Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa
File:                     98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa (raw, json)
Hash identifier:          /Ir9o+We8Hf5uYw4LP+XeIfuaaeCrLxVXVqkFJiZ9zo=
Subject key identifier:   FE:2A:A6:C5:89:BB:4B:75:B5:F8:0A:99:1E:0F:D8:D9:3E:BF:9E:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44A12F6EBD507109E4194C215E01B977DAD21558
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa
Signing time:             Fri 03 Oct 2025 00:39:20 +0000
ROA not before:           Fri 03 Oct 2025 00:39:20 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a1:2f:6e:bd:50:71:09:e4:19:4c:21:5e:01:b9:77:da:d2:15:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:39:20 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=d37605fe0debdba778bf5414e932c3cebfa898fe6e576ac5bc7018ced96278dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:3b:fc:95:15:76:14:98:db:6d:08:53:3a:
                    ee:78:b9:4f:dc:5c:5d:d4:a9:f7:4b:11:a2:d3:e2:
                    06:f0:af:22:e8:19:c2:a2:bf:e2:82:69:cc:14:29:
                    b4:40:90:d9:3d:08:68:7c:8d:22:bb:fa:53:7b:ed:
                    17:25:95:55:db:d7:1f:ef:17:c2:33:6b:2c:2f:7f:
                    07:13:95:a6:fd:8c:3d:16:18:76:08:9a:3e:20:69:
                    1d:f7:d4:6b:d0:f0:65:f6:70:21:14:ef:f8:0d:6d:
                    18:0a:83:c3:eb:48:34:5d:c1:ba:f0:9c:b9:cf:43:
                    d9:e5:ca:d4:cd:92:41:e1:0c:19:24:a5:c8:2b:96:
                    f4:50:cc:b7:51:6d:ad:0b:f8:03:9c:ed:fb:e9:58:
                    7a:60:98:8d:21:ca:72:77:d4:67:0f:5d:3e:e6:6e:
                    fb:bc:f8:12:78:16:5b:cd:7d:57:2a:d5:aa:7d:de:
                    a8:66:27:68:a5:f9:5d:a1:2e:8c:f7:b5:ee:86:fc:
                    07:48:f9:b0:7d:bd:6b:02:81:15:c9:f3:f6:45:4e:
                    85:46:40:b4:dc:81:8f:ca:e9:54:7c:c5:a3:b5:5f:
                    b5:84:fa:0e:b3:76:cf:c5:4d:f1:fc:d0:cf:71:d0:
                    c6:2f:25:cf:a6:7a:72:52:85:18:46:7a:7f:f0:57:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:A6:C5:89:BB:4B:75:B5:F8:0A:99:1E:0F:D8:D9:3E:BF:9E:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:75:2f:d4:dc:25:dd:02:69:cb:42:61:5d:ca:4f:cd:a4:a3:
         2a:b7:29:e7:90:22:a9:bf:9c:1d:37:d6:81:87:80:21:15:73:
         77:21:df:7b:fb:a3:85:63:21:32:f2:2e:f2:92:75:a5:e4:29:
         1c:ee:53:6b:62:39:2b:8e:24:1c:47:d6:2a:c5:68:05:d0:2b:
         a1:ca:6d:60:00:5b:61:9e:a8:2e:9e:bf:a6:22:bc:ce:0a:05:
         ff:c1:e7:86:e4:a5:c3:af:4e:29:a8:38:02:b1:8c:f3:13:30:
         db:e3:2f:f6:1f:cc:73:91:ff:2a:6c:ff:45:79:7a:23:36:da:
         9f:35:9e:6a:b3:a4:20:e2:ca:44:0c:7f:2a:96:5a:24:fa:13:
         17:fd:ff:4f:c0:d4:dd:d2:a2:f3:f3:d3:ec:75:13:d1:27:fa:
         87:cb:9c:c0:05:95:8d:d5:78:d6:e4:0b:46:40:9f:04:0c:1b:
         93:c1:ae:0b:d9:99:ac:f8:d2:7b:ed:d8:65:e4:0a:e9:aa:3d:
         8b:be:74:ab:db:10:36:84:73:25:1c:43:b0:f8:b6:54:5c:9f:
         de:d4:dc:75:95:dc:7e:da:1c:68:70:ec:eb:c9:e4:9c:9c:98:
         fb:ef:4e:c1:72:58:82:08:24:d4:0a:00:af:da:3d:3c:f0:5b:
         ce:80:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----