Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa
File:                     e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa (raw, json)
Hash identifier:          BIOEDq5nMExTEcUBwGZeiKp7klUPBD64D+IhcbA+7xg=
Subject key identifier:   EE:73:31:1F:65:05:1F:9D:6C:AF:1B:77:51:A4:41:19:C9:F6:4F:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       065C4E2CFCABE049EF25F7A775E662CFC3AA45EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa
Signing time:             Wed 01 Oct 2025 00:51:15 +0000
ROA not before:           Wed 01 Oct 2025 00:51:15 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:4e:2c:fc:ab:e0:49:ef:25:f7:a7:75:e6:62:cf:c3:aa:45:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:51:15 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=09807f49f22db5b255c4311142645b17562f4b30b5daa6ac9449f9ca63d1454a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:76:4a:d8:76:02:e7:3e:7e:f8:d5:70:82:
                    d6:2b:9b:6e:64:50:5c:aa:84:12:96:f1:90:90:85:
                    28:28:b2:11:29:9a:34:68:6b:ad:44:58:f2:fd:46:
                    1a:b1:e5:af:0a:34:a4:9d:19:0c:fe:50:96:cf:a9:
                    b2:76:fa:e8:1f:1a:88:1d:31:70:39:02:e8:4e:a2:
                    51:86:76:c1:70:69:a8:0f:0d:d8:e5:dd:af:70:b1:
                    54:1f:10:c9:29:1c:a9:7b:6b:4d:2c:cb:48:8c:03:
                    b7:d1:7c:e2:b6:f6:47:6b:21:ae:11:5d:34:ce:b9:
                    71:1e:db:6e:06:65:73:97:5e:25:a7:83:2c:4b:bc:
                    23:57:0f:3d:27:ba:93:5a:88:89:3c:c4:bb:6a:26:
                    ce:e8:74:f0:57:ad:58:8c:bb:42:97:b9:94:92:37:
                    1e:cf:77:ef:a4:53:1c:ac:5c:55:e6:16:fd:2e:c6:
                    bb:7e:1e:49:76:47:79:bf:30:f8:04:8d:3f:d4:af:
                    09:80:91:b8:1e:8e:08:4d:ec:7b:d2:c1:11:0f:c7:
                    3e:90:7f:3b:58:5d:ad:c3:91:73:d7:f2:15:ec:c6:
                    78:c2:cc:90:25:9b:0d:dd:62:ae:89:db:a4:1c:67:
                    e0:3d:44:ca:cd:21:8b:fd:07:53:f1:7a:0b:77:fa:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:31:1F:65:05:1F:9D:6C:AF:1B:77:51:A4:41:19:C9:F6:4F:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:93:27:69:11:30:3c:05:42:99:24:fb:28:8b:68:57:4b:
         aa:03:39:af:d7:0f:c9:34:3b:0a:41:fe:e6:e6:6b:3a:f1:7d:
         65:84:8d:8d:1a:4c:ba:fd:24:ca:5b:f8:d7:c9:0d:fd:b8:75:
         b9:ed:51:4d:50:4b:df:6d:c1:a9:61:75:be:21:c1:ff:33:10:
         4d:f1:f6:b3:20:5e:51:ac:6c:52:51:b8:32:42:de:c0:42:b0:
         df:0f:7d:97:e3:90:e4:0f:c2:e2:ea:b8:d0:74:a7:d5:1a:df:
         e9:39:eb:2b:bd:12:7d:f3:35:52:0e:a4:80:c3:39:48:11:c8:
         01:71:22:4a:f9:53:4a:90:49:13:bd:8f:d5:47:6a:b5:6a:d0:
         95:5a:8b:2a:89:14:e2:47:51:7b:10:44:c7:25:38:d1:85:c6:
         61:0a:63:0f:95:9c:0f:a5:69:c0:7b:88:62:f1:cd:ae:b1:9e:
         ed:2a:5a:eb:71:44:94:8b:4e:4f:9c:56:74:aa:22:49:1e:34:
         bf:9f:48:3c:d2:aa:7f:61:6f:bb:04:7a:65:55:06:81:d1:b1:
         2b:96:70:d7:2c:81:48:8e:80:8c:98:d8:85:cd:e6:ac:bf:5d:
         80:10:7b:23:76:8d:7a:10:5e:21:b5:ae:5a:2e:30:9b:64:07:
         62:04:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----