Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75c483f-851e-4e49-b6ff-6a47083ceb0e.roa
File:                     e75c483f-851e-4e49-b6ff-6a47083ceb0e.roa (raw, json)
Hash identifier:          l1veWLUO+5QPcFrLGQ3iUpzj4OgZ/dXRgQEABp+MMxc=
Subject key identifier:   CE:59:34:8F:74:F9:FB:24:E9:D7:0A:36:AE:E8:AA:C2:2A:E9:30:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17FDC9D037B6C163610BD9491C175C527DFE5BCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75c483f-851e-4e49-b6ff-6a47083ceb0e.roa
Signing time:             Tue 14 Oct 2025 16:22:52 +0000
ROA not before:           Tue 14 Oct 2025 16:22:52 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:c9:d0:37:b6:c1:63:61:0b:d9:49:1c:17:5c:52:7d:fe:5b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:22:52 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=aac6b4d4b13bb09c3731b9274f4152c7a6b65d6da8760b36947193878873cdff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:85:40:cf:e4:b1:fe:e1:37:a9:e4:30:e1:
                    78:3e:44:9b:14:01:66:d5:40:f3:7e:fe:a0:df:de:
                    82:2f:81:17:47:1f:7b:b5:8d:39:05:a8:28:06:66:
                    2f:67:0e:f4:16:32:4e:07:95:89:79:42:c1:64:9b:
                    bf:b6:11:cc:40:18:5a:ed:b7:e7:2b:c0:cf:43:19:
                    7c:fc:10:7e:7d:96:df:74:ae:61:8f:5b:71:1a:51:
                    93:1c:b1:16:6f:a4:88:16:c9:c1:67:65:43:89:d6:
                    79:dd:a2:13:04:2b:eb:c8:c5:b4:a1:e7:85:c2:9c:
                    a4:95:27:09:31:80:97:95:ff:ac:13:e6:cc:92:08:
                    c8:7b:4d:ea:28:59:c8:53:de:58:d5:dd:21:9c:d2:
                    40:fb:ef:af:1b:a0:fe:27:5c:29:7e:c9:ed:e4:81:
                    cc:67:14:53:68:a2:1f:eb:6c:c7:c4:be:3a:f2:8b:
                    5c:82:b1:d2:96:78:03:c1:b1:b6:36:c4:83:fa:58:
                    7f:93:6a:8d:86:2c:b1:8b:1a:32:3a:24:a2:48:6d:
                    71:d3:f8:bb:07:24:62:f6:8d:dc:21:f5:04:93:3b:
                    6c:3c:3a:c0:c3:07:89:2b:71:d7:0b:bf:57:8a:a0:
                    f4:60:1c:e2:51:b1:78:78:f8:70:ad:66:f8:b0:25:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:34:8F:74:F9:FB:24:E9:D7:0A:36:AE:E8:AA:C2:2A:E9:30:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e75c483f-851e-4e49-b6ff-6a47083ceb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:03:0a:ac:ac:bb:af:61:a2:36:36:f3:05:d7:6a:03:08:
         5b:cd:93:a4:ef:6c:fc:7b:3a:bd:fc:8b:86:20:e5:b7:39:4f:
         9d:29:81:08:a3:4c:5d:6c:1d:53:aa:ed:d0:b8:12:d1:41:62:
         6b:d2:71:32:3f:54:c9:ee:bd:4c:a7:8b:ae:1a:d4:c5:9e:9d:
         3c:97:f2:62:85:b6:aa:5f:91:a8:79:fe:cc:31:2e:a7:1b:30:
         d1:31:2a:4d:a6:b4:6a:83:b9:bd:ba:32:67:9f:ee:21:87:cf:
         df:e4:2c:4e:3d:70:42:d0:bf:53:72:28:4a:36:3b:bc:f6:9c:
         44:0f:65:9c:dc:43:0f:5c:9f:6a:a0:36:dd:1a:26:8f:a9:69:
         fc:68:05:18:41:5e:e9:82:1e:85:69:4b:3b:ab:c2:07:3e:75:
         b5:23:53:7b:f5:00:d9:bd:1c:09:83:fa:ce:c1:9f:77:96:53:
         eb:e0:fc:d4:66:4a:8e:e4:b5:99:f4:9f:e4:b9:ac:3c:4a:6f:
         33:c2:9c:9c:d3:62:3b:d9:33:a8:ae:10:81:a4:f6:43:90:ed:
         ac:a3:42:cb:7a:2b:ea:ce:54:46:93:a9:dc:62:a3:9f:99:6c:
         75:38:93:de:6e:eb:1b:d0:0b:6f:2d:3b:59:f8:21:f6:7a:a3:
         5b:7c:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----