Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09595d-2c4a-4f31-90cf-6b40884bf660.roa
File:                     8c09595d-2c4a-4f31-90cf-6b40884bf660.roa (raw, json)
Hash identifier:          PmPFUAsPMgYNMrrI0jCu5Dt81Hf0z6Xmh6Ad11CPNaI=
Subject key identifier:   83:20:45:E9:E2:22:DD:FD:C3:82:BE:26:42:47:A9:DE:C2:3B:72:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5383C9C278661621E8ABD9420A5140C57FA526C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09595d-2c4a-4f31-90cf-6b40884bf660.roa
Signing time:             Mon 06 Oct 2025 15:21:15 +0000
ROA not before:           Mon 06 Oct 2025 15:21:15 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.128.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:c9:c2:78:66:16:21:e8:ab:d9:42:0a:51:40:c5:7f:a5:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 15:21:15 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=f2049a21434ba47a76caa0566fb1c8c2c8272ba23e4b7cfe7c7d569d409d2355, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:e8:88:d7:ef:0e:b8:0d:e7:4a:70:15:c6:
                    13:8c:dc:15:8f:45:3d:ef:c3:82:a9:32:f6:fc:d5:
                    21:d6:69:35:03:a8:17:d4:19:87:61:da:f6:28:5a:
                    26:59:12:03:b4:c4:df:e0:70:b3:a0:74:54:79:0a:
                    b0:3c:96:8a:84:8f:c5:00:55:94:73:95:93:40:88:
                    5c:97:4e:4c:6b:5b:7e:e1:f6:39:ea:3d:24:91:77:
                    f8:28:b7:5e:a6:f8:4c:16:01:d7:a0:cf:eb:70:92:
                    f6:8a:95:2d:c4:57:72:3a:e9:c1:65:3a:e4:81:59:
                    5c:fc:06:c6:89:0a:f0:47:d2:1d:d5:12:25:99:da:
                    f0:1b:d4:6b:9d:01:63:cb:f0:e7:2f:5d:6c:b5:50:
                    6a:88:a1:f1:6b:d2:9d:c2:c7:04:6d:f5:35:99:e4:
                    02:e5:ee:e1:0c:77:4b:fc:0d:e4:d4:c7:cf:d6:79:
                    d7:21:d7:1e:a6:f7:42:17:b9:d8:d5:6c:00:e8:80:
                    0d:9d:fe:e6:bc:4d:25:86:77:9a:dd:67:7b:4a:b8:
                    ba:28:bc:69:11:b4:fe:21:ee:0b:f4:4e:e7:48:d6:
                    ff:6a:cd:5f:e8:10:9f:aa:3b:82:36:65:14:64:26:
                    40:fd:d7:48:5f:e8:80:bd:7a:a5:ce:15:28:02:29:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:20:45:E9:E2:22:DD:FD:C3:82:BE:26:42:47:A9:DE:C2:3B:72:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09595d-2c4a-4f31-90cf-6b40884bf660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:c1:9d:0e:59:f0:3e:95:78:bb:42:4c:e8:18:f6:ab:c0:
         c3:be:ac:3b:59:5f:ea:36:26:ce:cf:c4:6e:2d:80:43:f0:02:
         54:12:1c:f7:72:db:4b:30:ca:95:55:43:ba:69:29:87:74:cc:
         e0:18:a3:94:7a:cb:d2:a6:78:58:72:44:d9:d1:c7:fa:0a:12:
         d7:4c:18:7f:65:1e:05:e1:77:f9:a6:d3:bc:bb:d9:c6:35:4b:
         d3:ea:51:8a:e5:d9:ba:e4:ec:5e:bd:6a:46:b0:24:39:90:07:
         ae:25:30:b7:f1:9e:01:11:90:12:1c:66:94:7b:63:09:f5:3e:
         68:bf:60:f2:16:af:09:d4:02:c6:17:92:49:d6:cc:3f:ba:26:
         4a:67:65:4a:73:e6:64:36:91:5e:07:a1:d5:85:19:a3:52:89:
         6b:df:56:e9:62:31:96:aa:c0:23:3a:70:ac:2a:65:c2:0e:58:
         d7:8d:ca:13:cb:24:0f:9e:a5:1a:36:a3:3f:dd:e1:f6:5c:c0:
         0e:09:5f:fd:17:d5:f5:ad:60:d1:5c:cc:64:eb:84:cc:52:f3:
         b1:f5:5e:99:17:1a:ce:00:4b:e0:71:ee:b6:9b:24:0d:5b:16:
         36:1d:f7:fa:aa:ea:ff:6a:be:cf:37:a5:7d:74:5d:c8:ca:b6:
         00:64:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----