Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cc25449-046b-4f96-8fd2-5490f73ce45b.roa
File:                     8cc25449-046b-4f96-8fd2-5490f73ce45b.roa (raw, json)
Hash identifier:          S+906AaLs99nfBsZqMCWxfMsv0jExKyYyEYK0tHAud4=
Subject key identifier:   6C:DD:A5:24:F5:37:FB:97:3A:25:4F:4F:BB:79:F1:5E:9B:2C:8B:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       753E244DD7183C0E13CCC933A75ACDB064F5EF0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cc25449-046b-4f96-8fd2-5490f73ce45b.roa
Signing time:             Sat 18 Oct 2025 01:00:06 +0000
ROA not before:           Sat 18 Oct 2025 01:00:06 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.254.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:24:4d:d7:18:3c:0e:13:cc:c9:33:a7:5a:cd:b0:64:f5:ef:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:00:06 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=ad30eea424194b5189af2edaeef5cce0f32b02bab66b87c36c79463d702448fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:3b:22:13:4b:6d:bc:97:51:df:8b:7f:3a:
                    e0:50:90:65:09:cf:11:b9:e3:14:e0:af:23:4a:ed:
                    10:ad:8f:5c:53:63:42:a2:70:dd:ca:74:1f:e1:14:
                    2c:77:3c:75:dc:db:3a:6f:8d:1b:7d:56:c7:35:79:
                    5e:c2:8c:b9:5c:e6:9d:24:83:8b:dc:08:97:47:69:
                    aa:83:06:3a:19:fc:ec:d9:cb:f5:e7:4d:fd:ae:03:
                    a3:26:02:c5:26:df:80:bc:95:f9:e9:1e:21:6d:ed:
                    f4:a6:02:f7:34:d2:b7:9a:d0:a2:2f:4f:b7:54:83:
                    c1:7e:74:58:dc:c8:2e:a4:1b:bf:d9:ad:ce:e0:04:
                    ab:bc:8d:de:57:2f:b5:96:54:d8:c0:49:37:91:f5:
                    6f:e4:eb:4e:64:ff:2b:90:d9:49:07:b7:a1:1f:46:
                    8b:58:1d:38:cf:31:89:d4:87:4e:e4:e0:cc:23:49:
                    0e:46:43:87:3d:5a:5b:df:d9:aa:d8:68:5f:eb:e7:
                    80:24:44:72:6f:20:62:2b:fd:2c:f4:dd:22:a3:c9:
                    01:27:e5:8f:9f:8b:88:5b:b0:d5:69:0c:a6:12:27:
                    78:71:2c:38:3e:61:d8:3d:cc:93:3c:4f:fa:60:93:
                    b2:c3:bf:a3:25:9e:1d:44:bb:40:9b:af:31:ae:c7:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:A5:24:F5:37:FB:97:3A:25:4F:4F:BB:79:F1:5E:9B:2C:8B:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cc25449-046b-4f96-8fd2-5490f73ce45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.254.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:f5:d2:9d:84:82:a4:a1:0a:53:43:0c:0a:32:ad:2a:a0:
         04:7e:4c:1e:b1:60:0b:9a:43:3d:b4:bd:e5:64:6d:01:c0:a8:
         9f:70:c3:6a:9a:d6:1c:c2:46:73:56:90:3b:60:67:3a:61:f2:
         c8:c5:eb:48:16:41:b7:70:f3:f4:ca:a2:33:ef:a5:49:c8:75:
         90:bd:be:12:e1:b8:3c:c9:10:12:5b:62:96:5e:32:5d:c1:15:
         41:d9:a7:5a:f9:b8:c8:04:b6:33:9f:93:7a:40:37:4a:13:44:
         c0:e9:c0:14:68:82:c2:21:5f:5d:b8:00:0e:b6:82:28:b3:cd:
         48:1e:fa:dc:9a:50:df:3f:5b:63:1e:8e:82:bd:7b:3b:1a:9c:
         dd:8c:35:f9:7c:d0:f6:50:eb:49:8f:30:06:3b:d4:d1:3a:47:
         9d:b2:af:1e:ff:f4:3e:02:12:0f:b3:af:29:35:dc:9f:e9:4d:
         47:73:ad:81:91:91:cc:54:7b:21:d4:d9:d2:12:0f:00:6e:b3:
         ee:e1:4a:0d:2e:97:f9:3b:1c:5a:aa:15:ca:9f:da:8f:4f:32:
         5e:80:07:ba:f9:8c:76:d2:d4:24:08:06:25:ce:99:dd:3e:88:
         1f:32:40:d2:3c:34:47:05:3f:a1:5f:a5:eb:51:8a:ff:ea:c0:
         cd:e1:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----