Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a9a48f-9d77-4a50-849c-6da4cecb4d1f.roa
File:                     a8a9a48f-9d77-4a50-849c-6da4cecb4d1f.roa (raw, json)
Hash identifier:          lQ1vRsBWNTHjujgg9mTKrogpxnGVBL4xYdhThLfi3u4=
Subject key identifier:   7C:4A:8F:97:98:36:56:0D:DB:76:4A:AA:D0:FE:18:DB:D8:89:D7:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5901C989D987773339F907C424AF070FD033E372
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a9a48f-9d77-4a50-849c-6da4cecb4d1f.roa
Signing time:             Wed 15 Oct 2025 19:21:42 +0000
ROA not before:           Wed 15 Oct 2025 19:21:42 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.147.210.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:c9:89:d9:87:77:33:39:f9:07:c4:24:af:07:0f:d0:33:e3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 19:21:42 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=4419c96a9d6d2b3876ce3910142e1be728cee67ef3e9b7fb32f9540f110bbf4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:96:11:25:76:39:0e:9b:26:cf:10:c7:df:
                    df:5b:23:f8:59:f3:d8:be:17:c6:d9:c5:90:2b:3f:
                    f9:fc:30:52:57:82:37:08:a2:e9:ea:b7:c6:35:02:
                    c8:e5:53:ea:03:42:e7:9c:89:e1:6d:b1:91:e5:c8:
                    da:6b:34:40:21:ce:90:6b:e7:80:09:3d:70:41:26:
                    37:8f:e4:79:c5:ec:c3:e1:90:fa:6b:be:79:08:bb:
                    6c:d4:87:d3:fa:91:8c:6f:4f:04:31:c4:ee:cc:bf:
                    80:f6:a7:e7:15:b6:ca:1b:e9:0e:29:c7:5b:e8:ff:
                    a9:66:95:7a:a1:e0:e6:af:01:3e:b5:b1:e0:80:75:
                    40:47:66:32:12:de:b7:71:18:e2:94:be:e2:dc:61:
                    11:7f:39:d9:df:ff:b7:be:08:93:37:b1:9d:0f:cc:
                    c2:ea:78:45:7d:27:f9:80:fe:df:b2:e8:04:50:38:
                    d2:5b:0c:f1:7f:59:ec:26:b2:5f:b9:61:66:34:98:
                    30:b1:f6:c4:94:7c:1d:95:b7:64:c2:b5:2e:a8:a9:
                    52:47:8f:3f:f2:ac:35:4e:ba:94:16:59:6d:34:94:
                    58:12:79:26:5a:a8:3e:d6:44:b7:de:b4:36:12:86:
                    cd:a2:57:c7:c5:fb:24:a1:ea:64:d8:0c:b5:c0:5a:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:8F:97:98:36:56:0D:DB:76:4A:AA:D0:FE:18:DB:D8:89:D7:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a9a48f-9d77-4a50-849c-6da4cecb4d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:21:5a:33:c5:0f:87:4c:4e:a2:48:ac:88:70:d2:86:6d:f1:
         1a:fd:f1:e1:86:12:42:ba:7a:45:65:0f:7f:d1:63:ba:78:68:
         e6:96:3a:85:24:98:c9:22:59:04:70:21:5a:4c:9d:c1:27:12:
         7d:b6:ce:ca:48:cc:ac:ef:04:8a:fb:6f:70:07:7c:e0:89:5d:
         88:6e:29:7c:fb:b2:00:76:29:72:a6:ab:2a:9c:e4:a5:e5:12:
         06:12:48:5f:18:5c:ad:6e:5c:6b:9f:c8:b5:97:90:ab:d0:aa:
         d6:0b:aa:97:d6:36:fe:18:11:ae:f9:95:42:ea:7d:c2:4d:f9:
         6a:0c:86:96:54:97:0f:ed:74:e5:df:b7:b8:71:ac:de:1a:e8:
         6e:e6:92:a7:31:6c:ef:86:cb:ab:e0:be:84:9e:63:dd:55:72:
         e5:ff:36:f8:e4:eb:d8:86:90:b3:9f:90:f5:13:69:f5:8d:22:
         24:d9:a5:30:fe:1d:16:45:03:35:47:c0:e1:3d:fb:4d:e9:e8:
         cf:24:ef:d7:8a:5c:b4:18:6b:53:40:07:15:ec:32:da:d0:1d:
         90:43:83:dc:45:ff:09:12:62:23:db:3f:a0:8d:ea:79:ea:3e:
         97:b1:de:42:db:34:e0:04:47:6e:fc:e5:09:e9:cd:45:85:51:
         4c:24:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----