Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa
File:                     f971657a-2046-44fe-8bba-1d18534128a9.roa (raw, json)
Hash identifier:          RgovAIbWsKm5l6QuBKmCQebfevH2DnXfGI+HYyHm6Pk=
Subject key identifier:   34:27:92:96:45:A1:3D:86:BC:1D:79:3C:F1:ED:9E:1B:08:0A:51:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D01777C483851F7DE4F3249EFA3F7B7463B7545
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa
Signing time:             Sat 18 Oct 2025 01:21:27 +0000
ROA not before:           Sat 18 Oct 2025 01:21:27 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        5.179.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:01:77:7c:48:38:51:f7:de:4f:32:49:ef:a3:f7:b7:46:3b:75:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:21:27 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=7f4a20fe3a9cadc5e026dab9ca77dcc6f8db08397883fcf32831e19900a894c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8e:95:4a:b4:c6:bf:aa:62:f2:9a:d2:9b:ad:
                    65:25:9e:13:22:49:4a:22:9f:67:ea:a5:92:ef:4c:
                    af:3a:66:8e:31:8b:57:94:9d:2d:10:a6:ee:6d:34:
                    7c:68:2a:3d:06:ae:59:bb:bd:ed:41:74:49:1c:8a:
                    df:30:96:4a:61:d6:47:3e:a5:e0:d3:0c:03:15:30:
                    8d:8b:0b:bb:16:e3:9d:8d:ef:d0:c9:ae:60:3f:05:
                    f0:34:c6:75:6e:aa:c1:6b:ed:0d:25:53:7f:87:8e:
                    eb:b7:38:e1:1b:2d:c4:a1:25:4f:d0:11:82:49:e6:
                    d3:11:68:66:74:3a:32:f8:6d:8f:34:b3:e4:b6:79:
                    de:d4:2d:53:a2:7d:67:5a:d8:16:6b:c4:a9:a9:78:
                    67:e6:a8:dc:87:11:de:d9:e6:39:f4:0d:e9:56:d5:
                    c4:78:85:00:39:0e:b7:75:9e:9b:1f:e0:47:b9:54:
                    a1:ff:92:64:a6:80:b0:63:c5:70:a1:f1:f7:56:b5:
                    c8:14:72:c8:1c:8f:59:2a:99:43:62:45:ee:81:71:
                    bb:4d:d7:bb:fb:bb:cd:21:4f:b8:5a:5e:b9:1a:fd:
                    2f:5a:21:5e:32:57:cd:db:7b:37:82:97:5a:64:3b:
                    27:3a:f7:a7:74:d8:03:9b:03:1a:0d:d5:fb:d9:69:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:92:96:45:A1:3D:86:BC:1D:79:3C:F1:ED:9E:1B:08:0A:51:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.179.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:99:76:26:df:32:48:d6:5d:79:dc:ed:62:b8:1e:c1:b1:3d:
         27:a8:40:5a:be:04:e4:19:cd:33:84:66:0d:4d:ca:31:68:43:
         e8:0f:ec:71:d4:15:84:05:2f:f5:2c:31:8d:84:a9:1d:7c:f2:
         9e:7b:61:51:dc:48:ef:c2:dd:07:ae:91:32:f5:0e:1d:2a:26:
         06:58:c7:c3:f6:92:64:96:96:41:ca:1c:1e:ff:5e:f9:91:4f:
         9b:25:fe:0f:f9:b5:4d:7d:8e:53:23:c3:d6:34:de:11:96:73:
         45:29:b5:77:09:55:5a:92:2b:92:45:43:18:8e:27:0e:0d:b4:
         7d:3a:9f:58:24:68:80:49:b2:b4:70:86:57:6b:58:4b:e5:5c:
         5b:b9:14:d5:e2:f5:78:bd:93:e1:12:ec:50:76:8e:68:fc:c1:
         18:2c:9c:75:1c:80:da:53:21:41:46:df:41:f0:1a:35:17:02:
         41:d2:85:ad:24:4f:a7:c4:fa:45:fc:31:9e:39:e2:3b:0f:ae:
         3a:2a:f7:f2:a2:5b:fc:37:6f:6f:37:60:e8:b7:5a:86:ff:bd:
         1c:d3:c0:23:8a:8e:ea:c0:49:1e:5f:8e:7e:86:a8:7e:0f:0e:
         2b:3f:0b:ff:73:a9:ea:de:d0:50:e9:c4:53:80:c1:01:e0:17:
         d8:71:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----