Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a852e5-a06e-42cf-9d23-d674d4cd3fdf.roa
File:                     a5a852e5-a06e-42cf-9d23-d674d4cd3fdf.roa (raw, json)
Hash identifier:          wBftuwJXrzNYVKcgqt1KI/EWnSWYrXns7CcoCZKn4X0=
Subject key identifier:   9C:3C:DA:B9:10:08:86:8B:E7:8C:83:E7:01:E9:F8:35:43:A5:6C:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       657AD939F2987A190C8F9795E8282228285E943B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a852e5-a06e-42cf-9d23-d674d4cd3fdf.roa
Signing time:             Sat 18 Oct 2025 04:30:17 +0000
ROA not before:           Sat 18 Oct 2025 04:30:17 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7a:d9:39:f2:98:7a:19:0c:8f:97:95:e8:28:22:28:28:5e:94:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:30:17 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=7773ef90a8471946737310f6a72267be50e420eea875f3145e682e8ba588adce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:96:cf:8b:c1:1a:1d:29:59:60:aa:3d:ab:
                    8a:9f:a8:9e:94:7e:56:f4:23:b4:fe:18:89:0c:b2:
                    82:b5:76:21:42:84:d3:83:a4:a9:42:ca:3f:ea:ba:
                    c9:bb:70:f8:21:83:6a:fa:e0:47:92:49:2e:07:68:
                    03:6e:06:5d:49:03:cc:7e:9d:42:b2:66:d5:06:b3:
                    d2:4c:27:81:90:21:63:f6:ac:ef:40:66:f8:f2:1a:
                    40:f1:ab:a1:14:2d:20:7d:8c:85:1d:a2:14:94:68:
                    4f:42:64:64:ce:fd:d0:00:9e:18:7f:2a:b7:42:56:
                    23:9c:a2:c2:01:66:6b:ed:b8:89:56:ec:8a:ea:e3:
                    cf:8a:83:e7:ae:5a:91:84:28:d9:9c:91:83:7b:18:
                    52:d9:ab:6e:b4:f5:e0:2d:57:4d:f3:1c:1f:ac:5c:
                    0e:3a:d6:cb:b4:e9:6e:d5:69:91:4e:5a:1f:03:1d:
                    c4:29:a2:8b:e3:0e:47:15:ad:e9:58:16:e8:53:f8:
                    8d:1b:96:b1:68:67:c6:ea:57:cf:14:d3:bb:41:de:
                    65:db:68:60:bc:4a:e6:6b:d9:aa:bb:c4:19:f7:11:
                    4f:be:c7:d1:5a:b5:1c:31:0c:93:9a:b3:43:87:e5:
                    1a:2f:d2:c9:92:c2:14:3d:52:09:e3:ba:7d:61:f3:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3C:DA:B9:10:08:86:8B:E7:8C:83:E7:01:E9:F8:35:43:A5:6C:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a852e5-a06e-42cf-9d23-d674d4cd3fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:43:c5:3d:35:1d:a3:86:13:ce:b6:16:a6:7a:fc:d9:4e:
         89:12:22:c4:34:10:1e:35:ed:11:da:bd:1b:07:f8:19:3e:4a:
         53:a5:c0:f8:57:e5:0b:2f:d3:ba:ac:92:51:8f:db:31:ee:da:
         16:0a:53:37:b3:45:3b:9b:74:4a:91:19:ff:2d:55:93:11:67:
         d7:a2:ab:41:08:67:03:cd:ab:66:37:15:33:dc:c3:52:b4:13:
         fa:9d:a1:17:90:9e:ec:59:31:66:e9:0d:fa:7b:db:16:00:39:
         18:9c:95:c2:bf:9d:98:7c:7e:0c:9b:bd:4d:b7:aa:09:8f:55:
         45:b8:d4:98:5f:dd:d7:4d:df:3d:cc:25:fd:1a:e9:24:76:e1:
         33:73:e5:1f:65:da:af:ca:bd:bc:5f:c6:7f:c8:f9:2b:32:27:
         a5:e6:07:8b:18:ef:62:57:c2:1f:a9:b9:5a:32:eb:ca:7d:a0:
         83:aa:6b:fd:d6:8a:fc:74:3a:19:2b:f1:17:91:90:e6:62:c3:
         e8:88:76:09:34:09:9e:87:6e:35:13:b2:27:ad:46:22:91:9a:
         36:3f:1b:31:4b:96:fe:ef:b0:84:0b:56:1d:8c:65:d0:12:22:
         53:89:00:31:26:92:98:c0:27:ad:42:70:98:77:6e:39:7f:40:
         1c:08:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----