Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940e6819-f33a-487b-a1bc-7e71b4c73025.roa
File:                     940e6819-f33a-487b-a1bc-7e71b4c73025.roa (raw, json)
Hash identifier:          qHv3HJ2WMhVziajHhU1/Et3SJBORUFU/pTf9+dMvFoE=
Subject key identifier:   B6:79:FB:0F:8F:96:67:6B:1C:6A:F1:B7:ED:38:C6:21:83:59:55:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EAFF46FDA3B998F801C648A1B5D976D9BF04D50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940e6819-f33a-487b-a1bc-7e71b4c73025.roa
Signing time:             Fri 17 Oct 2025 20:10:08 +0000
ROA not before:           Fri 17 Oct 2025 20:10:08 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.178.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:af:f4:6f:da:3b:99:8f:80:1c:64:8a:1b:5d:97:6d:9b:f0:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:10:08 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=ece5731ba65e31e01794ea83c1f88dc6e8b2c41e530a5fb007932fb39339c16e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:53:ed:ce:71:f9:ef:ba:7a:e2:65:10:a9:
                    40:be:1d:b0:a6:a4:64:c1:b0:fb:1d:a9:46:9c:91:
                    32:c0:52:65:98:f3:4e:2a:52:98:65:17:0b:78:ce:
                    79:04:6c:34:5f:06:42:55:60:06:d1:09:df:11:d6:
                    df:65:4c:3a:5f:92:97:a1:ad:78:35:c3:7d:90:e0:
                    61:85:70:02:cf:a7:71:53:88:8c:f1:db:ac:87:ef:
                    d2:84:bf:07:23:f5:9d:ab:20:39:18:34:8e:bb:aa:
                    c6:07:c8:4d:d4:67:46:86:da:0b:49:ff:57:b3:ed:
                    33:5b:3b:4e:d1:d6:43:b4:8c:09:9a:cc:f9:a0:03:
                    a0:31:a3:87:40:86:a0:5f:c9:39:48:66:e4:b5:70:
                    a4:bd:ec:8f:0e:9b:56:10:48:30:70:88:2b:dc:d3:
                    94:d1:8f:3d:ed:bd:4a:ae:d2:7d:af:52:1b:bf:35:
                    8b:3b:46:0d:d9:02:5b:b1:13:d5:4d:00:2a:d3:04:
                    27:88:b9:d1:32:c6:a3:15:39:6b:ef:37:38:0e:31:
                    1c:06:31:d0:66:d8:6d:94:35:6f:02:e2:d9:9e:a4:
                    1a:b2:ec:b0:3d:3f:82:4f:ef:73:bb:8f:a1:d5:ff:
                    ab:8a:be:90:83:ae:6e:e4:84:4c:37:85:7f:67:bf:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:FB:0F:8F:96:67:6B:1C:6A:F1:B7:ED:38:C6:21:83:59:55:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940e6819-f33a-487b-a1bc-7e71b4c73025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:5c:6b:c6:6c:08:5e:f7:aa:e7:12:74:d1:5a:88:8f:60:
         f1:16:2b:58:63:40:a4:3e:b3:da:91:9d:bd:dc:db:97:db:20:
         67:c0:3b:93:28:47:4a:23:3b:93:dc:4c:c9:e8:3f:26:f5:2a:
         6a:ce:b1:21:ea:1b:f7:f8:e1:06:75:48:39:a5:1d:c6:e0:4b:
         0c:71:94:c0:eb:34:b7:c2:ca:0b:77:36:e0:3f:75:18:94:0a:
         bd:03:19:5e:d7:28:0e:e6:e9:ac:d6:b6:89:31:0b:51:cf:37:
         79:71:94:eb:35:1d:21:c5:33:04:77:7e:fc:82:bf:b8:9b:8f:
         dd:2f:cb:02:d1:f6:18:f5:35:16:62:f2:94:a4:0f:40:18:bf:
         d5:02:10:9c:4a:87:55:5f:26:8f:a4:d3:b6:e5:78:f2:39:bf:
         64:c1:a4:8d:09:12:bb:48:30:e1:b5:ac:dc:a2:4f:f4:1e:ed:
         59:5d:69:1c:55:c0:65:6d:ad:e4:6d:97:97:1e:ee:cd:54:27:
         d9:1a:f7:57:fc:25:67:d6:00:58:46:f5:00:37:33:cb:62:1c:
         6e:73:c8:94:30:ba:49:1c:26:34:c4:b8:f8:d0:0d:5b:cd:79:
         9c:ec:1c:c9:cc:88:fb:97:21:74:3a:6f:24:98:03:24:81:5d:
         cb:41:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----