Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
File:                     e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa (raw, json)
Hash identifier:          A6WpdXVNJbJEc161RQiK075oCoi7HExVUioRShbE/as=
Subject key identifier:   9C:4C:59:DF:30:10:A1:23:30:18:C3:03:D2:E3:99:D1:CE:81:0E:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       178DA2E1F0DF7BB74E9A8BD0964FCB95816AE790
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
Signing time:             Mon 29 Sep 2025 15:02:07 +0000
ROA not before:           Mon 29 Sep 2025 15:02:07 +0000
ROA not after:            Mon 03 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        134.251.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:a2:e1:f0:df:7b:b7:4e:9a:8b:d0:96:4f:cb:95:81:6a:e7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 29 15:02:07 2025 GMT
            Not After : Nov  3 23:59:59 2025 GMT
        Subject: serialNumber=27a47ab9a9dd29e4883fed9e635d4a5abc53651cab1c9e94ee75de75ae03a964, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:00:b1:7e:ed:5b:2c:09:82:ce:f2:3e:fd:
                    aa:b4:60:f5:1d:7b:17:c7:33:cb:5f:34:2f:54:f0:
                    b9:f1:1d:9b:44:89:15:39:29:e2:46:69:67:f9:17:
                    a8:ff:38:19:82:21:7d:02:bd:c0:28:1a:cc:6a:78:
                    20:15:8b:b7:b6:cf:42:5e:f1:4b:3b:e8:e3:79:fd:
                    24:32:dd:90:3b:35:45:3a:92:9c:69:3f:98:8c:a5:
                    c5:06:e3:c6:3a:1c:71:a8:82:6c:d6:09:df:0b:8c:
                    b3:1c:e7:af:ce:4c:34:8b:34:94:68:90:01:71:8a:
                    95:2c:7b:d6:de:18:13:2f:08:79:ee:10:68:cc:53:
                    41:2c:ea:0e:c3:a1:1f:44:6a:68:a2:de:63:ee:7f:
                    8b:cc:1e:53:6c:b2:7a:99:21:de:47:d4:4b:5c:ac:
                    80:bb:97:56:79:d2:66:3c:4f:3f:34:ed:63:7b:5f:
                    9e:d3:91:f7:a6:ee:7f:62:f1:04:52:36:2c:9a:83:
                    b2:8c:4d:cf:ec:f6:a4:9e:26:b2:cd:4f:1a:f5:c9:
                    f9:97:e1:94:07:23:b6:0c:17:7f:b3:6d:b2:23:ec:
                    64:e4:cd:09:7a:5b:5a:bb:22:24:7e:53:fc:c4:b4:
                    84:34:54:d5:87:fb:49:11:d1:27:8e:3c:b4:95:59:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:59:DF:30:10:A1:23:30:18:C3:03:D2:E3:99:D1:CE:81:0E:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d6:be:fa:9b:95:84:2e:d8:b3:3d:55:78:a8:1b:5b:85:26:68:
         26:c9:8a:32:61:e0:bb:0a:54:a5:fb:44:17:da:91:02:ab:e7:
         6c:de:e0:8c:0a:15:bb:7b:4e:c2:57:74:96:40:cb:7b:ac:ea:
         ab:5d:61:a1:78:11:96:ef:82:68:34:6d:6b:3c:8d:91:5a:af:
         42:c1:6f:3a:d9:93:9f:0b:a9:78:26:f1:63:a6:c9:d0:a5:8f:
         e0:97:38:04:e7:5f:a1:77:f5:e4:9f:19:c9:0f:a5:53:60:ac:
         e2:53:55:d5:c9:36:fe:f1:04:96:74:e6:a1:c0:c3:1e:cb:56:
         a7:bf:00:33:9f:7e:3b:ea:8e:01:ff:fd:13:7d:38:a9:05:53:
         5b:47:fa:d7:1c:a7:b2:01:f5:33:62:15:58:2e:f7:9f:bb:47:
         48:22:99:fa:6a:67:9f:95:1b:2f:8f:73:f6:6e:09:b4:7f:83:
         97:ce:d7:67:4a:2f:87:a0:dd:37:11:82:d6:5b:24:bf:5a:2a:
         75:22:cd:da:28:b7:20:be:8e:9e:b7:cc:21:bc:9b:74:f7:76:
         ac:c4:b8:e7:9b:e0:53:ef:1d:02:52:00:4f:cf:e0:1c:48:cc:
         75:0f:25:67:06:ef:e5:46:56:23:6f:10:c1:b1:e0:01:e8:31:
         d5:b5:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----