Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa
File:                     97aba946-3a05-402f-9b1e-270f07bcd39f.roa (raw, json)
Hash identifier:          wOspb2HbsitYt+MC8iPyZiK5ed+aRvj0KH4rfvzm8rg=
Subject key identifier:   CC:6A:F2:7E:EE:40:8F:18:D0:51:77:C1:85:3D:4E:73:8E:CF:81:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1878069F99DDE86B96C23B662A72707CC667AC20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa
Signing time:             Sat 27 Sep 2025 00:13:10 +0000
ROA not before:           Sat 27 Sep 2025 00:13:10 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.18.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:78:06:9f:99:dd:e8:6b:96:c2:3b:66:2a:72:70:7c:c6:67:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:13:10 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=d226d96d44c61bde7e327dd4676a3e74c0011b80e98e40b4ef32d6aacf573c09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bb:57:e1:a1:b4:78:da:ca:70:e0:cd:0e:dd:
                    46:0c:42:e0:b7:47:16:9b:a2:87:3d:97:9e:a6:14:
                    61:50:ce:12:47:84:9d:14:04:7e:0c:20:b6:e5:fb:
                    35:ff:a4:53:09:6c:0c:ff:5e:3a:b4:eb:bb:95:71:
                    68:60:15:d6:f6:ba:f4:7f:e9:6c:44:9a:97:74:9f:
                    6b:e4:32:51:fc:32:9a:8f:32:b5:b9:6d:28:82:01:
                    e3:ba:d6:6b:c5:ce:ad:17:56:2f:fb:07:71:54:31:
                    78:62:04:07:f2:e5:f3:23:ca:71:03:9a:1c:33:1a:
                    42:a8:ee:94:20:4d:80:1c:28:f9:d2:37:57:41:76:
                    cc:c7:3d:d3:22:ec:72:7d:f4:c6:aa:80:d3:9d:05:
                    8d:7d:ed:cb:ce:5a:ce:ef:f0:52:84:04:7f:9b:72:
                    21:ec:44:c5:d8:db:ad:f7:55:fe:9e:1b:7d:91:3f:
                    99:14:c7:71:7f:84:92:53:77:2e:91:2b:8e:a6:2f:
                    8c:5c:5e:d9:2b:d9:e5:31:eb:50:65:b0:e7:cf:2c:
                    68:f1:04:99:26:7b:1d:4b:bf:90:ce:a3:79:4e:b6:
                    44:e2:62:3f:8e:aa:a1:fc:37:ca:4a:12:42:9a:96:
                    bb:95:e1:f0:81:d9:61:a2:55:59:d2:2d:c1:b2:15:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6A:F2:7E:EE:40:8F:18:D0:51:77:C1:85:3D:4E:73:8E:CF:81:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97aba946-3a05-402f-9b1e-270f07bcd39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.18.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:40:5b:0f:24:57:cc:6a:4f:0e:cb:7e:0b:d7:a1:8b:c1:76:
         74:21:78:6b:37:36:50:0a:fa:0f:9b:77:a5:d1:0a:16:75:da:
         4f:41:83:a1:e5:fd:5a:d0:ce:9b:5e:a7:1a:3c:1a:8b:d0:84:
         b9:86:2a:9b:de:85:a4:3e:4e:f4:1a:a2:51:c5:eb:08:c3:1a:
         7d:51:a3:be:92:8a:78:04:9c:a3:aa:52:79:bd:a4:3d:56:95:
         62:69:44:8d:29:c8:80:12:30:fb:12:21:65:6a:95:1e:f0:42:
         a7:32:99:fa:a0:bf:41:6a:08:45:2b:e2:59:bf:d4:1b:1d:b6:
         c2:e3:d3:5e:46:1f:9c:ea:cd:5d:99:64:c9:e9:78:a5:ab:fb:
         bc:7c:41:70:eb:e8:4b:16:d7:fe:3e:a7:41:f7:bb:e3:2d:8a:
         8e:c7:a3:97:90:09:ee:48:fe:0b:2a:dd:31:61:fe:1a:13:aa:
         42:0d:4f:30:aa:d0:ec:11:f1:fb:a6:b4:05:7c:24:73:97:d3:
         9d:94:e9:e2:5c:3e:2e:e4:ea:6f:36:f8:38:f3:fd:a3:1c:77:
         2b:f7:01:f3:99:37:c3:9a:b8:cb:6c:7c:2c:84:2b:28:a8:4b:
         17:7f:a8:55:0d:4c:97:18:75:c0:cc:44:14:a0:c2:17:c6:d8:
         ee:3d:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----