Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa
File:                     f9ad2b65-bee0-4429-a46c-6a261fba811b.roa (raw, json)
Hash identifier:          Mvy/s+ejomUeOCxHk5uRKNvVcUWwCqNqI1PZZrKkKoY=
Subject key identifier:   61:96:BD:4B:A4:97:7D:D4:13:A2:FB:33:9E:C9:DB:36:88:D3:2C:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6BACA106257898A8105BDF7D893839C7FC891544
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa
Signing time:             Wed 08 Oct 2025 00:11:14 +0000
ROA not before:           Wed 08 Oct 2025 00:11:14 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.173.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ac:a1:06:25:78:98:a8:10:5b:df:7d:89:38:39:c7:fc:89:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:11:14 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=abe989da87d9d4654bf1163351f5c092f55a44ed5413da75b0267f1a10331dc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:fc:60:c4:6c:73:2c:ec:19:bd:e6:5a:fa:
                    34:05:dc:29:8d:dc:e4:2d:d4:6b:d4:00:05:ff:b9:
                    ff:16:7e:6a:f9:29:a3:e6:d6:3b:f8:38:d3:fc:b8:
                    f2:ea:3a:1d:98:4c:f6:e8:36:44:bf:ab:d5:01:ae:
                    ab:10:97:15:06:c8:c9:e2:ee:ae:6e:cc:04:ca:6a:
                    f7:b2:63:7a:ef:bb:42:0d:3a:f2:24:b0:e1:d9:9c:
                    20:32:8e:7c:e9:98:7d:f5:f9:c3:20:2c:aa:ef:cd:
                    b0:d8:e6:68:40:07:e7:b2:a0:f0:9b:5f:81:3f:bb:
                    71:18:dc:0c:17:81:71:df:ea:6c:29:14:82:0e:28:
                    5b:0c:4e:79:91:1c:64:b2:00:d4:4f:bf:45:ae:2a:
                    8d:c2:b7:e7:dc:cc:16:e7:b3:df:6a:3e:17:a4:a5:
                    41:91:32:06:de:d9:49:43:19:e6:e8:8b:65:c1:17:
                    39:8c:3e:43:99:56:ca:24:ba:ec:c7:9b:e2:af:95:
                    40:61:e2:2e:7e:11:6a:9a:e8:12:a3:8f:8b:63:f3:
                    a2:f4:d4:14:f7:df:c7:c6:31:bc:00:fe:84:1d:86:
                    d3:ef:d6:9a:51:07:0c:be:d0:32:12:24:ba:d3:a4:
                    e7:fc:1c:10:9a:fc:5a:47:f2:48:02:2e:49:8a:54:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:BD:4B:A4:97:7D:D4:13:A2:FB:33:9E:C9:DB:36:88:D3:2C:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:f9:26:0a:ab:39:90:09:0f:aa:45:fb:13:f1:87:ad:1e:
         ec:f9:24:ab:72:b1:ad:f4:13:e4:57:f0:89:a9:de:36:1e:7b:
         c9:e0:2a:b1:b9:41:9f:3d:79:a1:13:29:e8:a9:25:78:23:08:
         69:50:61:bf:dd:6e:a5:36:9e:15:16:ab:a6:5e:a0:f5:85:bc:
         18:25:95:aa:44:0c:29:80:4a:4b:c5:c8:de:1a:d8:10:76:9f:
         ce:55:cb:01:44:21:d5:17:f1:7c:a1:56:16:5d:07:ff:21:f6:
         c8:16:bf:84:b3:e4:cb:08:5d:1d:ac:98:e5:fe:6b:c2:c9:d0:
         3f:10:5c:18:97:8a:a7:f3:48:68:76:4f:8d:5b:78:de:65:1e:
         46:6c:88:96:90:80:72:ab:5d:8c:0b:8e:e4:8d:df:9c:d9:02:
         a4:62:46:bb:72:8d:bd:43:2c:cd:a0:cb:6b:6b:10:38:15:11:
         74:56:12:4a:60:9e:75:11:c1:00:aa:b2:dc:a4:6c:01:af:1a:
         59:2f:1e:75:d9:21:a7:04:4c:70:7a:2a:1d:12:3e:03:99:0f:
         ad:0f:cb:a8:74:d5:de:ec:69:23:1e:71:5b:c3:7d:b3:f1:22:
         ed:39:50:ba:bc:52:fc:49:1e:f0:e2:b4:ad:22:4c:f1:3d:5d:
         02:d4:98:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa6yhBiV4mKgQW999iTg5x/yJFUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDAxMTE0WhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhYmU5ODlkYTg3ZDlkNDY1NGJmMTE2MzM1MWY1YzA5MmY1
NWE0NGVkNTQxM2RhNzViMDI2N2YxYTEwMzMxZGM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6TvxgxGxzLOwZveZa+jQF3CmN3OQt1GvUAAX/uf8Wfmr5
KaPm1jv4ONP8uPLqOh2YTPboNkS/q9UBrqsQlxUGyMni7q5uzATKaveyY3rvu0IN
OvIksOHZnCAyjnzpmH31+cMgLKrvzbDY5mhAB+eyoPCbX4E/u3EY3AwXgXHf6mwp
FIIOKFsMTnmRHGSyANRPv0WuKo3Ct+fczBbns99qPhekpUGRMgbe2UlDGeboi2XB
FzmMPkOZVsokuuzHm+KvlUBh4i5+EWqa6BKjj4tj86L01BT338fGMbwA/oQdhtPv
1ppRBwy+0DISJLrTpOf8HBCa/FpH8kgCLkmKVIbZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYZa9S6SXfdQTovsznsnbNojTLFgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5YWQyYjY1LWJlZTAtNDQyOS1hNDZjLTZhMjYxZmJhODExYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbYrQAwDQYJKoZIhvcNAQELBQADggEBAK0B+SYKqzmQCQ+qRfsT8YetHuz5
JKtysa30E+RX8Imp3jYee8ngKrG5QZ89eaETKeipJXgjCGlQYb/dbqU2nhUWq6Ze
oPWFvBgllapEDCmASkvFyN4a2BB2n85VywFEIdUX8XyhVhZdB/8h9sgWv4Sz5MsI
XR2smOX+a8LJ0D8QXBiXiqfzSGh2T41beN5lHkZsiJaQgHKrXYwLjuSN35zZAqRi
Rrtyjb1DLM2gy2trEDgVEXRWEkpgnnURwQCqstykbAGvGlkvHnXZIacETHB6Kh0S
PgOZD60Py6h01d7saSMecVvDfbPxIu05ULq8UvxJHvDitK0iTPE9XQLUmME=
-----END CERTIFICATE-----