Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a706a1a8-4c06-4a1f-a49c-359d5f249c0b.roa
File:                     a706a1a8-4c06-4a1f-a49c-359d5f249c0b.roa (raw, json)
Hash identifier:          dEvee6SpnsXZ9p6CxyZuDP1wYm4WTmJ5qe+YYSSTlP0=
Subject key identifier:   67:EE:71:30:39:F9:45:DB:A5:3B:4B:5E:62:72:8E:3F:C7:0B:C8:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5501837CB3C42CB93654FAD92B7BBA5FB36B06B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a706a1a8-4c06-4a1f-a49c-359d5f249c0b.roa
Signing time:             Tue 14 Oct 2025 16:41:19 +0000
ROA not before:           Tue 14 Oct 2025 16:41:19 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:01:83:7c:b3:c4:2c:b9:36:54:fa:d9:2b:7b:ba:5f:b3:6b:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:41:19 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=fe3010640ef7d941954e4a6145c5f7f6ce69c880eff56efcab9ccee977fb39d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:af:f7:95:ff:e6:26:04:78:3b:8a:ad:b4:
                    6a:d7:f9:d1:79:ca:5a:4d:e5:68:de:8f:03:4f:4d:
                    0d:c1:90:46:73:83:33:8e:b9:05:bb:34:ca:ef:53:
                    16:9c:13:ea:47:9a:e8:fd:f8:2b:10:0b:36:d0:de:
                    84:48:ab:30:dc:44:86:07:9f:2e:84:20:99:ea:29:
                    e9:73:ce:eb:aa:9e:4c:fa:1b:d8:59:9d:4e:43:b2:
                    d3:0a:c0:01:a4:cb:27:24:b3:b0:ab:34:8c:f0:fa:
                    ae:5a:fc:e8:e0:07:56:f0:d6:1a:48:92:27:d3:e7:
                    86:fb:27:13:9c:df:ca:14:e3:14:f4:c2:43:87:ec:
                    5e:b8:dd:13:bd:9a:f5:2b:17:c2:0a:c7:ff:c2:db:
                    03:7c:10:b3:a1:28:df:72:5d:d8:b2:8a:57:75:32:
                    55:29:35:d6:1e:9e:cf:58:14:73:84:22:66:01:cc:
                    62:28:0c:d5:09:39:29:aa:c0:33:ee:cf:c3:39:06:
                    5a:ea:fc:b3:6a:53:9f:1a:d0:9b:9d:ed:03:7e:f3:
                    6b:80:6e:58:8e:be:91:b8:4c:d1:d2:e8:aa:ea:37:
                    75:54:c8:86:f5:f6:16:3c:11:ef:12:28:ea:c9:21:
                    bd:2e:05:c0:ff:ad:5e:5a:43:7e:74:24:86:21:62:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:71:30:39:F9:45:DB:A5:3B:4B:5E:62:72:8E:3F:C7:0B:C8:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a706a1a8-4c06-4a1f-a49c-359d5f249c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:66:eb:62:8d:77:83:20:74:d3:82:8d:36:a0:12:1f:53:59:
         d1:87:02:fa:5a:6f:f4:db:ea:bd:7e:6b:6b:87:e5:a0:79:24:
         db:f7:26:f6:4d:fc:68:7d:5d:b4:6a:32:58:8d:af:8a:4c:35:
         ee:b3:31:06:e5:11:a8:ba:ce:c7:da:56:1d:7c:af:fb:08:36:
         8f:c4:93:c3:de:79:ba:f2:b9:9c:a2:4f:40:12:c9:1f:36:eb:
         c3:b1:14:06:e1:68:31:47:75:98:8a:bc:f6:d5:d7:83:66:c0:
         20:b2:1d:5c:7a:52:eb:7b:d7:07:10:fd:1d:47:e4:56:2e:75:
         69:79:72:3f:f8:7b:78:5d:5b:58:a3:0f:78:62:50:e6:ef:5e:
         df:cd:2b:87:88:73:1c:17:96:18:54:88:5a:6a:f6:78:cf:bc:
         51:23:93:d6:ac:9e:93:a0:c9:ed:50:35:d6:36:24:6a:14:70:
         a4:29:f6:a6:8a:58:22:90:7c:e1:6c:e9:fc:96:81:91:90:29:
         a5:d0:a3:7d:b7:5d:f5:25:c6:76:83:f4:2f:49:52:d0:56:1b:
         1e:d5:39:35:e0:cf:20:e6:2c:cb:8a:88:c1:26:75:2b:9f:0c:
         4b:5c:9e:31:77:43:32:56:16:ba:60:7b:5f:da:1e:fd:62:78:
         38:28:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----