Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa
File:                     fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa (raw, json)
Hash identifier:          iFh6n93/7HHwyaRAqV/kLTcFKDtQzFCohfR1ePaIFoI=
Subject key identifier:   B9:93:46:CE:D0:E6:24:97:E7:0F:76:DA:E4:D7:71:40:8E:59:D3:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B7B5289326432149E5884EA7D8C0B44F2803A1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa
Signing time:             Tue 07 Oct 2025 00:21:33 +0000
ROA not before:           Tue 07 Oct 2025 00:21:33 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7b:52:89:32:64:32:14:9e:58:84:ea:7d:8c:0b:44:f2:80:3a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:21:33 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=e331fc6d408aa50ed2e39dc6339c001ab9a27c57e252e9b4aa264d87ce1a3ede, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:18:be:62:53:66:63:46:93:cb:c3:30:70:
                    85:62:a4:c5:a4:d0:5e:7f:a9:a4:da:40:18:36:6e:
                    2c:b6:67:88:57:bf:b6:79:1c:28:d5:cd:fe:76:90:
                    4f:07:52:c4:00:ca:ad:7e:51:79:8a:41:0d:a4:5c:
                    60:ba:1f:74:cf:d2:4e:58:44:5b:b7:30:ad:aa:99:
                    b0:fe:82:14:d4:cc:15:3c:73:40:97:de:96:f0:97:
                    8f:35:35:a5:5d:c2:41:42:66:f7:eb:c9:fc:8c:80:
                    a4:db:03:ed:49:86:7c:00:0b:0b:09:70:6a:4e:b2:
                    1b:8a:8f:ec:5c:7e:75:6c:4f:09:a1:40:eb:13:a6:
                    0e:bf:f6:0e:8c:33:d1:75:18:6d:cf:e8:9f:54:fd:
                    1e:73:ce:f6:1b:97:3d:b0:35:93:d9:c6:87:90:a4:
                    13:2a:e3:78:a1:87:52:f1:1d:82:04:6e:6f:81:a8:
                    ab:2a:01:5f:55:8a:a2:73:aa:79:91:29:72:b7:60:
                    1e:6e:eb:50:d0:f4:4b:a6:be:93:3f:cc:3b:64:24:
                    42:f8:b7:d9:02:f0:3a:f3:9a:e4:b8:58:5f:f0:8b:
                    fa:3a:bb:9a:ef:2b:f7:45:ad:be:d1:87:c8:42:d8:
                    9f:b4:70:60:db:0b:f4:b6:6c:b0:81:41:86:64:66:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:46:CE:D0:E6:24:97:E7:0F:76:DA:E4:D7:71:40:8E:59:D3:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb055652-9b74-418d-8b49-f94fdbf4fcc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:04:b3:32:c3:9d:32:af:c4:1a:78:f6:7e:8b:7f:8d:ce:
         e9:2f:4d:c9:9a:7c:a5:de:94:5d:cc:a0:db:85:b3:bf:26:9d:
         07:fa:1f:b7:57:7b:fe:66:4a:4d:25:70:c2:a4:21:54:1c:9b:
         7c:37:c0:76:74:43:f5:cb:1e:74:50:b3:f5:74:d0:3f:de:74:
         98:c4:fb:2c:64:8f:6e:77:d5:d6:ff:04:09:d8:28:40:25:8b:
         bd:da:c2:2b:b2:32:24:4b:f8:6e:20:6c:5f:a1:7f:cc:33:4e:
         20:e8:af:31:cb:9f:f0:3b:e1:99:ed:20:cd:81:49:ff:23:ea:
         79:70:68:40:1a:a2:91:90:db:8e:78:53:50:ae:d9:39:ed:1c:
         61:82:d6:32:de:37:37:c9:ac:8b:90:07:46:53:75:5a:00:b4:
         89:9e:65:3b:2e:8b:ef:b6:2e:58:02:2c:48:a4:97:8d:6b:f4:
         79:69:ea:24:b6:05:2e:71:37:3d:e8:8b:7b:02:c5:5d:c1:21:
         4b:20:42:85:b8:50:5d:a6:94:46:56:f6:60:9b:e5:36:b2:18:
         bb:47:5f:d0:af:bd:f3:bf:49:90:e4:6c:33:ae:a9:28:e5:dc:
         f8:5a:46:7f:94:05:c3:1b:a2:c3:9c:b7:85:55:55:94:46:ac:
         cb:2c:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----