Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa
File:                     e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa (raw, json)
Hash identifier:          YE+9MXd2kIQY1kqwb4dFfEvJ8pfydAS73xA9/fAseZo=
Subject key identifier:   F7:2F:1E:D1:B5:52:DF:30:08:C9:6A:15:83:3F:B4:C3:BB:E1:8C:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       180DFB832B0AF3F3B775F2E6E9E552AA2922B692
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa
Signing time:             Fri 17 Oct 2025 00:42:00 +0000
ROA not before:           Fri 17 Oct 2025 00:42:00 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        121.91.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0d:fb:83:2b:0a:f3:f3:b7:75:f2:e6:e9:e5:52:aa:29:22:b6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:42:00 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=e0d27b179784081a009d79502d59230c02da6a6859d24a2f2449d0545742257b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:22:f3:cc:95:32:c9:13:6f:13:88:c5:32:
                    3c:62:ba:43:5f:7a:17:32:53:d6:f1:3b:14:40:87:
                    b9:94:a3:b2:af:90:5e:e6:a4:16:95:d5:00:b7:14:
                    e1:48:cd:c6:de:6c:d4:dc:9e:52:65:7e:82:41:2a:
                    2a:b3:03:a4:62:76:70:40:40:a7:1c:f1:65:c0:e6:
                    3a:51:8c:a5:34:0d:11:d5:32:18:b0:64:83:cd:51:
                    a3:3f:77:09:a5:3c:d0:1e:cb:cb:ee:56:52:a8:61:
                    5c:de:0c:c1:16:1c:28:37:df:f4:cc:5f:12:25:79:
                    d9:b7:83:66:fe:cc:70:d8:5e:97:5b:2d:52:8a:0e:
                    2c:98:9d:12:1f:a9:7e:0e:52:3d:b0:54:09:9f:56:
                    9d:9f:e0:0f:6a:11:aa:4e:65:d3:94:84:ea:7a:0b:
                    3f:a2:36:17:df:09:22:b1:50:e8:fb:23:4e:d6:0e:
                    5b:9f:24:62:d6:e3:63:5c:e4:84:0e:a2:93:05:9c:
                    d3:88:1c:72:e0:27:20:0d:e9:c1:8b:2e:cc:fd:7b:
                    37:11:c7:51:46:c1:02:7d:b5:6b:26:85:2e:b7:df:
                    19:a4:f4:59:b1:13:5f:b0:c3:e4:43:aa:b8:56:b5:
                    73:66:ca:9c:83:63:c1:1c:ba:df:69:e6:5e:09:0e:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2F:1E:D1:B5:52:DF:30:08:C9:6A:15:83:3F:B4:C3:BB:E1:8C:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.91.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:65:3a:08:39:8d:8c:e3:29:f8:1c:b8:a2:12:a4:48:88:
         a1:7f:89:64:82:9a:9f:6b:8a:36:4a:ca:8c:16:62:ab:91:51:
         de:42:2f:40:c4:95:d1:3e:ed:be:d1:3d:40:29:1a:e5:9a:8c:
         fa:84:2e:e2:ea:d5:c0:8c:ec:86:c4:a6:fe:92:59:a3:45:57:
         71:a3:80:a5:40:59:56:fe:51:38:8b:ef:51:f9:a4:11:43:90:
         3d:a1:66:ab:97:c9:6e:19:50:22:d9:9b:d0:a2:78:df:ee:de:
         18:39:c4:20:e4:5f:b0:c8:70:c9:59:16:c3:80:8a:7c:0e:bb:
         48:92:b1:48:a8:e2:f7:a9:0c:43:ac:35:43:75:7c:f0:a9:f0:
         a7:ce:53:d5:c5:2e:68:bc:81:ee:3c:7f:5d:73:a3:6c:39:77:
         35:c6:8a:7c:13:7d:4a:71:71:62:eb:85:a1:3c:27:92:88:d4:
         fc:20:ae:ea:a2:dc:b0:39:ae:c4:84:09:79:0a:7e:e2:9b:d1:
         a7:45:85:81:5b:cd:93:76:42:d2:4c:6f:55:1c:07:b9:89:b9:
         78:32:13:79:a5:b3:83:91:ae:3b:16:fb:27:ad:27:15:67:f2:
         7c:c6:5c:d4:b3:20:89:ff:98:98:bc:e8:05:6a:94:8c:23:96:
         78:3f:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----