Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa
File:                     df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa (raw, json)
Hash identifier:          cerF2cP9uZ+oeVNs2ef0wtIXK3qu/Afsd2XjQ7Hjvco=
Subject key identifier:   A8:EC:57:ED:6E:32:27:72:B5:DA:A5:8F:80:BE:2C:4C:38:2A:B4:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1DAEF000F9148557E7204C3B853CC8B540DC7C60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa
Signing time:             Sun 19 Oct 2025 00:10:10 +0000
ROA not before:           Sun 19 Oct 2025 00:10:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.252.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ae:f0:00:f9:14:85:57:e7:20:4c:3b:85:3c:c8:b5:40:dc:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:10:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=dcceab2e58fa72c1237b4d3f02970fa46de5007c44287d36caa4fa44d70663d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:81:84:61:4d:49:c8:ed:14:17:1e:0a:1d:3f:
                    27:73:da:ff:ac:04:78:b0:46:90:5d:21:c2:5b:b9:
                    14:80:24:7f:ba:fa:bb:ce:3c:af:93:93:21:87:2a:
                    9f:3a:49:c4:03:34:31:6f:a6:21:46:ac:b0:2e:09:
                    bd:67:e7:49:6f:8b:f7:ba:2b:5d:41:52:ff:ff:45:
                    41:53:27:8f:9d:ad:a1:76:4a:76:0b:3d:ed:73:e7:
                    c1:c6:44:64:ac:31:d1:a0:3e:ad:d8:a2:d6:7c:6f:
                    0a:31:f5:e0:c2:e5:3d:df:c2:da:75:e0:0f:cb:24:
                    99:06:6f:07:5b:57:e0:69:b2:86:3b:ab:ae:79:6c:
                    50:6f:df:20:55:31:a2:be:39:e4:8d:e8:df:6b:78:
                    80:30:96:4e:68:7c:4b:47:54:0f:90:bd:d4:7b:2a:
                    f8:0c:30:ac:46:7d:2d:d9:4d:14:2f:cb:66:d1:29:
                    ec:af:90:20:cc:0f:0e:89:52:98:c8:82:21:c1:8c:
                    75:a4:6d:01:94:a5:35:a8:dc:73:26:b4:76:99:8d:
                    a0:11:9e:15:f2:82:32:e7:84:cf:0c:20:48:0d:05:
                    b5:6b:aa:9d:58:81:58:35:08:8d:77:f4:0c:a9:80:
                    b0:7e:75:b9:04:c1:fe:69:3d:6c:07:af:29:ae:a1:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:57:ED:6E:32:27:72:B5:DA:A5:8F:80:BE:2C:4C:38:2A:B4:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:07:78:de:7c:b9:f3:bd:90:cd:7e:fd:a6:8c:5a:0c:b8:24:
         70:16:8f:b4:85:13:42:e7:bf:47:08:37:c4:6f:bd:0e:38:e4:
         3e:0e:0a:33:79:4d:87:cc:78:25:9e:41:c7:ae:97:a0:64:6c:
         98:85:39:21:7d:d3:05:e3:b6:cf:7b:7d:77:c2:78:03:fa:86:
         5b:bf:c2:ec:cb:b2:46:4d:f0:e6:5f:6f:9b:5d:7f:e0:ba:77:
         94:5e:5b:81:70:1c:19:02:0c:25:d5:d3:92:a2:3f:ab:60:cc:
         69:a5:19:35:cd:7e:b4:78:93:47:14:b7:de:22:17:1c:a7:c6:
         ba:3d:57:6d:88:94:c9:08:4b:93:7c:b1:da:f6:4e:b4:65:cd:
         fb:35:0d:93:e4:54:2e:cc:ce:67:5f:80:3d:57:5a:a1:0c:ba:
         8b:4b:93:4e:37:03:a6:12:04:21:e6:ee:9e:7c:1a:d6:c2:54:
         42:8e:df:11:7e:55:09:8f:d4:b0:64:3e:7f:f0:63:7e:14:88:
         19:b8:22:a4:a8:18:bd:f3:f2:35:cd:6d:4c:8a:6a:c8:e5:64:
         d0:89:6d:18:66:01:3d:d4:40:94:c1:ba:64:03:42:03:57:27:
         7b:0c:08:0c:ee:35:51:ec:0f:6f:bd:69:f9:c3:13:cb:49:f6:
         db:0a:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----