Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa
File:                     8b480af6-a872-4019-ac1d-12c2bcff44e8.roa (raw, json)
Hash identifier:          /wIgdV2Nh65M0CKmIUAePbil7+/Ab3WgcMPVoqpPSGQ=
Subject key identifier:   4E:E7:70:57:B3:15:0A:51:FD:FA:15:E3:96:82:76:B7:0F:0D:94:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36B740553A4C461BE4482581E062C170A3ECBD5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa
Signing time:             Fri 03 Oct 2025 00:22:57 +0000
ROA not before:           Fri 03 Oct 2025 00:22:57 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.33.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b7:40:55:3a:4c:46:1b:e4:48:25:81:e0:62:c1:70:a3:ec:bd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:22:57 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=47d2c684aa05fed5246180623e7f1ef03dc5fefe0a1632485aa3491ea31b3992, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:7b:02:34:d2:28:3f:20:33:40:ac:88:82:
                    26:80:62:81:1c:4b:ab:52:32:e8:c7:d7:74:66:8a:
                    94:0b:04:56:79:81:60:9e:4b:c9:63:31:b9:7e:7c:
                    be:3b:20:98:43:0f:21:c3:83:e0:e2:93:a4:c9:b3:
                    d1:b3:ce:b0:02:a7:48:13:40:da:63:c4:99:af:16:
                    d4:0e:ec:6d:1c:6d:5c:27:c5:32:34:3f:84:c6:d4:
                    04:da:c2:76:3f:8b:3f:d8:00:17:06:95:fd:b4:e3:
                    7c:43:ea:d7:be:0b:69:91:33:9f:34:10:da:61:ef:
                    0c:08:da:4d:9e:ed:fe:3a:40:19:94:d0:9b:d5:27:
                    a4:43:14:60:b5:69:31:81:f1:b7:c4:17:f0:3b:59:
                    0f:bb:cf:23:a9:ac:a8:5a:f7:0e:00:59:5f:d4:2b:
                    f1:52:fd:1d:b1:69:f0:c7:4c:81:54:23:16:0d:91:
                    cf:0c:e8:7f:49:97:b3:70:25:3d:96:e8:53:7f:1b:
                    b6:7e:c0:00:85:3d:21:3d:bf:87:ce:63:c1:fb:9d:
                    10:8d:09:b6:2f:9a:01:65:8e:a5:72:b8:1d:8a:16:
                    2a:e2:8b:29:18:0a:fe:2b:fd:43:a6:b3:c1:34:69:
                    17:67:df:ec:7a:1f:24:63:24:28:0a:e5:83:7e:29:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E7:70:57:B3:15:0A:51:FD:FA:15:E3:96:82:76:B7:0F:0D:94:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b480af6-a872-4019-ac1d-12c2bcff44e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.33.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:4f:a1:7c:65:d2:7a:a4:30:ad:b8:27:51:22:87:cc:0b:
         1a:a4:81:c7:5d:78:c8:75:49:7d:b2:fb:93:8e:f3:69:83:f9:
         c9:7f:96:8a:e6:65:90:c5:1c:e0:cc:6d:61:f5:cd:e8:c0:03:
         dd:a0:fc:2d:f7:8b:74:9b:f1:67:6e:e6:27:3f:6e:4a:72:25:
         ef:18:71:52:ca:78:da:00:40:72:84:9f:ca:0f:f6:40:08:69:
         76:94:5c:46:25:b2:dd:bd:38:9b:39:e6:a2:ca:8f:00:57:95:
         14:cc:a1:51:de:a1:c3:a3:e0:11:66:8d:f2:21:cb:21:52:1d:
         4f:ce:18:f4:b8:1f:f9:33:30:60:86:67:3e:6d:8d:87:5e:38:
         73:a5:b8:d9:32:50:2c:54:0c:61:f6:67:e4:e4:68:2f:71:f7:
         70:c5:a3:61:0c:56:a3:0a:94:4f:7d:a2:a0:c6:9c:3e:3b:d3:
         6a:df:8f:8e:84:a0:f9:76:cb:63:41:f0:2e:e9:84:f9:a2:31:
         c1:70:59:1a:99:a3:84:f0:b4:c1:83:2a:13:3f:7c:fb:7e:df:
         ca:11:0b:f7:33:48:34:8e:2e:b6:2d:50:07:11:42:68:fe:a2:
         bb:ee:51:aa:bc:5b:3c:c5:e3:d0:7b:41:8c:1c:5d:97:50:7a:
         03:31:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----