Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d745880d-9e6a-449c-9c99-caee7921445e.roa
File:                     d745880d-9e6a-449c-9c99-caee7921445e.roa (raw, json)
Hash identifier:          W0GDfdN0P+eBlhuDbCAteyl/m1mv0onPDnfxjqLmRp4=
Subject key identifier:   00:C5:3D:17:07:E0:40:61:41:40:0F:07:B6:63:35:4B:05:F5:11:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4264D1AC4A1EFA25CEE7179EAF65D45D78B5DD45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d745880d-9e6a-449c-9c99-caee7921445e.roa
Signing time:             Wed 01 Oct 2025 00:22:07 +0000
ROA not before:           Wed 01 Oct 2025 00:22:07 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.0.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:64:d1:ac:4a:1e:fa:25:ce:e7:17:9e:af:65:d4:5d:78:b5:dd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:22:07 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=274032b5d605a9ed18ea4729e914d566ba2b3d396d28434df38aeef046562cb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:3d:7b:2d:5c:7c:b6:cd:59:7b:3f:a8:35:
                    0e:2d:5d:dc:27:06:cc:96:e9:b9:76:cb:1f:50:cc:
                    a8:ab:a7:c1:02:89:24:01:8a:62:6b:ec:8f:60:29:
                    7c:e9:9b:19:f6:03:80:8f:6f:db:54:d5:b4:74:a5:
                    42:19:2b:da:93:79:a6:e1:20:9c:43:5d:a9:53:17:
                    39:4f:40:1f:8e:d6:3f:24:ce:3c:4c:51:fe:71:1f:
                    ce:7f:a0:20:86:13:0e:e8:26:bd:cb:0f:a4:0c:08:
                    c8:36:f0:01:62:db:21:cf:cf:ac:e6:58:9d:08:e4:
                    af:3d:32:07:a3:13:d7:22:b7:c1:f6:41:73:0e:77:
                    8c:be:d8:63:95:61:e4:aa:d9:63:78:f1:ec:9d:eb:
                    da:ed:e5:f6:fd:19:d1:6e:0d:78:70:d7:31:00:85:
                    33:5b:95:44:e3:d8:83:10:a6:5a:62:31:49:66:2e:
                    22:55:62:d4:f9:87:85:a4:e4:8c:53:2a:8c:c4:ee:
                    ed:85:9a:22:3a:48:42:7a:99:86:8a:4a:86:47:fd:
                    92:59:a7:ce:a9:c6:80:05:68:13:86:2a:4a:f9:1d:
                    43:63:41:35:f7:8d:ed:68:4b:c5:b0:76:22:a1:d8:
                    eb:b2:45:f8:65:d0:e2:d4:dd:ef:3e:ca:af:a3:62:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C5:3D:17:07:E0:40:61:41:40:0F:07:B6:63:35:4B:05:F5:11:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d745880d-9e6a-449c-9c99-caee7921445e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:86:36:4a:be:11:13:3e:2e:79:72:18:08:45:cc:46:18:
         33:b5:92:ef:8f:0c:e3:5c:50:a2:6f:ad:d2:4f:d2:d6:d8:a4:
         29:a7:81:b7:92:26:73:08:93:99:b1:6d:4e:b7:56:ac:75:44:
         ab:85:af:d4:26:9a:a1:1f:33:ae:31:49:73:b8:e1:90:74:2c:
         9d:ee:f1:d8:09:a5:58:6a:34:29:71:e6:68:5a:9d:22:b0:05:
         e8:3f:72:9c:d5:ab:b6:4a:4b:2e:c6:19:e7:3b:88:73:67:ed:
         af:05:e6:96:7e:82:91:f7:cb:34:32:d6:40:ef:90:a5:80:e3:
         45:30:7f:80:04:15:87:64:8d:43:26:7c:89:63:fd:13:75:2a:
         b3:1a:26:f2:d8:51:20:79:2c:44:db:cf:ee:3b:9a:fc:d2:6b:
         6d:04:77:b7:44:b7:95:f2:03:1d:96:65:b1:09:83:90:3a:25:
         ee:02:70:48:de:c1:3c:86:21:0f:4e:9b:d0:e0:68:e8:e9:f9:
         5b:2d:10:34:e0:7a:1b:07:95:97:37:b4:10:c6:02:8a:b6:e9:
         10:aa:98:25:01:24:2e:0d:13:ce:4b:61:90:8f:ff:97:5d:5f:
         96:43:f1:26:19:a6:43:03:ca:ac:e5:e5:0a:6c:0a:23:07:74:
         70:fc:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----