Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ee895f0-cf2e-4388-8263-4381accc8378.roa
File:                     6ee895f0-cf2e-4388-8263-4381accc8378.roa (raw, json)
Hash identifier:          AC008Sk1uOgucfOcey4GNkoCmhmghwDGTtHb8lySR4Y=
Subject key identifier:   B3:0F:86:F8:95:02:57:8A:18:F9:5E:FE:A2:E9:2A:6F:83:6A:8C:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ED84A6685E6C39F1B810A62E72B4CDE31B40417
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ee895f0-cf2e-4388-8263-4381accc8378.roa
Signing time:             Thu 02 Oct 2025 20:22:00 +0000
ROA not before:           Thu 02 Oct 2025 20:22:00 +0000
ROA not after:            Thu 06 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        89.58.104.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d8:4a:66:85:e6:c3:9f:1b:81:0a:62:e7:2b:4c:de:31:b4:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  2 20:22:00 2025 GMT
            Not After : Nov  6 23:59:59 2025 GMT
        Subject: serialNumber=3d238c8edbf403be1ac2da2cf6a7cc1d35e31b37c89f84890c729d5970511641, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:1d:c2:14:58:81:6c:78:58:d3:0c:96:f8:
                    2e:d1:b7:c8:91:90:34:0c:94:de:93:51:bc:da:ee:
                    a1:14:08:f2:48:3a:8c:e8:18:58:fb:f3:f5:c8:40:
                    05:1e:5c:43:5b:77:e8:fb:b6:af:83:0b:89:27:7c:
                    c1:3b:2c:1f:a5:25:86:01:59:13:58:4d:c6:b5:db:
                    d4:b4:da:01:85:bc:0d:ce:d0:62:57:ae:94:20:58:
                    ba:d1:10:1f:17:23:30:8c:30:81:4a:a8:50:9e:ea:
                    7a:7d:cc:0a:6f:84:ee:6f:4f:eb:c4:96:1d:09:ee:
                    4e:ad:cd:c0:f8:0a:a0:dd:d6:02:57:68:6f:d0:48:
                    ba:41:77:8e:8a:81:48:61:b1:ba:41:71:ab:05:39:
                    28:ea:ff:4b:ff:bb:21:78:d7:73:34:53:dc:5c:bf:
                    25:a1:f8:09:ef:25:f6:6f:6e:c1:0d:e0:8a:cf:8a:
                    3d:38:dc:ad:be:cc:36:0e:a2:28:2e:0d:28:f3:a5:
                    27:d7:a9:36:b4:6b:94:0d:63:19:79:aa:e0:96:e8:
                    db:53:69:b6:5e:27:61:d8:16:d5:0d:a7:3e:60:0f:
                    e8:bd:91:a9:9d:55:02:ce:bc:c0:3d:b7:47:9e:38:
                    bf:3e:ea:90:43:df:ae:46:a7:7e:27:d9:67:85:5a:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:86:F8:95:02:57:8A:18:F9:5E:FE:A2:E9:2A:6F:83:6A:8C:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ee895f0-cf2e-4388-8263-4381accc8378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.58.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:f2:18:70:77:63:a4:96:0e:e4:aa:8b:b6:fb:19:3b:3d:
         1e:9c:39:84:cd:eb:e0:e4:ec:c1:5d:3b:cc:de:73:0d:7c:d8:
         ad:ae:bb:d1:bf:67:bc:f3:0a:1b:0a:8f:9b:8a:b7:7b:f3:e3:
         f0:06:1c:cd:0e:c4:4c:12:2c:fd:58:43:02:dd:70:bc:4e:e2:
         70:b8:b2:11:3a:88:69:9a:66:29:db:5b:9a:26:9c:ac:0e:37:
         42:49:c2:a7:94:e2:f8:92:c4:a6:f7:7b:e6:ff:32:3c:6d:77:
         16:9c:c8:d5:76:9e:81:4e:c3:c7:95:86:20:d8:04:dc:7f:56:
         9c:11:2e:51:e9:30:34:b3:4e:c6:fb:02:73:a5:c2:3b:72:21:
         2a:77:b1:1e:0f:5b:2f:1b:ea:66:59:8b:b9:0e:12:77:6d:c1:
         ab:1d:18:fa:76:02:a3:12:f6:63:e7:65:a6:2d:b7:b2:f2:af:
         72:ff:e3:fa:57:fd:c4:ae:74:a1:a5:b3:2c:da:49:cd:fd:d3:
         15:f8:66:2b:2a:1d:c0:0f:76:a4:1f:ab:a7:94:b4:36:21:03:
         4c:91:b8:53:2c:5f:44:50:fa:c8:5f:15:19:4d:13:6f:04:b0:
         4c:e5:a7:b0:03:81:c8:74:10:6a:58:f0:c0:f3:58:96:59:14:
         de:40:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----