Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa
File:                     d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa (raw, json)
Hash identifier:          asxxI4ua159N1ugDcPGW46Ilyy2G4m8/Gj/UxHcgIQU=
Subject key identifier:   C0:78:8A:AE:66:16:BD:05:7A:6B:40:50:CB:AB:E7:FD:2B:7B:3D:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56FD35FD460125E825237A2AB04867DF1D6855F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa
Signing time:             Tue 14 Oct 2025 17:51:57 +0000
ROA not before:           Tue 14 Oct 2025 17:51:57 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fd:35:fd:46:01:25:e8:25:23:7a:2a:b0:48:67:df:1d:68:55:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:51:57 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=0f95e97c89a936f24b9c1650635c239c19fd1ec2c33f33e1089803f48251c7e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:ed:4c:37:ee:54:30:4d:b2:eb:08:57:f4:
                    b2:1c:c8:9a:71:28:76:dd:6f:b4:5a:12:56:0e:b3:
                    35:76:9b:86:8e:0c:6a:cf:8c:91:48:19:ee:dc:16:
                    b8:0e:16:f4:87:20:2d:39:c0:cb:aa:65:0f:25:3b:
                    8b:f9:b2:10:06:00:60:ee:7f:f5:12:28:a6:17:7b:
                    59:19:23:d5:36:df:d6:fb:1c:5d:6d:8c:44:c4:3e:
                    02:43:18:df:13:ac:a2:b4:6e:d3:44:2c:be:52:d6:
                    1c:7f:e1:98:0e:52:6a:a4:16:c0:9b:55:cf:5e:7e:
                    4d:b0:c1:fe:f5:62:1f:0e:19:15:4a:fd:c0:f8:46:
                    f0:41:e0:a8:32:6e:13:2b:76:d7:5c:fd:7e:fc:65:
                    f9:28:2d:e9:ac:e7:92:95:02:ac:c4:b8:cf:b8:07:
                    66:d8:ce:fc:f9:2b:3d:36:c9:fa:ce:df:2c:62:96:
                    ef:11:b6:ce:a4:72:7a:99:6c:82:24:d3:4a:81:44:
                    e4:c4:39:a9:5b:12:56:0a:85:6f:6f:3b:7e:df:55:
                    9b:86:28:e5:55:9f:ee:96:81:97:b7:13:11:b3:26:
                    40:fb:d3:37:0e:47:e5:2f:de:a6:67:b8:d3:77:84:
                    c7:8a:13:39:7c:8a:75:7b:7c:a6:be:9d:d7:2a:3f:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:8A:AE:66:16:BD:05:7A:6B:40:50:CB:AB:E7:FD:2B:7B:3D:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b50e9c-3edf-4fc9-a4cc-de7202665f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:51:cf:41:d0:2d:a0:a2:30:b0:d9:ed:9c:67:99:ec:78:ec:
         4f:34:9d:0f:41:09:51:91:fd:65:0d:bd:c4:38:86:44:1c:10:
         f3:ef:be:18:66:52:9a:c6:48:6f:48:0a:0e:2c:cd:db:9f:ad:
         50:da:c5:60:3d:57:46:82:d3:c7:1e:64:b5:ad:ee:47:64:66:
         c8:49:7d:4d:cd:ca:f2:40:09:22:5a:3b:d9:71:40:39:64:a3:
         fd:11:2b:96:74:f4:ba:24:20:9f:f7:81:28:72:d3:01:8d:db:
         b9:61:db:0a:b6:4f:fb:bb:98:cd:50:15:b5:a1:82:2f:7e:dd:
         c3:f5:66:00:64:42:4e:20:46:26:b7:1f:6f:4c:e1:81:33:d3:
         6f:ba:37:10:d6:4b:cb:70:22:d2:bc:d1:e7:12:79:48:d7:20:
         1c:73:88:b2:63:d8:45:1a:19:22:f2:98:c4:97:c4:79:b0:dc:
         4d:e5:f6:76:2c:28:ad:3b:08:6d:32:e2:b6:d9:e8:14:e0:a4:
         15:43:d1:f5:1e:9d:ca:0f:77:b2:bf:40:79:84:a0:b7:95:53:
         3c:9f:e1:cf:37:dc:6c:2e:10:43:48:10:ac:fe:43:79:cb:eb:
         de:43:78:aa:64:53:25:58:1d:7d:bc:aa:97:d0:ff:87:f3:6c:
         2e:e1:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----