Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f19eab69-f72c-4229-8718-2294d02e19e1.roa
File:                     f19eab69-f72c-4229-8718-2294d02e19e1.roa (raw, json)
Hash identifier:          Y5owxpXTKz5hutIlBls144MagGaPqVa+T+GyepLUxZ4=
Subject key identifier:   10:50:BB:16:A8:AC:E7:70:17:DF:63:80:08:CF:B6:B7:20:14:0D:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AD72EA02767702E0607DEFFBE04034FA072262C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f19eab69-f72c-4229-8718-2294d02e19e1.roa
Signing time:             Sat 18 Oct 2025 02:00:08 +0000
ROA not before:           Sat 18 Oct 2025 02:00:08 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d7:2e:a0:27:67:70:2e:06:07:de:ff:be:04:03:4f:a0:72:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 02:00:08 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=9e46e27852a94f74624f0d3b01477e8d04ec4afbb5b7457c38227130ecc62f9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:fe:ef:e4:0e:e1:9e:74:95:f5:8c:ee:52:
                    7a:83:b4:5e:37:03:d4:c4:85:15:91:1f:08:48:aa:
                    56:e4:32:ff:6b:58:89:25:79:39:02:5c:aa:2d:9d:
                    50:10:37:c7:79:1a:43:f5:1d:32:9c:35:38:5e:17:
                    4a:cd:34:13:70:ad:6b:ec:00:2b:79:99:23:87:ef:
                    50:d1:b0:2c:7a:3c:28:b2:27:ec:ef:5b:0e:a8:96:
                    b9:7d:54:30:52:9f:69:6b:7c:dc:5e:c9:d9:54:e0:
                    69:fc:70:a7:aa:1d:88:e9:8d:19:bd:e4:71:19:87:
                    9d:5e:05:e4:17:4d:9b:f8:3a:1d:58:0c:c0:7f:f3:
                    f0:d3:88:42:93:d1:51:fb:78:32:18:54:09:4a:01:
                    10:c8:a2:1e:ee:78:7d:49:fe:62:5f:6e:59:35:ab:
                    f0:7d:ed:49:8c:8f:3e:b2:19:8e:87:b7:6f:8b:91:
                    fb:d9:49:e2:d1:0e:09:35:01:a3:25:8f:8e:26:5f:
                    ed:53:33:78:ff:f2:81:59:29:40:3d:af:ee:fd:e8:
                    fa:37:82:d7:df:0e:74:52:35:e5:b4:3f:b5:34:49:
                    69:9a:18:56:57:78:ad:be:c8:73:1c:a5:5c:c5:df:
                    2e:b1:f6:ea:cd:04:c1:c9:4b:6b:4d:15:a9:20:31:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:BB:16:A8:AC:E7:70:17:DF:63:80:08:CF:B6:B7:20:14:0D:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f19eab69-f72c-4229-8718-2294d02e19e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:13:56:0f:c9:c4:47:56:2b:23:77:0f:5c:c3:92:5d:1d:
         60:7f:a4:c6:59:2f:94:6a:ca:47:e0:9e:c3:20:fe:a3:6a:7f:
         d2:ef:cb:cb:74:d2:de:2c:2e:1e:2b:75:f5:b2:b6:94:72:12:
         76:56:c4:b8:fa:7c:0c:25:7f:3b:9c:17:4a:51:5d:82:e5:e4:
         f5:93:63:0e:ff:f3:0f:dd:1d:83:e8:bd:e0:cf:ad:0e:ef:18:
         1f:47:74:35:64:c3:7a:3d:8e:46:72:36:4b:c0:8f:43:8d:47:
         5c:44:44:0e:3d:25:08:f2:f3:b1:b3:f4:ad:06:05:0f:87:34:
         a9:c9:7b:1c:65:41:8a:47:a9:c8:6c:10:2d:01:68:96:e8:f4:
         d8:f3:95:39:f3:37:66:3c:41:fb:2a:90:dc:9f:74:8d:25:fd:
         7f:0b:4e:48:bd:f7:5e:86:6e:22:6f:14:bc:7f:a9:90:96:18:
         b9:9a:57:03:14:46:a3:43:43:3a:6b:f4:73:2a:2a:ff:91:8f:
         bc:c1:ad:65:6a:fc:51:0b:64:30:78:25:33:a8:52:40:d0:06:
         c6:00:3f:04:5d:4c:eb:cb:47:68:52:78:10:5a:9a:eb:4f:d3:
         bb:79:8e:78:b0:13:89:97:0b:17:10:31:1d:e1:04:43:b6:eb:
         1c:e8:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----