Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa
File:                     9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa (raw, json)
Hash identifier:          kEV/PkW161HeTvG4nyL/GiYghbh5xxI4x+E7EmlA3ec=
Subject key identifier:   39:F6:75:BC:B2:92:01:DC:5B:BE:AB:2D:B3:0C:A7:01:14:1D:A6:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7028B013F793548EDCCAA9D9001F473F32788386
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa
Signing time:             Sat 11 Oct 2025 00:21:20 +0000
ROA not before:           Sat 11 Oct 2025 00:21:20 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        149.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:28:b0:13:f7:93:54:8e:dc:ca:a9:d9:00:1f:47:3f:32:78:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:21:20 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=366d01b026289341decf82f8819858ca8cf0b44675febaf7eb8a2e2c2801529e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:e9:18:2f:dd:a0:a6:67:0d:fd:d7:12:15:
                    b2:a9:e4:42:9e:19:f0:e8:1b:92:3a:12:eb:6e:fc:
                    5e:cb:c9:24:a7:ad:f6:17:8e:b1:57:ba:d5:ec:06:
                    3a:cc:55:45:d5:3b:4f:84:29:07:db:69:62:22:dc:
                    e2:39:89:fe:a2:7a:fa:bd:29:bd:99:8f:6d:c2:52:
                    a6:a0:1e:e2:a1:f1:b6:86:5e:28:56:cb:8d:f2:d4:
                    70:4f:51:11:3f:32:3c:a9:7e:25:39:fd:ce:c4:b7:
                    d2:30:43:51:77:8e:70:bc:a0:89:a6:be:16:82:fb:
                    ae:14:22:c6:5e:6b:94:f4:6b:a3:0c:10:e5:e7:b8:
                    85:dd:1c:a0:a9:6f:4c:e7:75:0d:c3:d2:c3:8a:16:
                    b5:ee:25:28:14:86:b7:9d:27:77:de:3d:2a:dc:90:
                    48:7a:63:66:da:3a:cd:2c:ca:9e:8e:da:2a:b0:30:
                    60:49:d6:59:5a:b9:8b:fe:fb:56:90:b9:01:b9:4b:
                    94:62:61:23:02:18:6f:4d:0e:2a:57:c2:e0:e3:98:
                    81:0c:25:eb:1a:e9:d6:c6:90:68:c5:8e:8c:41:bf:
                    37:f9:d8:e4:e2:4b:04:73:57:aa:3c:88:e4:af:ae:
                    3a:24:b9:2c:46:ad:04:89:51:bd:1d:5d:e1:f6:24:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F6:75:BC:B2:92:01:DC:5B:BE:AB:2D:B3:0C:A7:01:14:1D:A6:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:a4:8c:e5:3b:b5:27:34:36:35:47:9f:44:5b:8e:5c:6f:
         d6:68:75:80:86:7a:e4:82:41:58:6a:8f:1e:1e:a6:19:22:25:
         ef:1a:2a:f4:d7:27:f8:23:50:85:92:40:3f:3e:64:ed:e2:5b:
         bd:bb:d8:30:85:e1:6a:44:0e:a0:e8:f2:eb:48:73:b0:02:bf:
         1f:79:d1:88:7e:a1:ec:c5:a9:48:dc:d5:d7:cc:ad:19:ea:fe:
         77:a9:f8:cf:71:79:36:e8:0e:ea:4f:d8:37:1c:61:87:ae:81:
         8d:8f:9f:3b:91:49:b5:72:58:e6:cc:3d:3c:5f:1e:b0:48:40:
         d0:39:20:00:c8:73:54:fa:a1:5f:83:83:79:78:07:10:64:4c:
         31:96:70:a4:f0:3e:0d:ba:0c:d1:81:f6:80:2d:c8:de:69:69:
         38:ad:08:aa:de:4e:a9:f1:85:7e:7f:a6:4e:0d:6f:76:d6:d2:
         31:cb:d2:52:2f:62:bf:37:e2:37:19:52:21:f8:ee:55:90:b6:
         e7:ee:35:6b:e7:02:f7:0d:6d:ab:ed:f7:5c:a7:21:aa:53:da:
         5e:99:38:e5:36:bc:92:75:f5:e2:3d:a7:10:dd:c3:44:02:a4:
         81:e1:ed:d4:17:b7:e3:8b:c3:bc:f7:50:f3:0f:31:5e:b9:9c:
         4c:8f:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----