Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa
File:                     a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa (raw, json)
Hash identifier:          idekNtm+kTXNHubwnoYlRwQ56eNZo+u1QTf9OuHAC0c=
Subject key identifier:   D3:0A:BE:B1:3D:C7:35:2A:45:C9:61:FB:85:6F:9C:89:8B:62:27:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       14855B477EA098E5B9C73A6F7E68828A3B88929E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa
Signing time:             Fri 17 Oct 2025 00:51:11 +0000
ROA not before:           Fri 17 Oct 2025 00:51:11 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:85:5b:47:7e:a0:98:e5:b9:c7:3a:6f:7e:68:82:8a:3b:88:92:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:51:11 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=4b9c0e3d134c2b61fb69d2f23652b971cb8b9d101536fdb9f4a20df8fd2ae8ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:0f:cd:73:1a:83:4c:31:d9:c6:31:ff:0d:
                    46:e9:fd:b6:9f:7b:e2:15:d3:88:2f:ff:81:b6:6f:
                    6f:5c:60:3e:0a:f0:69:91:e5:71:86:f5:45:93:92:
                    79:e5:b8:65:a8:30:3d:a8:93:e2:67:9f:49:e3:e4:
                    9b:df:12:67:52:eb:e1:41:00:e3:41:6d:f8:6c:1d:
                    41:e4:61:a9:6e:89:fd:a6:d1:81:fd:6c:09:54:3c:
                    71:55:b6:99:fb:41:de:b7:ec:14:e4:3e:20:36:38:
                    c7:a3:2a:ca:74:82:97:83:08:e3:70:9d:a9:33:65:
                    c1:0a:c9:19:e4:9a:87:db:fc:b1:66:5c:73:6e:2d:
                    90:95:36:2b:2b:0f:84:30:1d:e7:06:c8:c8:be:67:
                    fb:c5:19:53:df:32:b5:c7:bb:07:30:f5:8d:3c:d0:
                    4a:96:e4:72:cf:46:47:49:9e:98:a7:6e:07:10:b5:
                    dd:f0:f1:f6:6a:83:82:56:11:25:20:25:23:7f:f4:
                    93:a3:77:c1:d9:f8:de:ad:3c:cf:98:86:ea:2c:4a:
                    cd:67:e8:cf:58:6a:ff:81:e9:a6:6c:45:f9:80:92:
                    e0:dd:da:c6:c5:7d:b9:ce:cd:42:0f:ae:90:08:df:
                    dd:87:88:39:d2:a2:58:7e:6d:23:ad:1e:91:b3:43:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:BE:B1:3D:C7:35:2A:45:C9:61:FB:85:6F:9C:89:8B:62:27:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f8c9e3-3911-40c8-b8ba-66bc4a4b8aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:6b:94:ad:5c:e5:d7:10:de:37:c2:88:15:c4:1a:8d:c8:
         f0:66:ca:2b:e0:f0:7a:7b:bc:18:56:e6:0d:1b:bc:8e:63:5a:
         f2:7a:36:3f:e4:d2:de:55:a6:2f:78:b9:b2:1c:65:1b:52:07:
         63:6b:d5:aa:a6:2f:9c:7f:72:85:58:1a:d4:9e:55:bb:fc:24:
         72:12:c0:69:4f:09:19:3d:ba:a8:41:ed:87:29:8e:a2:49:a4:
         e4:25:37:b2:31:00:80:d0:3d:31:23:42:74:35:92:86:b5:2b:
         77:6a:40:6a:ae:b7:0e:42:96:23:1c:d8:2b:36:14:31:1a:fb:
         68:81:e3:ff:e4:b7:e4:90:9c:cd:72:01:bb:02:ed:35:0b:96:
         b8:af:58:e6:7f:24:f2:65:86:00:6c:2b:86:06:43:2a:d1:8c:
         7f:eb:af:0c:f0:3d:3b:7f:8c:66:b9:62:94:af:d8:a2:a2:3f:
         82:12:6e:3b:e7:54:35:b4:2a:16:19:8a:1c:fb:74:39:dc:19:
         0f:bd:38:85:c7:25:42:0b:57:6d:16:3d:a8:3a:41:c4:c3:57:
         9c:49:46:9e:ae:7e:fa:a3:d3:91:c5:17:26:3b:09:50:9a:d4:
         d8:2f:c2:9d:7d:a2:5c:63:5e:d1:f1:13:b4:6c:ff:a7:b6:4d:
         fd:71:ee:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----