Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa
File:                     f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa (raw, json)
Hash identifier:          LapInv1A9kNr5cS27vnaxk9+pJyrOIbDjK3y08h3YjE=
Subject key identifier:   16:BA:6E:13:0C:F1:65:8E:71:1B:61:09:FF:6D:79:44:85:E7:D5:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       039946E0780D83772D91600BE121FD22C7EE35DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa
Signing time:             Mon 13 Oct 2025 15:51:13 +0000
ROA not before:           Mon 13 Oct 2025 15:51:13 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:99:46:e0:78:0d:83:77:2d:91:60:0b:e1:21:fd:22:c7:ee:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 15:51:13 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=3f78058538fb9a7d1418f8d1d6b2636690789474326e2130a4253bf862f46545, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:35:9d:8a:96:cf:33:3c:7c:f5:d7:6e:86:
                    04:bd:be:7f:dc:8e:fb:a1:53:36:f6:a3:0d:7c:11:
                    06:01:a4:d9:1d:25:32:e4:e8:ee:76:bc:0d:45:c4:
                    0f:83:7b:9e:41:38:c2:f7:9e:8a:45:bd:22:dd:73:
                    ff:e6:9c:01:32:56:c9:44:e0:26:bd:09:4a:65:e7:
                    c5:74:68:d7:d6:f4:d0:9a:e0:fe:99:8d:5a:cf:ad:
                    0d:32:fe:1e:fe:66:eb:61:f6:42:1a:f9:11:b5:bf:
                    51:66:9a:ee:34:8e:48:d4:31:b0:96:66:eb:87:52:
                    6c:8b:5c:ab:99:c0:e1:86:a4:31:3e:e2:47:04:76:
                    ea:71:32:98:28:59:33:92:89:31:e6:3a:29:3f:f0:
                    4d:df:ae:d6:4b:08:96:a3:4f:90:d3:8d:c4:40:47:
                    44:ff:9e:d8:86:89:6f:1d:80:ed:24:18:26:ed:09:
                    fa:83:48:13:75:73:9f:30:26:0a:7c:04:a0:49:8f:
                    c3:95:c8:d1:14:c0:af:dc:8d:8a:63:af:b8:32:2c:
                    c0:67:26:53:bd:2d:2e:2a:db:98:09:00:b9:9a:28:
                    77:7f:5d:e9:2e:4b:8f:8b:8b:70:35:bb:2a:98:13:
                    bc:9a:c6:f7:1b:44:51:41:5c:91:fb:d3:36:c4:88:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:6E:13:0C:F1:65:8E:71:1B:61:09:FF:6D:79:44:85:E7:D5:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f16d4dd5-d615-497c-8387-a1a9ceefdbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:ff:dc:67:a9:60:86:30:e8:ad:35:7e:16:b1:4b:cf:a3:
         c5:fd:cd:1e:de:5a:2f:25:4b:ac:18:77:58:cb:90:a6:15:e8:
         4c:dd:f1:79:d8:13:6a:ae:ec:b3:fa:1d:ed:70:f0:d1:4f:2f:
         31:a0:04:1b:07:79:db:a4:4e:fa:32:69:c7:bc:02:47:52:ba:
         06:64:bd:72:f8:1d:af:50:2a:6e:34:13:c7:96:4a:bf:33:f2:
         01:68:41:20:18:f8:00:39:65:09:ec:ae:6c:fb:20:b6:e0:d4:
         91:39:9a:dd:86:d3:84:56:98:e0:49:ac:67:c5:f7:b9:54:5f:
         64:1d:0a:0e:6f:14:cb:48:37:c2:dd:58:78:23:ae:3c:d6:ac:
         e0:23:46:39:89:13:97:2b:43:7b:86:9c:ef:48:5b:19:43:9a:
         45:11:cf:c0:e6:dd:6e:0b:c5:0c:c7:40:45:b0:26:74:e5:4a:
         fe:f1:2f:33:2d:6c:17:56:37:81:6a:01:9f:31:41:6d:65:b3:
         c2:67:b0:14:cd:57:15:ae:84:a4:90:2a:48:d5:67:2d:15:f8:
         44:2c:7d:18:bd:df:4d:04:8c:b0:cd:8b:f1:a6:e3:8a:c7:69:
         ab:a3:52:cd:9c:b5:5d:54:b2:79:9f:56:31:88:cc:02:e1:5d:
         2d:07:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----