Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa
File:                     e1715461-5154-4e19-b317-f31a7158d920.roa (raw, json)
Hash identifier:          Ay4tWVuIKaYzMn1Ix9i6TQ2pBacvqdxnk++75xBPuBM=
Subject key identifier:   6C:D8:DD:09:F9:B4:3D:01:B4:CB:2D:6A:21:F1:77:72:99:BD:F7:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       463CE719583BAD4AF27314D481470D1513E83B05
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa
Signing time:             Mon 06 Oct 2025 16:22:06 +0000
ROA not before:           Mon 06 Oct 2025 16:22:06 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.174.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:e7:19:58:3b:ad:4a:f2:73:14:d4:81:47:0d:15:13:e8:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:22:06 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=eb9aecf87e8b981e288c29f2eff3f82e42153daf33e21f72cdcd7b85d8a096e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:84:c8:14:77:ae:c5:ea:cb:ec:d5:72:31:
                    00:6c:e0:80:27:fa:8e:2a:01:04:11:e0:1e:72:a1:
                    2b:d9:2a:04:ef:e0:eb:7e:8f:c3:c4:6c:04:ca:67:
                    30:bc:2a:62:c1:9a:bd:47:d6:76:49:b0:cd:0b:fe:
                    0b:78:12:9f:5b:00:be:76:2d:09:98:96:16:a8:95:
                    1b:15:22:fb:0c:5e:be:99:60:62:19:d8:c9:2f:a7:
                    b1:8d:3e:97:1c:ae:77:6a:8e:3b:08:64:97:c9:44:
                    fd:88:1f:b2:f9:f2:90:a3:03:c7:0b:2e:94:e6:3d:
                    b6:85:f1:85:aa:19:d8:e1:cf:af:0e:de:7a:b6:1f:
                    13:3a:c0:09:f6:36:6a:33:7b:4d:4f:78:1d:bf:a5:
                    5e:95:b0:0a:29:28:f8:13:bc:6e:51:2f:4e:98:18:
                    0f:12:ad:f9:3d:44:79:04:bf:a0:65:0b:b5:d4:ba:
                    42:39:ab:30:97:75:37:95:13:27:80:20:a5:64:2a:
                    ca:c9:9a:b4:e5:1b:86:8e:b4:ff:aa:27:f2:bf:d3:
                    b8:25:54:9d:c7:c0:fa:e6:db:d2:7a:83:ea:0d:e3:
                    73:1a:5d:51:85:06:ac:ac:23:a7:a5:0f:34:87:7c:
                    99:1c:1d:a0:3a:18:30:fd:89:88:8b:31:c9:07:d1:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:DD:09:F9:B4:3D:01:B4:CB:2D:6A:21:F1:77:72:99:BD:F7:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1715461-5154-4e19-b317-f31a7158d920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.174.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:ad:4e:ec:02:df:a2:f9:3e:23:33:b3:b9:7c:47:2c:bb:
         27:cb:6d:b0:cb:43:99:d5:25:f5:26:5e:14:d2:b4:6d:12:86:
         51:26:15:e7:d8:55:49:30:33:9f:1c:31:34:72:76:0d:60:e8:
         7b:a3:66:e5:6e:7e:52:47:1e:79:43:3c:8a:23:4f:37:87:95:
         8f:f0:b4:c3:94:9b:d1:1a:7a:31:99:35:45:b4:b0:6f:18:dd:
         85:00:71:b4:64:4d:2b:31:cf:f5:93:f1:78:d5:0f:11:1a:37:
         e2:17:60:95:b5:7e:f5:56:4e:e6:db:4c:9a:e8:8c:4b:bf:f1:
         09:3f:57:a4:00:b0:35:56:f4:b8:b5:02:53:b0:c9:d2:c1:92:
         c0:fd:ac:50:92:33:a8:58:a6:19:43:79:70:b2:fb:0f:a3:45:
         89:1a:a2:a2:e0:31:bd:d8:55:c2:8f:10:d4:51:57:b6:90:b9:
         03:8f:51:e2:21:e8:f2:87:20:24:70:01:34:16:01:78:10:64:
         c2:82:45:19:e1:e3:f5:0d:df:34:eb:ae:47:55:ef:29:9e:89:
         02:a6:49:d6:19:28:64:6a:56:de:13:36:31:7c:bb:5a:3c:fd:
         3d:5f:f1:38:25:0e:b4:20:bc:4f:1a:af:a1:7e:20:58:77:44:
         52:57:ef:5f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURjznGVg7rUrycxTUgUcNFRPoOwUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA2MTYyMjA2WhcNMjUxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYjlhZWNmODdlOGI5ODFlMjg4YzI5ZjJlZmYzZjgyZTQy
MTUzZGFmMzNlMjFmNzJjZGNkN2I4NWQ4YTA5NmUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8VYTIFHeuxerL7NVyMQBs4IAn+o4qAQQR4B5yoSvZKgTv
4Ot+j8PEbATKZzC8KmLBmr1H1nZJsM0L/gt4Ep9bAL52LQmYlhaolRsVIvsMXr6Z
YGIZ2Mkvp7GNPpccrndqjjsIZJfJRP2IH7L58pCjA8cLLpTmPbaF8YWqGdjhz68O
3nq2HxM6wAn2Nmoze01PeB2/pV6VsAopKPgTvG5RL06YGA8Srfk9RHkEv6BlC7XU
ukI5qzCXdTeVEyeAIKVkKsrJmrTlG4aOtP+qJ/K/07glVJ3HwPrm29J6g+oN43Ma
XVGFBqysI6elDzSHfJkcHaA6GDD9iYiLMckH0UMtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbNjdCfm0PQG0yy1qIfF3cpm99xowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UxNzE1NDYxLTUxNTQtNGUxOS1iMzE3LWYzMWE3MTU4ZDkyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUFrgAwDQYJKoZIhvcNAQELBQADggEBAHiurU7sAt+i+T4jM7O5fEcsuyfL
bbDLQ5nVJfUmXhTStG0ShlEmFefYVUkwM58cMTRydg1g6HujZuVuflJHHnlDPIoj
TzeHlY/wtMOUm9EaejGZNUW0sG8Y3YUAcbRkTSsxz/WT8XjVDxEaN+IXYJW1fvVW
TubbTJrojEu/8Qk/V6QAsDVW9Li1AlOwydLBksD9rFCSM6hYphlDeXCy+w+jRYka
oqLgMb3YVcKPENRRV7aQuQOPUeIh6PKHICRwATQWAXgQZMKCRRnh4/UN3zTrrkdV
7ymeiQKmSdYZKGRqVt4TNjF8u1o8/T1f8TglDrQgvE8ar6F+IFh3RFJX718=
-----END CERTIFICATE-----