Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa
File:                     b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa (raw, json)
Hash identifier:          aKGaq1UjO3GX8IRVZ8WzaTf/xktllaHSsu+l0O29aoo=
Subject key identifier:   90:CB:93:3A:44:DB:34:A1:3D:50:4F:F2:F2:5A:9C:BD:76:BD:50:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31355F5F3F9E96A7B08EB630A13AA0076E5F9F56
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa
Signing time:             Fri 03 Oct 2025 00:51:15 +0000
ROA not before:           Fri 03 Oct 2025 00:51:15 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.78.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:35:5f:5f:3f:9e:96:a7:b0:8e:b6:30:a1:3a:a0:07:6e:5f:9f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:51:15 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=75cdef01902684099c3bc4b51f3c36df36c8c2960e341e9b4c988457d687cad7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:27:56:ce:d8:5d:25:ff:3d:7c:78:64:1a:
                    62:64:78:8b:16:18:c5:24:bb:ae:62:e0:3c:99:d7:
                    4a:8e:6a:ef:06:a5:26:c1:5e:3b:24:b4:53:f0:d8:
                    ec:09:b8:b6:0b:67:12:84:23:7a:22:f3:eb:ed:78:
                    5c:36:d4:ea:7a:e2:b7:18:e4:c0:51:4d:5e:cd:f9:
                    21:38:e2:96:19:1e:19:06:2b:58:ca:96:47:43:16:
                    90:24:ae:af:b3:4d:71:55:d9:30:9f:66:c7:d9:47:
                    74:0f:1f:f9:63:40:d3:b2:48:55:30:b6:14:13:51:
                    3b:dc:96:c5:d7:ef:bf:58:47:52:ae:42:79:b9:72:
                    62:0d:8b:77:c8:92:cc:3a:aa:79:2a:22:91:f4:e2:
                    6c:11:0b:33:e2:84:35:13:e6:af:c2:17:8d:2a:a5:
                    ee:c8:ef:4f:c0:d1:a6:36:e6:fa:f1:c6:1f:ab:09:
                    47:15:3d:02:8d:0e:14:67:51:2a:24:0d:6c:87:d7:
                    84:1d:1f:29:c4:73:3c:69:2c:c6:a4:2a:63:87:95:
                    af:70:d9:69:61:77:52:65:aa:93:50:6e:e7:10:b5:
                    6e:60:ea:2f:19:21:3a:fe:1a:ed:9b:f0:b3:40:bd:
                    13:94:3f:25:9e:26:4c:19:f2:4d:51:a9:5f:6b:0e:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:93:3A:44:DB:34:A1:3D:50:4F:F2:F2:5A:9C:BD:76:BD:50:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2ec0cf3-494d-4d85-9cad-a01151c5424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:63:d1:22:59:85:fa:0e:a5:ef:a5:42:4a:a8:cf:36:73:
         04:38:1c:5f:c3:9e:b2:aa:41:87:eb:2f:3b:e4:18:c5:cf:aa:
         01:fd:28:34:0a:a7:53:cd:f1:ff:16:04:c6:9e:8d:da:3d:c0:
         db:06:cd:2c:c3:58:df:4e:8c:6a:d0:48:b5:f6:93:fa:26:d2:
         34:b7:89:96:77:57:e2:64:74:ed:b4:4f:56:34:12:c1:8b:df:
         ec:e3:80:a1:f0:d9:88:c3:98:a2:c9:7a:65:f7:86:ba:e3:cd:
         e1:a7:d7:29:bd:19:66:0e:ed:17:74:87:7b:c7:ce:f5:4b:f7:
         59:c5:5e:bf:46:2d:88:cb:f4:0f:98:75:c5:8e:6d:2f:33:03:
         3c:3f:9b:3b:92:0e:d1:a6:f3:62:03:7f:eb:b7:82:d7:42:5d:
         a7:01:e6:15:70:d2:50:9d:95:32:4b:71:48:78:1e:bb:4d:00:
         a7:03:33:80:dd:a0:03:92:48:dc:ba:5a:30:94:44:0e:df:5a:
         d5:7d:b6:32:5b:0a:62:d9:c3:8d:ae:6c:da:4d:14:c0:a8:24:
         df:41:05:43:82:a3:db:b1:d1:6a:21:f8:85:ce:dc:71:31:ab:
         aa:f4:2f:bc:d1:c6:64:e1:40:a7:1e:2a:c2:b6:0b:1f:3d:00:
         b1:71:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:59 2025 by rpki-client