Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecb4be9f-ab37-4703-8d08-05e8d540f25c.roa
File:                     ecb4be9f-ab37-4703-8d08-05e8d540f25c.roa (raw, json)
Hash identifier:          wM5WQZWKXcaCmYpyI0nbUtq2joeIkdWaWkvYAIMX678=
Subject key identifier:   7B:A5:8C:63:D5:0E:48:15:18:37:B3:BB:A8:7E:2C:72:11:67:A1:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04CC4E3F65111DD633F7B84E5EAF1C98E1C987AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecb4be9f-ab37-4703-8d08-05e8d540f25c.roa
Signing time:             Sat 18 Oct 2025 01:50:54 +0000
ROA not before:           Sat 18 Oct 2025 01:50:54 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cc:4e:3f:65:11:1d:d6:33:f7:b8:4e:5e:af:1c:98:e1:c9:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:50:54 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=b45434a2aeabe45a834d74c854be55ad97317603d89c034cd9ea16b6a2c1f89c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:c3:32:9c:13:ab:dc:5d:d8:a9:97:25:cf:
                    9b:22:0d:fc:66:a4:a7:6d:2c:43:f0:a1:96:3e:39:
                    a2:4c:8c:27:b1:02:61:e4:cc:f8:bb:bf:a9:40:7b:
                    84:9c:1e:68:37:d2:c4:b3:ab:19:0b:53:68:bd:dc:
                    b3:78:29:d6:45:57:de:2b:40:98:c8:c3:a2:0a:23:
                    ad:7b:10:d4:b3:f6:9d:63:8d:16:a2:7c:6d:5f:03:
                    25:4d:8e:e4:b7:1e:93:91:01:3b:da:9e:d1:28:ae:
                    c4:01:ec:49:fb:e9:2d:b7:3c:ad:31:dd:62:e5:98:
                    16:d6:d4:0e:36:e6:66:1a:67:3f:3e:3c:38:cb:da:
                    f4:b7:b0:6c:8c:38:4a:7d:02:cf:5c:0b:c9:2e:ef:
                    2f:42:04:96:85:92:99:76:c0:7f:66:eb:e3:7f:94:
                    bd:a1:0e:fd:1e:3c:ca:38:23:cf:6f:59:5a:b1:29:
                    2c:97:c5:5c:b5:69:bd:51:5f:c8:da:d8:7b:2f:30:
                    76:76:95:de:37:00:ae:68:68:67:6b:2d:ac:9d:4a:
                    3e:3f:cf:f2:1e:99:b1:d0:67:19:63:ca:5a:c8:32:
                    c5:85:24:3f:1d:f6:ac:e3:97:29:0b:a1:8e:f1:ef:
                    5a:52:52:70:a8:ab:39:90:7e:e9:21:3d:02:71:7b:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:8C:63:D5:0E:48:15:18:37:B3:BB:A8:7E:2C:72:11:67:A1:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecb4be9f-ab37-4703-8d08-05e8d540f25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:56:15:a9:ea:56:06:be:80:cc:41:b3:16:ef:f9:88:0f:30:
         bc:5f:ff:bd:47:c0:10:6c:75:9f:32:d3:05:64:99:c6:d0:df:
         37:4d:7c:e2:ae:4b:0d:de:d1:00:93:19:02:5e:d4:e8:23:d7:
         d4:61:82:61:c5:a3:e5:37:63:25:22:29:c6:af:75:2b:66:0d:
         38:2b:01:da:c9:1f:f0:50:9f:42:dd:24:03:e6:a4:ad:18:26:
         cf:b3:22:15:4a:16:89:14:94:dd:cf:f2:76:40:03:88:41:65:
         6c:03:90:24:1b:23:8a:e4:50:ad:88:9e:3f:78:e7:24:14:f2:
         c9:3d:88:8f:10:ab:55:3c:64:d4:6f:4e:ae:69:8b:8d:93:93:
         dc:68:87:a1:d9:37:91:6c:00:6a:93:3a:9b:f3:57:59:a4:fd:
         95:d2:df:d0:d4:c7:ea:c0:b6:95:a6:81:2f:23:2e:ec:b0:fa:
         d5:74:ca:c0:91:e2:88:fe:7c:8f:d3:17:67:68:dc:32:c5:b7:
         ac:32:9c:d6:5b:0f:fc:bc:71:89:06:bf:dd:a1:83:19:75:f7:
         a8:88:62:06:c3:e3:7e:f4:c6:db:63:b5:53:ed:f5:7b:4d:a9:
         76:37:2c:2c:fd:28:40:0b:20:d7:e0:e0:7d:91:1f:7f:0b:b4:
         fe:ec:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----