Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa
File:                     acd9009c-1eb1-4035-bd6f-ae1855761542.roa (raw, json)
Hash identifier:          WyseuX4gtc7C2tBVZgM75ixAh0RMPzcgg/1ead9MIRM=
Subject key identifier:   15:D3:AC:7B:00:64:8F:54:C9:85:CA:DB:17:3B:38:B1:C7:A6:51:27
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       457DABC26A8D7EE4DF23EB36E3BE30F4A3F72D14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa
Signing time:             Fri 17 Oct 2025 00:42:40 +0000
ROA not before:           Fri 17 Oct 2025 00:42:40 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        13.196.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7d:ab:c2:6a:8d:7e:e4:df:23:eb:36:e3:be:30:f4:a3:f7:2d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:42:40 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=1dbfb05c09d2699a0b813966f8faba3956b9993865a8550439ef6ff0736bf997, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:40:c6:ba:60:61:a6:09:3f:08:3a:46:67:
                    bf:df:95:ee:47:87:0d:34:cf:06:62:22:08:a6:d1:
                    1f:9a:6c:11:1d:bd:3b:5f:4c:3b:e0:c7:8c:36:31:
                    6a:8a:09:0e:36:a6:2e:93:87:f9:22:12:be:af:50:
                    da:16:13:cb:a2:fd:f2:8d:03:dd:03:2f:1b:2e:8e:
                    4c:23:78:6a:5a:08:3b:2f:cd:56:43:6a:29:bb:d3:
                    72:42:f2:f1:37:1f:e1:06:c9:77:4e:49:09:5f:92:
                    0f:b2:e4:06:c7:b2:cc:4a:e4:e7:66:75:a0:b1:f3:
                    66:0f:78:67:eb:e2:4c:31:96:f8:e0:13:54:f8:16:
                    f2:c5:d2:da:a7:40:44:57:bf:f6:76:bc:88:12:12:
                    91:78:94:68:ed:52:65:00:4c:c8:58:9e:b1:20:6f:
                    f1:2a:02:08:7a:60:0b:37:ca:4c:e5:ca:8e:65:0c:
                    52:8b:ec:4d:08:d9:c8:e6:9b:88:ca:8c:91:01:4e:
                    7b:5d:31:0d:ba:8a:73:ec:cf:c6:b7:8a:68:ea:c7:
                    b0:62:68:c0:bf:3c:07:1a:97:b3:6c:ad:6a:12:17:
                    14:6b:ea:4f:a6:7a:8d:59:a5:80:15:c8:c4:d8:c0:
                    7e:85:8a:17:6e:38:e0:51:cf:16:1c:7f:75:8c:b6:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D3:AC:7B:00:64:8F:54:C9:85:CA:DB:17:3B:38:B1:C7:A6:51:27
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a8:cc:aa:34:e2:f8:7f:be:4f:70:f6:4e:c7:ed:28:63:37:50:
         88:5e:68:16:b4:fc:05:ee:22:ba:3c:7c:93:88:12:5c:83:fd:
         e6:f3:ac:0f:23:74:97:1a:75:d7:48:b4:f4:8a:3c:93:c2:71:
         ea:b0:74:4e:c9:d2:11:2d:cb:ab:3e:d0:9c:0e:4b:a9:72:26:
         88:c1:5a:46:cc:62:ae:5a:d0:99:34:33:f7:ca:59:57:12:73:
         4c:f1:21:9b:9d:7c:8f:18:86:dc:79:15:ef:bd:1a:95:99:c0:
         ce:c7:90:e7:11:4a:0a:dd:b0:70:82:aa:6e:a3:1c:f8:f6:b6:
         44:d3:8b:c9:f2:ed:58:7b:11:34:2e:7d:26:82:73:1b:24:b5:
         69:7d:d7:35:d1:fa:df:12:9a:c5:ac:58:b3:e6:12:18:3b:10:
         5f:0c:af:56:e1:c3:11:f1:70:6e:b4:59:44:a6:63:62:fb:c4:
         f9:f5:53:a4:2b:f7:58:56:21:aa:bd:0d:7a:8e:b3:c9:43:7b:
         61:e1:33:b9:0b:6f:9a:34:4f:26:38:26:f8:0c:3f:e9:10:da:
         f4:0d:b7:e8:90:a2:47:59:fc:34:be:5f:da:8b:6f:24:4d:57:
         54:e4:0a:70:c8:cc:02:d1:79:9e:2f:aa:ed:8d:d7:83:0a:29:
         4d:5a:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----