Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa
File:                     c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa (raw, json)
Hash identifier:          CVYq0vAQiIOL1E0J8IWydeMLeN1jIgNp5iStoV36xbU=
Subject key identifier:   91:ED:F8:0E:EC:47:4C:F7:E6:FC:27:ED:54:51:89:74:23:EE:4F:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55A5F3F45F14B8727BCEA38C7E75714B3AAC7B94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa
Signing time:             Fri 03 Oct 2025 00:42:13 +0000
ROA not before:           Fri 03 Oct 2025 00:42:13 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.2.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a5:f3:f4:5f:14:b8:72:7b:ce:a3:8c:7e:75:71:4b:3a:ac:7b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:42:13 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=527a820a1660f2070969818f8d07eed28f8522800ae379d3bc18beebd0b9c9f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:86:8a:2f:b1:60:49:1c:6e:6f:9c:66:c7:
                    d8:a3:e7:1f:27:a7:bb:27:31:57:7f:70:28:53:35:
                    33:3b:4d:f6:fc:b7:5a:a6:c1:6b:d6:36:cf:f6:71:
                    c6:d8:c0:28:51:55:83:70:66:72:ba:35:34:b1:68:
                    b3:b5:9d:a1:08:ae:fd:bc:15:5c:6a:d7:a7:e3:e8:
                    70:f2:fa:7d:c2:0d:be:b8:01:c5:c6:4b:82:13:bf:
                    4f:68:83:4c:c7:5f:03:aa:89:10:1a:68:89:f5:fc:
                    ee:dd:bb:2a:52:09:eb:9f:56:6a:4d:78:e9:80:a5:
                    24:1b:30:08:a5:8b:28:b0:40:f6:07:c1:6c:88:1f:
                    d6:4d:45:03:4e:be:db:aa:e7:da:72:4b:a9:f6:2a:
                    2c:40:62:f3:da:c4:40:b6:61:85:d3:e9:53:05:50:
                    78:ed:53:1f:a4:d5:f8:18:e3:dd:4f:8a:c6:f0:4e:
                    fe:6a:54:85:19:41:66:ed:a6:6b:68:1e:a5:4d:46:
                    97:b0:e9:36:3d:11:0b:26:a5:82:32:d7:f0:2a:5a:
                    37:e0:0e:ab:53:ec:ee:81:bd:7f:60:dd:6f:74:89:
                    86:b1:82:a2:b4:51:d4:59:11:95:58:3e:4d:0a:11:
                    b3:45:50:df:31:50:bb:86:d0:c3:ba:7a:84:a0:02:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:ED:F8:0E:EC:47:4C:F7:E6:FC:27:ED:54:51:89:74:23:EE:4F:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21e7f7c-c7c4-4cb4-8053-52a71a84a2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:7c:a3:51:74:04:5e:9c:66:7e:57:60:bd:4d:6c:56:f3:
         0b:ae:14:eb:8f:27:a6:cc:a7:74:0c:80:ed:3e:fb:7b:e4:c7:
         1f:f6:1e:f6:3e:b0:e1:cb:68:a7:1c:01:b2:8a:a7:5c:33:d3:
         4f:96:db:03:00:1d:03:d3:41:ed:d3:86:75:5d:02:d6:8e:7f:
         f2:8c:31:85:32:48:d0:56:6b:cc:37:ab:bf:bb:72:4c:9d:a9:
         8c:49:93:fc:79:65:cd:15:d8:0a:30:1a:a1:8d:3b:c9:5e:f7:
         67:08:0f:f2:d5:55:10:a4:b6:5c:da:24:9c:2d:f0:f8:76:d4:
         67:28:31:d0:0f:af:31:06:d3:1a:5d:23:2c:dd:be:30:c5:4c:
         34:c8:91:f4:e0:61:8a:83:d8:38:4a:5d:d7:d5:79:d4:42:c2:
         f3:ca:12:4c:3f:99:59:80:9f:fc:57:3e:da:ac:c8:05:3f:13:
         82:88:fa:40:e7:6a:85:ac:40:89:19:10:e0:09:58:83:4d:94:
         c0:77:71:fb:66:e4:d0:00:dd:f7:81:4e:8d:7d:f2:29:f4:61:
         61:aa:64:3d:13:d8:1e:7d:a1:9b:6d:84:19:ed:0b:be:74:eb:
         0b:f1:ab:ab:1e:08:35:e5:b2:d1:25:61:38:c4:6c:3d:a0:d0:
         ef:a0:a0:da
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVaXz9F8UuHJ7zqOMfnVxSzqse5QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MjEzWhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjdhODIwYTE2NjBmMjA3MDk2OTgxOGY4ZDA3ZWVkMjhm
ODUyMjgwMGFlMzc5ZDNiYzE4YmVlYmQwYjljOWYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3kYaKL7FgSRxub5xmx9ij5x8np7snMVd/cChTNTM7Tfb8
t1qmwWvWNs/2ccbYwChRVYNwZnK6NTSxaLO1naEIrv28FVxq16fj6HDy+n3CDb64
AcXGS4ITv09og0zHXwOqiRAaaIn1/O7duypSCeufVmpNeOmApSQbMAiliyiwQPYH
wWyIH9ZNRQNOvtuq59pyS6n2KixAYvPaxEC2YYXT6VMFUHjtUx+k1fgY491Pisbw
Tv5qVIUZQWbtpmtoHqVNRpew6TY9EQsmpYIy1/AqWjfgDqtT7O6BvX9g3W90iYax
gqK0UdRZEZVYPk0KEbNFUN8xULuG0MO6eoSgAgH7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUke34DuxHTPfm/CftVFGJdCPuTwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MyMWU3ZjdjLWM3YzQtNGNiNC04MDUzLTUyYTcxYTg0YTJhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVFAkAwDQYJKoZIhvcNAQELBQADggEBAECffKNRdARenGZ+V2C9TWxW8wuu
FOuPJ6bMp3QMgO0++3vkxx/2HvY+sOHLaKccAbKKp1wz00+W2wMAHQPTQe3ThnVd
AtaOf/KMMYUySNBWa8w3q7+7ckydqYxJk/x5Zc0V2AowGqGNO8le92cID/LVVRCk
tlzaJJwt8Ph21GcoMdAPrzEG0xpdIyzdvjDFTDTIkfTgYYqD2DhKXdfVedRCwvPK
Ekw/mVmAn/xXPtqsyAU/E4KI+kDnaoWsQIkZEOAJWINNlMB3cftm5NAA3feBTo19
8in0YWGqZD0T2B59oZtthBntC7506wvxq6seCDXlstElYTjEbD2g0O+goNo=
-----END CERTIFICATE-----