Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
File:                     82607ad4-44a2-4b62-972f-23b1781a475d.roa (raw, json)
Hash identifier:          JOXLArUUoVxLV0azzIYd7aJc60lKaZ0HilKaLLjI5Ao=
Subject key identifier:   9C:5A:93:B6:41:4C:0C:08:8D:3F:70:99:50:3D:49:47:D5:59:C0:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       037028D7629FD89D250801D669877D5934181053
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa
Signing time:             Wed 08 Oct 2025 00:01:22 +0000
ROA not before:           Wed 08 Oct 2025 00:01:22 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:28:d7:62:9f:d8:9d:25:08:01:d6:69:87:7d:59:34:18:10:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:01:22 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=345e3f7dae9145988415a927d58e9986f0fd6f3c10742ba6f1817f9ee7f39af5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:8b:d6:9f:39:32:c6:d6:68:bc:ae:1c:4c:
                    1e:9a:f9:06:35:93:47:8d:30:1f:86:18:0f:dc:d7:
                    b7:e7:51:27:65:9d:40:db:62:f5:c0:4a:3b:c7:e2:
                    d3:18:13:5a:da:37:93:74:63:41:6e:2c:f0:fb:fe:
                    3f:68:2d:5d:4f:3b:21:2f:c9:4e:ca:bf:67:8d:24:
                    63:b8:b6:82:80:4c:9c:49:1f:d0:99:9f:5c:f8:75:
                    37:fd:83:ff:38:9e:2f:1f:4b:5a:e9:ea:17:b3:1c:
                    a9:1e:33:f1:50:0f:7b:63:ee:d9:70:26:2b:b5:94:
                    f5:28:90:c7:2a:a2:13:96:36:30:15:63:44:a1:2b:
                    eb:ab:40:b2:a4:56:be:de:77:57:d8:cf:f7:9b:9b:
                    f0:6c:a2:96:67:38:25:df:5a:8c:13:f3:19:a6:ce:
                    28:eb:62:f9:81:2f:b7:66:f2:af:ab:a8:61:ec:78:
                    91:dd:45:7d:ff:39:8c:f2:7c:29:a4:43:5b:ac:44:
                    29:9e:79:8a:ef:1c:11:a5:a6:44:2a:6f:34:93:4f:
                    de:2a:c0:22:44:f5:bb:eb:03:91:3d:3e:d1:b6:87:
                    9b:25:25:50:af:e9:aa:25:8f:e4:9e:81:56:cc:57:
                    39:d3:89:7e:d5:16:ba:69:35:df:62:8d:84:4c:91:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:93:B6:41:4C:0C:08:8D:3F:70:99:50:3D:49:47:D5:59:C0:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82607ad4-44a2-4b62-972f-23b1781a475d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:45:05:4e:87:13:00:52:0e:5b:e9:16:29:62:1f:f7:6a:
         4c:5c:6d:0b:e6:cc:d3:c5:c2:9a:bd:6d:8d:3b:a3:e4:97:2e:
         15:3a:19:94:1e:40:ca:c6:90:14:a5:98:87:84:2b:71:d9:00:
         f8:fa:bf:0d:9e:5e:b3:d5:d9:27:90:84:fa:50:8e:e6:b6:64:
         f9:ba:ac:ec:e0:2d:34:56:85:a7:66:2e:08:af:67:69:fb:fb:
         b3:a8:55:08:07:16:26:97:f6:48:80:14:b4:20:e4:4e:87:7d:
         53:24:16:9c:3e:52:31:df:ff:ec:ce:da:8f:13:6f:45:83:95:
         fc:97:1c:05:51:07:a0:ff:7f:95:88:53:d1:dd:7c:1e:00:b2:
         f5:59:de:df:4f:bc:9f:fb:e1:6c:00:1f:f4:2b:7d:30:a7:76:
         70:02:dd:e7:87:ce:53:f5:f7:5b:c5:e9:19:f5:82:b8:d7:d8:
         ad:18:2e:69:62:9d:15:08:c1:1f:6d:3e:c7:27:94:c8:e2:c2:
         4f:b6:67:01:3d:cb:bf:7b:d2:58:9e:7e:76:08:48:63:84:75:
         f1:9f:6b:90:bb:df:87:ee:33:73:ea:fe:d9:8b:b9:e1:f6:34:
         87:76:07:6f:38:72:47:15:9b:a3:eb:ef:49:6f:75:e9:ea:36:
         85:43:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----