Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb210e4f-8f51-448c-9d09-9b811199052c.roa
File:                     fb210e4f-8f51-448c-9d09-9b811199052c.roa (raw, json)
Hash identifier:          DzVC4ECRs9y3JUGNtL25D7bba3TTkAhr0sqGoYVvZms=
Subject key identifier:   03:54:DC:0A:72:B3:F2:C2:3D:7B:FF:9A:CE:B3:B3:3B:1D:5A:36:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5FD1CB024B5406D74EAB5F93FC775DA1F25D11A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb210e4f-8f51-448c-9d09-9b811199052c.roa
Signing time:             Tue 14 Oct 2025 18:01:17 +0000
ROA not before:           Tue 14 Oct 2025 18:01:17 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d1:cb:02:4b:54:06:d7:4e:ab:5f:93:fc:77:5d:a1:f2:5d:11:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:01:17 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=b48e9c162a1632023f7fa01a65e4b32566ad1552fbb97707e69ea6b6be0c2056, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:83:08:41:a0:68:28:f2:2a:17:22:50:59:
                    c6:00:47:ef:3b:c5:ca:83:05:78:6a:14:3c:ea:b5:
                    bf:95:f8:c8:7f:67:80:2d:81:75:7e:37:21:61:b1:
                    0b:4c:b2:10:6f:28:58:f0:4f:bf:1d:77:bf:40:99:
                    20:e2:06:31:73:2a:8f:fd:61:4b:c7:c2:9e:8e:a1:
                    11:52:e2:4c:d0:70:db:81:c7:11:2d:5b:f2:16:e2:
                    d1:17:54:96:bc:f6:c6:c8:ad:05:76:40:ea:00:77:
                    ac:0c:1f:2a:f7:cc:86:43:1b:bf:7b:6d:b4:b8:0c:
                    68:60:b6:36:65:fa:b7:70:3c:5b:86:4c:ca:66:95:
                    e8:58:6a:2e:25:c2:af:6b:21:90:6e:87:08:ee:51:
                    5c:e2:2e:0b:51:d8:05:af:bd:a2:e8:a4:a9:3b:60:
                    1b:b9:8c:19:04:f6:2d:6f:c9:69:f5:c1:94:fb:c9:
                    f2:e4:33:af:25:c5:65:86:05:ef:9a:4b:ab:6b:c9:
                    c4:43:28:09:4f:fb:54:a6:a9:8e:70:3c:89:f0:34:
                    c3:5d:11:1e:b3:08:20:ed:4d:04:0d:da:fd:ea:92:
                    40:55:07:2e:b6:dc:03:a6:9d:2d:5e:b7:83:da:55:
                    b7:8b:2d:63:4b:c5:19:96:8d:13:e7:05:8f:7d:88:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:54:DC:0A:72:B3:F2:C2:3D:7B:FF:9A:CE:B3:B3:3B:1D:5A:36:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb210e4f-8f51-448c-9d09-9b811199052c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:91:67:2b:3c:6f:6c:f3:11:64:c4:87:23:a6:0f:b0:fd:
         44:bd:16:90:88:34:10:d5:6d:39:e0:8d:3e:20:22:af:b6:73:
         4c:38:e2:69:28:a3:d1:54:01:e8:3e:02:47:29:b1:96:f8:02:
         5a:c3:a3:3b:b9:ae:eb:78:35:a4:50:f7:2c:f3:34:8f:81:67:
         fc:60:27:93:6e:ec:63:89:91:45:9a:37:f6:44:bd:ed:a8:a0:
         f8:9e:44:e3:b5:87:36:88:c8:57:ab:e2:78:a2:dc:1e:07:7c:
         52:c5:b8:ef:0a:85:1c:1e:55:bc:aa:c5:5b:f4:5a:33:04:7a:
         e0:21:25:4e:28:3d:aa:26:ac:d6:6f:5a:60:19:15:a6:56:2d:
         6f:8a:4a:ba:be:5e:f2:d7:e3:ed:e0:b8:bd:a1:8a:f3:6e:6e:
         39:b7:a9:54:e2:a3:d8:f5:6f:40:0e:89:5c:94:41:fc:02:41:
         b1:43:e3:f2:b5:f1:c1:d8:1e:ec:a0:9a:00:8a:4b:5b:07:15:
         8d:c9:54:1d:f2:5c:bc:8e:cd:32:0c:c5:3f:c7:bb:7f:f3:ba:
         55:b8:21:f4:80:78:12:0c:27:7c:98:fb:28:87:8d:75:78:ac:
         dc:ef:e7:b1:3f:1e:27:db:71:4a:3a:d0:82:04:4b:da:8c:85:
         83:3e:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----