Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa
File:                     d9906b42-5c34-487d-817e-6eea6796d971.roa (raw, json)
Hash identifier:          jgaKuuzZfvqvcGZsEZYmlcTpshb4Hf0Cyc7lPb8cBcI=
Subject key identifier:   79:D1:9B:5C:C8:54:3B:55:61:BA:7A:14:AC:EA:33:CB:C9:74:85:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       238B9BCF0BAC05F8F336FBAD599188394D6C26E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa
Signing time:             Wed 01 Oct 2025 00:11:58 +0000
ROA not before:           Wed 01 Oct 2025 00:11:58 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.73.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:9b:cf:0b:ac:05:f8:f3:36:fb:ad:59:91:88:39:4d:6c:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:11:58 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=4182c831a8eb28b7ac9cd428870aef601ade78ad7a42f0a5536cd9bd91fef3b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:7f:fc:bb:c6:c1:49:21:02:94:87:82:be:
                    8c:3c:7f:9f:4b:f1:0e:84:03:7c:69:62:d4:f9:a8:
                    5d:db:7b:4a:c9:d8:09:0f:ec:5f:21:75:24:25:b1:
                    4a:7a:f6:46:55:be:3a:ec:1b:e2:33:69:d4:03:9e:
                    b5:f0:bd:64:b3:cc:81:6e:c2:c4:56:e2:7a:c5:12:
                    7a:1a:b5:24:84:02:fd:07:95:99:a0:6a:02:19:84:
                    73:5d:d1:44:0d:6b:46:1e:a4:a9:81:e0:b8:19:66:
                    66:d7:03:7a:f2:61:d5:72:94:7b:9b:01:64:9f:f0:
                    e4:a6:f7:7e:fb:09:1f:3a:64:23:01:5d:71:84:79:
                    37:7c:25:1f:d4:41:f6:1b:81:fb:e8:47:dd:4f:85:
                    09:e7:bd:d2:ad:05:28:7f:13:ff:40:ac:b3:6b:f2:
                    3f:f8:ad:ef:94:de:9f:47:5c:8f:6b:78:ca:72:53:
                    8d:7b:d2:f0:5c:29:69:14:65:a2:49:45:d8:98:8e:
                    87:27:92:e4:72:22:e7:b4:ba:68:3c:40:c6:f9:d9:
                    30:1a:de:64:22:3c:45:b1:94:8c:aa:8b:c7:71:cc:
                    7e:fe:ef:8b:3c:a3:87:ec:42:0f:e1:df:a8:91:12:
                    7b:36:aa:eb:ce:c0:dc:1d:7c:e6:eb:4f:0b:7d:4b:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D1:9B:5C:C8:54:3B:55:61:BA:7A:14:AC:EA:33:CB:C9:74:85:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9906b42-5c34-487d-817e-6eea6796d971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:ab:4a:5c:4b:aa:bb:9f:00:0a:5e:3c:20:07:6c:1c:c0:
         bb:d8:a6:34:f6:d7:b0:67:7e:f1:3e:5e:e9:8f:a4:6f:17:aa:
         7b:b9:70:c4:ae:80:11:a6:67:39:bf:24:6e:4c:83:84:e1:37:
         17:58:e5:70:42:90:00:aa:d5:91:a3:1d:23:9a:54:3a:13:d6:
         1d:b8:66:ae:5c:1f:0e:6e:c0:30:45:a9:59:12:5a:2b:d6:dc:
         b1:ff:39:ba:dc:6f:51:a1:51:bf:ff:1e:da:c5:f3:fc:29:4f:
         aa:b7:d6:e8:29:54:9b:65:df:21:a0:57:45:82:5b:0d:eb:bf:
         ba:35:48:bf:cc:84:7d:e3:48:81:5f:33:13:89:2d:57:f5:86:
         cb:f7:18:50:46:3d:fd:5b:59:bc:f4:4a:0e:80:b0:b9:6b:21:
         df:5a:e9:bf:e0:86:73:0e:2f:77:a4:4a:41:48:4c:a4:4f:cf:
         6c:17:b8:48:2f:16:1c:89:a4:4c:62:8c:6b:84:03:ac:c7:dd:
         d6:f0:2f:e7:03:4c:4a:2e:01:81:5f:3f:8a:6d:72:2c:e9:57:
         da:b3:60:de:84:ae:60:f4:c2:f1:49:95:35:07:71:31:a7:99:
         78:fd:41:a2:e2:f8:4d:ee:65:a6:f3:21:53:1c:3d:5b:df:08:
         7d:79:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----