b6:6f:aa:ee:6f:45:31:bc:d4:6b:2a:68:5e:39:a3:12:81:a6:
         bf:9f:2a:33:1d:b0:be:9e:e6:18:84:e2:80:82:07:2e:cc:aa:
         55:c2:98:f3:6b:2e:66:81:19:69:4a:0e:ca:1b:7d:ba:bd:22:
         33:99:1e:48:3f:62:23:29:e5:0c:01:be:7e:7e:34:67:2c:d8:
         10:8a:ca:fb:7d:94:36:b6:aa:a7:e2:fd:7c:fb:0a:45:20:63:
         9b:27:a8:f5:ff:db:a5:e7:ab:d9:c9:03:58:9c:63:1a:7f:a6:
         a0:da:5d:f9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDwEVQPRPRjl4oR0gQQrmDdu4G0IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI3MDAxMzEzWhcNMjUxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYWM1NmI4OWMzZWMyN2VhN2IwZjJkYWY5MjIzYzI5ZDQw
Yjg3ODA1ZGFjNTc2YmIyZTMzNzg3YjQ3ZjViMDJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwPv/i3sb7PBbTj33AXFLQRIvS9uIYOy3Xwd6ZVH0iKrBy
m7ylWUhMoRWqvcgNY19SeJBQrotSXHqdnuRKphpMr/bGHTM4+wScj7enIEsCGLKk
34T46TcezRiVMkclr+9IsqqPK2VuVSC5/8nKUYvgEkCG/O7Ykcz6gzyk7MxGn/5/
yvVcal5VmfByscgZ8YDGz2wurmdqrZaTh5galXV/YdLgYdOtbIRy99CHYM3Otdsp
7RbqsSFjSduKLyWZ/JRv25FWjFYmkqIwawt/NpBGTOgO6Q17mZVJ3/N8QgpFuoPC
U+XyJhCaP50lxu7N/OeImoYDUxNTKdvvezes6USvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUlA4xBx88LljIYwYaTO72dB5DQ0IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY3MmE3MzYyLWU1ODMtNDdiNi1hNDc3LTQ0ZWY1NDEzODE4OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEjGjANBgkqhkiG9w0BAQsFAAOCAQEAwZEUX64YMUp2oXgr/8S9gV8U16FL
m+0oAmcwU6YFIdrgLj9Daw0U/pZZDiBjFyFHQNDaAnNF+7YIM3Jqwrh8OyiGkiyr
sdl9fdja1DKCWI8boMdFK7i4BYfDEEGpdSCBP65WSuCUrw8eNJ3JS0mrvKsdLCz9
AwhAHM0atMwc5Fb9p/FDCSmoAZJURYRrF2F0tm+q7m9FMbzUaypoXjmjEoGmv58q
Mx2wvp7mGITigIIHLsyqVcKY82suZoEZaUoOyht9ur0iM5keSD9iIynlDAG+fn40
ZyzYEIrK+32UNraqp+L9fPsKRSBjmyeo9f/bpeer2ckDWJxjGn+moNpd+Q==
-----END CERTIFICATE-----