Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cede6346-3402-4291-8cfc-09482fa9b64b.roa
File:                     cede6346-3402-4291-8cfc-09482fa9b64b.roa (raw, json)
Hash identifier:          JlM/Ny9H/8tbsnGEh1lVifDFzdZhjT7/9dYSNonKWyU=
Subject key identifier:   F5:9F:06:95:9C:48:21:D5:F0:A2:D0:89:D0:F1:6C:B0:FD:59:B9:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25F1B3A6D72017A097873C269705BB4AD26C9C04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cede6346-3402-4291-8cfc-09482fa9b64b.roa
Signing time:             Tue 14 Oct 2025 16:41:52 +0000
ROA not before:           Tue 14 Oct 2025 16:41:52 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:b3:a6:d7:20:17:a0:97:87:3c:26:97:05:bb:4a:d2:6c:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:41:52 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=9bcc1e99d7f4e14e6d4a7b617e955be0ce5163e6891cd19f2d0fb2397e66ae1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:00:2a:81:a7:27:9c:92:0d:3d:a5:56:62:
                    c7:cb:44:df:b5:15:aa:7e:25:bb:85:8a:a4:f3:6c:
                    5d:8c:c3:04:a0:4c:14:cf:95:3d:bb:2c:c8:b2:d6:
                    9f:29:75:32:e7:8b:10:04:09:61:76:f5:3c:55:3e:
                    70:88:6b:88:a1:da:bb:7a:d3:d0:c2:a7:4d:6d:37:
                    50:b3:7e:2b:77:33:1a:72:8a:67:c8:fc:6c:4d:ad:
                    66:22:23:38:90:28:84:f8:b6:bc:74:7b:4e:2f:71:
                    02:92:a3:ce:20:17:5d:75:2c:ff:0b:50:51:72:bc:
                    3c:ec:6f:34:47:74:56:d3:60:fe:4f:c9:3a:34:3b:
                    a5:39:c9:df:98:99:cf:37:7a:9c:cd:2b:3d:de:64:
                    6d:06:73:d8:3b:95:8b:5e:c7:1c:4a:3a:59:0b:6b:
                    41:15:41:b4:2d:6e:96:2f:e8:35:57:00:b1:33:ab:
                    2a:cf:c2:5a:3f:c5:04:d2:0d:82:06:d4:d5:94:8b:
                    b0:fe:98:a6:de:76:fe:f2:5c:a0:4d:84:46:71:0b:
                    df:07:25:23:11:05:f1:0c:b8:86:93:58:4b:66:0d:
                    99:fc:7d:5a:a2:c6:c3:47:1b:55:a2:8c:ce:58:1c:
                    5b:61:0b:fc:aa:29:f6:ea:21:35:e6:b8:f6:1c:b4:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9F:06:95:9C:48:21:D5:F0:A2:D0:89:D0:F1:6C:B0:FD:59:B9:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cede6346-3402-4291-8cfc-09482fa9b64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:34:f2:17:1d:19:4f:4e:8c:6f:29:95:7c:cc:cd:9a:30:06:
         e3:35:b7:9b:06:02:4f:54:86:83:b0:23:27:80:43:5f:4d:c0:
         ae:6a:e0:fd:46:ea:49:e4:f6:d9:21:d2:bd:20:ce:91:1c:fb:
         f0:a7:96:b1:53:c9:f8:ae:fd:69:30:db:a3:1c:68:c5:55:54:
         c5:5f:ea:c3:8c:b6:ca:fe:c7:6c:43:f6:a7:4a:97:1d:e0:61:
         10:65:0f:5c:2c:48:a8:50:9c:9f:6c:1b:69:f9:5c:c8:01:c6:
         d2:cb:89:0f:4d:0c:0d:c1:ec:b6:55:3f:4f:b9:28:2c:fb:11:
         13:15:f8:24:11:a6:53:51:af:8f:cc:b3:13:c8:a1:32:96:02:
         41:0b:3a:6e:62:72:32:24:33:01:10:1a:67:ea:85:ce:17:44:
         b0:26:19:72:5e:4f:ff:64:af:3e:8a:2e:05:32:b4:ad:3e:ac:
         86:fa:d8:56:d6:4e:f1:2d:21:bf:1d:da:88:49:e3:c3:37:32:
         9a:e1:35:20:14:bb:32:1a:3f:57:3d:23:7a:81:9d:22:39:6a:
         25:42:2b:54:34:54:c6:68:fc:de:e8:36:ed:dd:77:4f:ea:a8:
         b0:e0:d8:0d:a0:07:58:a7:c4:38:d6:1b:13:53:29:5e:d4:23:
         30:ae:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----