Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7004d015-2c17-4923-a823-e12cd7f4aa5a.roa
File:                     7004d015-2c17-4923-a823-e12cd7f4aa5a.roa (raw, json)
Hash identifier:          QHVVFOmJYuaG1RZxqlinDA0HQCqG/h50Hj1/3rmk6kQ=
Subject key identifier:   11:E3:C0:34:6D:EA:29:E3:DA:13:91:A3:99:29:DC:84:D0:20:E5:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7348B79D262BB9DDC959217A3760F89BE10A10E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7004d015-2c17-4923-a823-e12cd7f4aa5a.roa
Signing time:             Fri 26 Sep 2025 00:13:26 +0000
ROA not before:           Fri 26 Sep 2025 00:13:26 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        168.102.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:48:b7:9d:26:2b:b9:dd:c9:59:21:7a:37:60:f8:9b:e1:0a:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:13:26 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=3efa4ff4385f93a141fec8efee82133cfdf0f42b359e602da40ef0c96b1a4b5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:4d:57:03:a3:65:51:a0:00:79:f3:0d:ba:
                    2a:2a:4b:a8:ef:2a:ad:83:d3:2d:37:3b:5f:ea:45:
                    73:3e:2b:35:2e:ed:3b:9c:89:32:e2:35:e8:50:d2:
                    bf:16:3f:82:75:9b:fb:e5:e0:19:ea:e9:38:db:fd:
                    8d:54:3b:3c:1a:dc:db:6e:9e:5d:f0:29:1c:a7:e2:
                    2c:d3:bc:b6:83:46:2a:e0:5c:22:63:c1:a7:3e:fa:
                    fb:98:55:80:14:c0:42:b1:bb:33:2b:5a:41:be:51:
                    04:ec:87:bd:db:3b:60:91:35:82:4f:cc:32:ef:8a:
                    d6:4f:e4:45:6b:34:63:7f:8c:a3:d9:aa:38:88:2e:
                    91:10:08:54:de:4c:95:63:ab:71:97:f3:83:8d:1b:
                    3e:fe:00:3d:5c:2c:94:4d:fa:de:f8:01:de:e9:c5:
                    07:c3:1c:56:32:9f:41:0b:6b:b3:a8:86:3b:fa:28:
                    9e:d6:3e:66:02:6a:9b:bf:76:7f:4c:33:60:e2:87:
                    83:30:38:6c:22:b2:0d:b0:a1:ca:7d:77:42:97:d1:
                    29:aa:3a:fb:44:7f:9f:47:04:64:4b:d1:71:65:f5:
                    67:37:d1:17:50:87:d0:11:84:d2:f6:45:35:f0:9b:
                    87:dd:96:69:04:17:8c:63:37:26:3f:a7:30:43:0c:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:C0:34:6D:EA:29:E3:DA:13:91:A3:99:29:DC:84:D0:20:E5:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7004d015-2c17-4923-a823-e12cd7f4aa5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.102.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:17:df:b4:e6:10:67:76:fa:38:7d:bb:01:65:34:be:b5:5e:
         e2:cd:78:13:aa:4f:f7:1d:0c:42:0f:ca:0b:c0:34:c6:14:de:
         cd:bc:ce:46:90:60:69:b2:30:01:33:53:48:40:a5:51:2d:79:
         2c:72:6f:aa:81:82:b8:61:f6:37:c4:77:fb:2a:8d:92:3b:ab:
         4c:e3:84:71:13:91:ec:89:91:8f:d8:ce:54:db:79:6e:bd:cf:
         05:8d:0d:ee:74:a6:0c:fa:1d:d7:e2:98:55:53:27:5f:78:7c:
         86:01:98:9b:c5:80:10:a0:0e:54:05:2b:0c:98:27:94:70:12:
         7c:c1:c7:66:6f:dd:52:b8:aa:f4:6a:88:08:1a:40:81:bc:f8:
         06:2d:60:4b:ae:c5:af:46:a6:97:48:01:b6:3d:ee:cb:cc:86:
         24:b6:be:55:18:25:d7:03:76:88:bf:40:10:da:05:e5:54:bf:
         f4:65:3e:ce:84:f1:86:b5:36:c2:3c:9c:7a:e4:22:97:f1:fe:
         b6:c4:7b:0c:43:94:78:23:f7:fa:5e:dc:66:f2:5a:21:b3:f9:
         2a:b9:a2:62:11:8c:38:6c:e9:b6:be:ab:c0:65:29:14:ed:5b:
         07:e5:70:3c:d2:e6:12:32:cd:e2:8d:6b:16:a0:ca:11:c7:fc:
         0f:1d:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----