Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa781e7f-2dd5-468f-abe5-07d823c9b359.roa
File:                     fa781e7f-2dd5-468f-abe5-07d823c9b359.roa (raw, json)
Hash identifier:          NwuFr7gC2sJdIb/+VobUbRe1vqczqybTVvqFLtWmkpg=
Subject key identifier:   90:48:5C:0D:CB:9F:FC:8F:B8:BC:84:12:83:97:F3:73:08:4D:0B:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11983AE83D9DA640F2A75AEA0334B15226793C5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa781e7f-2dd5-468f-abe5-07d823c9b359.roa
Signing time:             Sat 11 Oct 2025 00:39:55 +0000
ROA not before:           Sat 11 Oct 2025 00:39:55 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        208.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:98:3a:e8:3d:9d:a6:40:f2:a7:5a:ea:03:34:b1:52:26:79:3c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:39:55 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=b2c30b2939699f4020144fedc9eae82a9802abb23d1437ed13012638c967f8d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:6f:e5:6f:96:d5:9f:47:98:27:48:d1:c0:
                    a7:41:49:97:a3:96:45:f8:ad:94:00:80:4a:a2:32:
                    47:89:15:4c:1b:aa:a7:ac:3d:f3:7c:b4:24:d9:a5:
                    0a:24:47:b4:eb:19:7d:cd:46:25:3d:c6:00:d4:dc:
                    9e:73:67:e4:c0:86:61:4e:a1:f8:96:45:f3:0c:a6:
                    5a:1a:2c:fa:c4:37:ad:bd:c9:a0:9e:8a:ec:85:04:
                    93:31:14:70:80:c3:3a:65:54:64:cd:49:23:51:bd:
                    e8:8e:50:46:1f:1e:b4:ab:29:94:97:d7:85:b3:07:
                    e3:8c:5e:3a:95:1b:8e:2f:41:ab:4e:92:04:70:7c:
                    33:2f:d7:81:8d:c6:e9:17:88:58:78:88:3f:e7:80:
                    4d:2e:85:d7:e8:bf:45:cc:a0:41:95:0e:14:2e:ef:
                    5d:09:2e:1d:10:37:e8:05:39:fd:8a:f4:b1:44:41:
                    89:27:0b:3b:3f:2a:19:de:75:1c:19:aa:3b:06:dd:
                    32:d8:22:66:3c:f1:7f:7f:03:91:09:bc:b3:11:50:
                    bc:91:dc:44:18:5c:20:b6:36:69:a0:cc:7f:a5:f0:
                    81:71:c5:a2:40:91:2f:d5:d1:eb:70:75:ff:d3:7a:
                    c3:36:a0:15:36:ed:da:f1:b6:2d:48:d6:fc:d4:8d:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:5C:0D:CB:9F:FC:8F:B8:BC:84:12:83:97:F3:73:08:4D:0B:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa781e7f-2dd5-468f-abe5-07d823c9b359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.120.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:2e:ca:1f:27:8c:0e:c5:69:0b:cb:94:2f:76:7b:11:d1:
         3f:dc:b4:9c:13:b5:be:c5:8b:c5:fc:32:53:35:f9:c8:e1:ae:
         8b:00:2e:65:98:42:86:34:7c:13:80:8c:73:36:73:96:96:21:
         33:93:23:bf:a7:af:f0:61:6e:30:c1:fb:6d:c0:2d:64:51:1e:
         97:5b:a0:66:22:2c:30:6d:67:9c:f4:6e:5f:f5:e2:89:e5:20:
         69:3e:ac:40:08:ca:59:23:bf:d3:48:e4:d3:cd:07:ab:ff:5d:
         07:3b:aa:48:75:43:44:57:ca:d7:e3:26:d1:18:e0:38:b9:67:
         04:ff:bc:76:af:c3:8e:a8:d8:de:f4:e7:f7:6b:6f:53:4a:31:
         d4:8b:64:f2:26:8f:09:78:1a:58:d2:14:07:ef:c9:5f:5f:99:
         c4:66:a7:49:14:cf:1b:d2:24:ee:a6:75:7a:77:3c:19:b6:ef:
         8f:05:43:49:ce:4e:ad:27:b3:4a:ed:13:47:f4:ac:25:c0:ef:
         4e:3f:c9:00:11:c6:29:96:e0:f5:a4:e9:de:5a:25:c4:e2:b8:
         04:e9:95:db:76:e8:b2:66:a0:68:02:8a:a3:86:c7:7c:ca:f3:
         a8:9c:70:76:c8:b0:45:4c:4d:2f:d9:02:76:87:6d:ba:e5:90:
         6c:3b:2f:ca
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEZg66D2dpkDyp1rqAzSxUiZ5PFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDAzOTU1WhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMmMzMGIyOTM5Njk5ZjQwMjAxNDRmZWRjOWVhZTgyYTk4
MDJhYmIyM2QxNDM3ZWQxMzAxMjYzOGM5NjdmOGQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPr2/lb5bVn0eYJ0jRwKdBSZejlkX4rZQAgEqiMkeJFUwb
qqesPfN8tCTZpQokR7TrGX3NRiU9xgDU3J5zZ+TAhmFOofiWRfMMploaLPrEN629
yaCeiuyFBJMxFHCAwzplVGTNSSNRveiOUEYfHrSrKZSX14WzB+OMXjqVG44vQatO
kgRwfDMv14GNxukXiFh4iD/ngE0uhdfov0XMoEGVDhQu710JLh0QN+gFOf2K9LFE
QYknCzs/KhnedRwZqjsG3TLYImY88X9/A5EJvLMRULyR3EQYXCC2NmmgzH+l8IFx
xaJAkS/V0etwdf/TesM2oBU27drxti1I1vzUjUJ1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkEhcDcuf/I+4vIQSg5fzcwhNC5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhNzgxZTdmLTJkZDUtNDY4Zi1hYmU1LTA3ZDgyM2M5YjM1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDQeDANBgkqhkiG9w0BAQsFAAOCAQEAIn8uyh8njA7FaQvLlC92exHRP9y0
nBO1vsWLxfwyUzX5yOGuiwAuZZhChjR8E4CMczZzlpYhM5Mjv6ev8GFuMMH7bcAt
ZFEel1ugZiIsMG1nnPRuX/XiieUgaT6sQAjKWSO/00jk080Hq/9dBzuqSHVDRFfK
1+Mm0RjgOLlnBP+8dq/DjqjY3vTn92tvU0ox1Itk8iaPCXgaWNIUB+/JX1+ZxGan
SRTPG9Ik7qZ1enc8GbbvjwVDSc5OrSezSu0TR/SsJcDvTj/JABHGKZbg9aTp3lol
xOK4BOmV23bosmagaAKKo4bHfMrzqJxwdsiwRUxNL9kCdodtuuWQbDsvyg==
-----END CERTIFICATE-----