Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa
File:                     e454b87e-3750-4f94-a7d0-f1c6408adee5.roa (raw, json)
Hash identifier:          MPFsCrQO9YeHPTeYPH97YkFI5xYBIT3g2Z1uRsIWucM=
Subject key identifier:   42:1F:DC:7C:D5:E6:EA:6C:C7:1B:8C:48:E2:FF:6E:F3:EE:4A:B8:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18DCB982072E7FCAA3E19B6D08B6464367C5B46A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa
Signing time:             Sat 04 Oct 2025 00:38:58 +0000
ROA not before:           Sat 04 Oct 2025 00:38:58 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.56.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dc:b9:82:07:2e:7f:ca:a3:e1:9b:6d:08:b6:46:43:67:c5:b4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  4 00:38:58 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=6b96766f9ba9e186fad1c75db8077805c03e005bf6906d4581a616ac2089580d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:73:25:cf:63:49:fd:b7:9a:14:a9:ca:ea:
                    16:f7:74:c7:40:6a:f4:eb:09:b7:bd:95:89:63:83:
                    ce:26:af:e7:24:5e:5d:31:33:81:d2:12:a7:02:18:
                    c7:ed:f8:70:29:5d:3e:af:0b:a3:f7:3f:88:eb:51:
                    fc:84:aa:4a:35:98:2d:fa:7e:b0:94:8f:8e:d6:46:
                    ce:75:f6:7a:8e:bd:46:51:c6:62:b3:55:df:15:47:
                    f9:8e:82:f6:76:9e:62:53:b8:0c:24:bb:9d:c7:95:
                    38:7c:1b:8f:c2:ea:6f:e0:8a:98:02:c8:3d:21:b9:
                    33:9e:66:df:33:e7:32:a6:89:e0:04:9a:e5:34:e8:
                    bf:99:76:35:bc:51:22:9a:bb:49:87:4b:15:95:a5:
                    71:cb:60:4b:5e:dd:01:14:bb:2a:ce:5e:f4:2c:5e:
                    7a:a1:5b:0c:a3:a9:d9:1e:40:f3:96:17:de:f9:c4:
                    37:31:e5:0d:c7:4c:32:97:09:a9:b0:cd:d5:39:39:
                    88:15:d6:40:48:cb:2f:4b:8d:87:79:ef:da:de:2c:
                    a0:f9:76:94:b2:1b:cd:ab:cb:8b:29:5d:d5:b4:96:
                    66:82:f1:a4:f2:7f:7d:d1:82:c2:9a:25:3a:aa:47:
                    39:93:d6:da:e5:66:b1:83:98:48:f1:4d:60:c2:b4:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:DC:7C:D5:E6:EA:6C:C7:1B:8C:48:E2:FF:6E:F3:EE:4A:B8:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:88:c9:05:3e:6e:33:36:a4:ed:40:f2:5f:ab:cd:f6:06:b6:
         db:b0:9a:2b:79:da:a8:ab:1a:69:de:18:1d:f3:19:e9:12:86:
         b0:90:87:44:9f:7c:bc:2b:55:84:b7:a8:9b:4e:1c:09:ab:c6:
         b6:7f:7d:b3:0a:0f:fb:c1:53:4c:e8:80:c9:72:20:a5:74:81:
         9c:38:9f:32:0c:46:c4:21:bd:35:3c:41:0c:da:8f:22:4a:f8:
         02:53:bd:89:78:e2:1a:23:3c:f8:fd:3c:fe:8f:52:39:f5:da:
         7f:9a:17:ea:d8:f6:dd:c1:43:34:35:99:ff:68:1f:b8:11:6d:
         02:83:e3:42:e0:30:19:1f:bf:39:de:5a:11:87:8e:b7:2f:63:
         49:cb:90:cf:55:dd:d8:41:90:a9:0f:85:44:52:c8:bf:b4:1b:
         76:15:0e:1e:20:2f:34:0b:f3:70:02:45:f3:5f:ae:6e:53:71:
         13:69:48:13:6f:43:a2:8d:cd:65:cc:a0:b5:25:19:d5:2b:b8:
         32:1f:61:6f:55:b8:4c:14:8f:bc:c9:73:f6:a6:fa:02:bf:c5:
         83:32:81:c0:c6:de:0f:45:dc:7c:ee:08:a6:b6:f2:58:48:2e:
         0b:44:a8:06:9b:6c:63:5c:7d:16:5b:ad:fb:d0:6d:da:38:d8:
         3e:1d:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----