Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ba7ca-e89d-4d87-8eb3-23f2061ec4f1.roa
File:                     a08ba7ca-e89d-4d87-8eb3-23f2061ec4f1.roa (raw, json)
Hash identifier:          bEVKFYxmnD1uUiv4MT1csQf8vSyxxTKFIkxfEbHpLJA=
Subject key identifier:   A2:C7:81:16:C8:7E:A4:D8:4A:DA:84:9D:26:18:B4:CC:2E:33:1B:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FFBE1110AF15E4B32102C38C8FF3007B90AC29F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ba7ca-e89d-4d87-8eb3-23f2061ec4f1.roa
Signing time:             Sat 11 Oct 2025 00:21:58 +0000
ROA not before:           Sat 11 Oct 2025 00:21:58 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        16.64.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fb:e1:11:0a:f1:5e:4b:32:10:2c:38:c8:ff:30:07:b9:0a:c2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:21:58 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=97ea97fe0f1fc1d7288dd79c03b53c5c3c9db24becfec8923e581480a87bc4b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:df:b1:90:23:e6:2c:7d:ae:10:c9:73:4b:
                    28:88:2d:f0:e6:9c:4f:08:0a:6f:10:f9:e7:7c:0d:
                    10:c5:f0:83:ea:cf:8d:85:bf:9c:3f:cb:56:17:42:
                    20:f8:93:26:97:bd:93:30:7d:26:98:01:44:e0:2d:
                    73:47:ce:4c:00:66:71:6b:b7:68:d5:51:5a:2e:1e:
                    d4:08:a5:95:8e:d9:6a:58:74:8c:a7:e0:ef:8c:19:
                    1c:76:90:3e:5a:3b:a0:4c:7f:83:03:c6:5b:44:3d:
                    79:36:13:3d:13:aa:fb:5a:07:2a:e9:ab:f0:97:69:
                    74:d2:b2:73:82:2a:37:fc:95:3d:fc:26:2c:08:4a:
                    1d:21:5e:26:5c:86:9a:e3:6d:91:94:2a:ba:74:d5:
                    38:89:f3:f7:1a:ad:62:ab:79:b3:8f:71:ec:f5:36:
                    6a:e7:ed:61:5c:ef:ce:ad:bf:77:1b:8d:c6:d7:1d:
                    bb:23:1d:59:d5:9d:f0:d4:c3:50:00:89:96:2c:57:
                    ec:c0:8b:75:75:ee:a5:2f:56:a2:c2:d8:5a:e5:80:
                    fd:f0:87:ff:1a:29:d7:9d:48:96:9a:a9:60:8a:4c:
                    a5:aa:80:f6:65:99:3e:bb:45:de:28:15:45:58:94:
                    b6:ed:18:5a:ba:6c:c5:b7:55:77:95:49:f2:0a:c7:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C7:81:16:C8:7E:A4:D8:4A:DA:84:9D:26:18:B4:CC:2E:33:1B:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ba7ca-e89d-4d87-8eb3-23f2061ec4f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:07:ba:16:f0:ab:7e:34:46:0f:e5:d4:30:0d:8b:b3:43:
         40:a3:e5:7e:df:1d:6f:18:1e:86:fd:5a:fa:e8:2a:11:ea:73:
         1d:94:1d:01:ff:9e:4c:f1:0e:80:69:f7:01:01:3f:cd:cc:f5:
         5d:15:ef:f7:d9:28:24:7e:42:c5:ee:37:d1:6a:bd:b7:57:06:
         8f:9c:30:db:d7:2a:c4:9f:25:c4:45:33:3a:89:dc:8e:7c:4d:
         90:dd:8b:b4:7b:8d:49:6a:fc:9d:d3:08:20:9d:a2:e8:3b:e3:
         5b:dd:92:ec:1d:2b:4d:a1:d0:46:bd:9f:62:8a:cf:6d:71:52:
         42:79:99:2a:55:67:ce:8e:1e:cd:3d:40:29:ec:9e:ea:90:6a:
         ea:cd:4d:f4:48:a6:d1:a0:77:82:8a:4e:20:87:32:5f:f6:b0:
         d9:75:dc:f8:54:1b:23:c0:56:96:eb:d5:20:ba:4e:5a:26:88:
         4b:87:28:d0:e7:b1:37:5c:79:af:62:2c:07:7d:3b:49:36:33:
         5b:fd:10:6a:0c:ea:eb:fe:37:f6:60:7d:95:4d:03:e0:7e:bc:
         1a:c2:90:52:12:6f:47:f7:c3:51:cb:ab:d9:ab:9c:4c:f3:6b:
         c9:4d:38:9d:03:cc:5e:51:d4:e8:c1:ad:9d:a1:2d:b0:91:8b:
         ea:32:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----