Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4ff7be7-36ae-48c9-b55e-9c6224aa1a42.roa
File:                     b4ff7be7-36ae-48c9-b55e-9c6224aa1a42.roa (raw, json)
Hash identifier:          7T9WP9gGeEPJaZ4qY6b12hMD5mvQXzVtGFUfbj/DpHc=
Subject key identifier:   7D:ED:3B:ED:13:44:DB:C3:60:D2:63:6C:CA:55:AE:C8:09:BF:92:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AE70C372F3B369F21196451F869C261020C44DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4ff7be7-36ae-48c9-b55e-9c6224aa1a42.roa
Signing time:             Wed 08 Oct 2025 00:22:52 +0000
ROA not before:           Wed 08 Oct 2025 00:22:52 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        66.36.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e7:0c:37:2f:3b:36:9f:21:19:64:51:f8:69:c2:61:02:0c:44:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:22:52 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=bf81bc441c319193349530575a04ec9cadfa0961aff0566d4d123a84490e1b8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:d1:60:5d:c8:88:12:39:45:46:0f:73:5c:
                    93:21:78:53:96:bd:de:22:bb:b5:fa:27:58:ed:1f:
                    8b:12:a7:3b:a3:39:13:75:05:71:e1:7a:86:bc:57:
                    3a:e1:a0:5f:07:61:57:70:92:9d:5a:0c:65:2e:25:
                    09:2a:7e:37:01:52:f3:43:e4:8c:27:15:9e:f1:3b:
                    ac:34:f5:b0:47:90:4b:32:d8:ae:0a:56:46:9a:bc:
                    2e:09:5e:22:98:d5:08:8b:76:4e:8f:b8:69:ea:65:
                    2d:a6:e1:f3:87:08:4e:4e:26:2f:3f:92:cf:aa:0b:
                    bb:a2:65:0d:4a:30:9e:37:5c:d8:c6:33:cc:a5:12:
                    7f:ad:e0:ff:bd:b3:9d:ea:38:cc:65:7d:a9:88:a0:
                    ee:4a:3d:69:83:4a:78:f3:48:c4:24:4f:e6:8f:05:
                    d2:8f:75:7f:41:d3:f4:aa:dd:11:52:bd:be:c0:71:
                    fe:22:86:61:40:e1:64:78:fa:4e:ef:14:32:6c:62:
                    77:54:66:3b:ca:c8:da:d6:26:5c:ce:db:b3:4b:94:
                    a5:65:a6:cd:f8:47:f3:e8:9f:81:0e:f4:88:0d:15:
                    dd:c2:43:90:16:47:bf:e4:14:94:b6:8e:01:8d:a2:
                    10:1f:1f:32:12:4d:aa:d4:ce:4c:a8:06:b4:0c:55:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:3B:ED:13:44:DB:C3:60:D2:63:6C:CA:55:AE:C8:09:BF:92:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4ff7be7-36ae-48c9-b55e-9c6224aa1a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:58:01:24:eb:c1:0e:37:b1:7a:db:77:4d:1f:84:54:2c:72:
         fe:d2:d8:ff:6a:9f:f7:da:3d:7e:1c:da:86:5f:0e:6e:70:f1:
         85:7d:07:9f:df:0d:80:50:5e:39:1a:f7:92:c6:81:07:0c:4a:
         0f:6e:2b:3d:1e:b6:03:7d:f5:c5:31:f4:ed:25:68:9e:ec:ce:
         19:8d:f4:bc:69:f0:7b:a0:aa:26:74:c3:7c:11:85:a6:2f:77:
         2e:b7:8f:67:4b:1c:5f:3b:1e:e1:d5:fd:35:8c:ce:a7:96:b9:
         2a:1a:8e:20:82:44:b8:68:f0:90:4d:91:57:ac:68:b9:a0:7e:
         58:da:ca:41:85:0b:5b:57:3f:99:11:80:a9:b0:a2:94:35:ea:
         1f:da:56:56:f3:41:38:7a:5b:4d:7a:82:04:99:dc:3d:1b:34:
         16:67:8a:85:cb:3c:ea:fb:8c:39:a8:08:83:35:93:c1:a5:88:
         34:9b:09:19:ce:db:80:5e:5b:5e:ad:c8:56:92:bc:e4:42:ee:
         c6:b1:93:12:7f:7e:2f:32:a8:a8:a8:1b:46:4c:80:75:bc:05:
         10:c8:64:57:3a:8b:1a:74:d6:97:ab:db:2b:24:65:73:e0:f7:
         91:2c:5b:89:5c:d0:63:14:bf:c8:aa:4c:f9:46:f7:fa:4c:e6:
         30:7d:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----