Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa
File:                     cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa (raw, json)
Hash identifier:          3ZNDCVv54VJZ5+9OQmZRCHN7C8ANCwufAYdGM4NYbKw=
Subject key identifier:   04:0B:60:F8:67:32:45:74:A4:1A:94:02:C7:79:EF:AD:03:0C:70:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       494F0CE850540E8570E6F9B3B2B1AB0C18FB504E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa
Signing time:             Tue 30 Sep 2025 00:21:14 +0000
ROA not before:           Tue 30 Sep 2025 00:21:14 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.157.72.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4f:0c:e8:50:54:0e:85:70:e6:f9:b3:b2:b1:ab:0c:18:fb:50:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:21:14 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=2bc4fb16502f20c73d173595f2a053b31a85d4391c03f368411a904f6972678b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:ed:a3:bf:b2:99:ee:a0:8f:b2:ae:e9:89:
                    8a:1d:81:8d:2e:99:9f:b3:c5:b8:62:ea:46:7e:b5:
                    20:ea:a0:1e:5f:78:57:7d:59:50:98:c9:1e:da:3b:
                    51:6b:f3:48:40:23:54:8e:85:de:1c:c3:d9:53:d3:
                    5b:54:66:87:4d:a6:ce:76:0c:36:77:32:b1:a6:fd:
                    a9:58:32:95:97:f1:db:3a:01:5d:ad:d9:8a:05:d0:
                    c8:e8:14:1a:51:96:37:bf:a2:cd:c8:49:c7:05:ea:
                    9b:0e:52:16:7d:84:c0:9e:6c:61:8c:71:b8:f0:87:
                    3f:24:57:70:2a:a8:dc:eb:57:5a:75:c3:30:30:c5:
                    d5:fb:95:0f:40:20:44:49:19:7a:70:d2:71:cf:fe:
                    46:43:f9:25:c2:5e:4a:a1:72:0a:66:ef:32:11:51:
                    21:42:b8:2d:cb:3f:1b:73:58:ef:b2:64:3c:6c:f7:
                    70:ec:c0:62:e9:70:a7:f5:39:99:61:a7:c9:6c:21:
                    88:f4:86:a3:df:21:d0:d5:44:66:c5:a0:9a:43:02:
                    d6:fa:5c:9b:a9:fe:51:f0:44:bb:49:22:a9:20:e4:
                    03:7e:7f:3a:0d:cc:41:ef:8f:1d:0d:d0:50:a2:73:
                    6c:69:e7:80:85:92:5c:1e:71:28:c7:82:32:b3:aa:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0B:60:F8:67:32:45:74:A4:1A:94:02:C7:79:EF:AD:03:0C:70:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:89:46:b5:3d:b9:dc:1e:7f:97:a5:13:54:73:af:1e:c3:86:
         eb:93:3d:46:55:80:a0:6e:5f:17:75:ea:46:7f:1b:e2:ed:b6:
         a6:51:62:63:b7:74:f6:f4:85:a1:c5:17:01:24:d7:46:c5:f7:
         77:43:3d:46:6a:7f:32:e1:05:27:05:b4:1c:f1:ac:86:6c:7c:
         f2:a1:bb:c1:6e:e9:7c:a3:5b:4b:8d:0a:06:37:36:d8:f0:86:
         2b:81:0e:da:d0:2b:03:9e:b9:40:e1:5b:43:c6:4a:de:ed:4e:
         ef:7e:e5:d4:f1:55:22:1a:f8:39:09:47:1b:e2:84:e6:e0:f7:
         f9:c3:65:76:b6:e8:88:25:69:34:8a:8f:f5:72:32:e4:e2:2a:
         02:ba:aa:8c:92:c3:6d:17:f4:c3:c1:c3:7b:0a:4e:fb:84:9a:
         ff:b7:f8:fb:07:4d:65:d2:59:a6:51:77:f7:12:21:38:25:07:
         b5:dc:19:3f:9e:7c:52:d8:f0:90:45:4b:c8:1f:ad:79:a6:c6:
         36:74:a2:30:c7:2d:4b:a9:a8:d5:36:c7:9b:50:5e:ac:3e:4a:
         41:85:f6:d2:2e:44:26:a8:2b:3e:8d:ee:02:5a:49:27:6d:0d:
         9f:2c:bd:ad:79:22:48:19:a6:1b:16:a9:c2:1d:89:c4:ef:82:
         b1:75:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----