Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6fedcba-d9ab-4648-b5f0-ce5be1e1a4d7.roa
File:                     a6fedcba-d9ab-4648-b5f0-ce5be1e1a4d7.roa (raw, json)
Hash identifier:          MhS8NXknOOBgl9Q6Q/ST4dMUOAXlCMSEf42nHmDqIMs=
Subject key identifier:   17:26:29:3C:FD:DC:FE:1C:67:85:36:0A:84:B0:53:45:67:D6:A3:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11A19631F0960D1396E7E5117C60DE47CCB71789
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6fedcba-d9ab-4648-b5f0-ce5be1e1a4d7.roa
Signing time:             Wed 15 Oct 2025 20:08:40 +0000
ROA not before:           Wed 15 Oct 2025 20:08:40 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.185.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:96:31:f0:96:0d:13:96:e7:e5:11:7c:60:de:47:cc:b7:17:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 20:08:40 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=faa81baa5770f1768342159ae9047e106520edd6066dcdeb2104857c374764a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:b1:73:8b:10:3e:99:b6:c2:20:25:bf:4b:
                    cc:38:e9:7f:f0:25:be:72:45:04:3f:8b:96:fa:94:
                    81:a3:8d:52:0d:79:31:9e:83:13:85:41:b9:0c:eb:
                    e2:28:ff:18:4c:3c:f3:85:ed:b9:fc:28:c9:76:24:
                    a6:12:5b:23:77:fa:1f:52:eb:10:47:02:f7:a4:94:
                    8f:63:61:12:6c:c1:d2:b9:57:1f:60:2b:33:1d:b3:
                    a4:6c:c7:d2:a9:52:90:b8:24:93:3f:1d:e3:c2:fe:
                    d4:cd:c0:ce:90:b2:0e:82:aa:38:7e:c2:37:0c:d4:
                    a3:7c:6b:5b:0e:95:fa:76:62:62:2e:95:db:21:c8:
                    b6:de:5a:75:47:de:8b:b7:9d:62:4e:f8:43:75:8a:
                    3e:de:4f:d8:07:22:93:01:dc:60:6c:9c:74:ff:51:
                    49:c9:34:0e:03:2f:dd:43:e1:e5:12:7a:d0:1e:a9:
                    3d:27:92:fa:09:fd:bb:f8:2e:14:c6:76:92:ee:e5:
                    f3:8f:17:19:f1:36:08:90:f6:84:90:d6:a4:a9:8e:
                    7f:7b:33:23:e2:2a:e4:c1:1a:58:72:6b:f4:c7:38:
                    5b:14:aa:bb:4b:f1:37:7e:2e:5f:e2:5b:51:b1:59:
                    51:11:09:5c:ed:7d:fd:3c:ae:b4:2a:00:61:01:b3:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:29:3C:FD:DC:FE:1C:67:85:36:0A:84:B0:53:45:67:D6:A3:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6fedcba-d9ab-4648-b5f0-ce5be1e1a4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:cb:75:38:85:ed:f4:67:7e:f2:bf:9e:0a:34:b8:a3:ee:
         a1:8e:de:e6:30:a1:aa:32:e0:ba:ef:7a:b7:a5:9e:6f:59:fa:
         06:fa:84:4b:49:2c:66:96:93:52:14:c3:8e:27:1d:42:a6:ab:
         5b:b9:02:f3:04:9d:1d:4f:c1:67:73:c9:e2:57:a1:43:58:51:
         6c:b0:bb:32:ba:00:75:1e:9c:1b:88:fa:53:a9:3e:c6:6b:6e:
         27:f0:1f:55:98:d8:54:90:2c:66:4c:52:dc:b1:7a:f8:73:f8:
         1a:7f:4e:07:69:92:95:ee:c9:2c:7e:42:4e:53:46:04:b6:30:
         0b:b8:52:12:0a:c1:3a:85:68:3a:23:26:78:16:d5:c1:b7:11:
         f7:63:73:67:58:4a:ca:b2:da:a7:45:1c:ad:3e:54:fa:02:23:
         96:3e:40:9d:81:71:6f:fa:35:b3:26:f2:57:1e:6d:12:00:5e:
         bb:a0:85:4b:82:36:66:c6:c6:a6:16:3f:ec:66:28:f3:bc:12:
         8e:35:db:b7:5a:cb:69:95:24:97:41:ab:54:b7:66:67:74:99:
         25:3b:0e:91:02:6a:f6:f8:e6:91:50:67:9e:aa:3e:db:6a:8c:
         1a:6c:9a:2a:f4:88:9c:c4:83:41:92:99:7b:1b:14:b4:d3:8d:
         4c:5d:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----