Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa
File:                     0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa (raw, json)
Hash identifier:          3pPS/9VuVhqREwVU+6F4vvHWhxIxTZal2sTyo75sCp0=
Subject key identifier:   70:36:F9:36:E9:DA:79:40:1C:52:20:10:8F:47:F2:75:14:CB:21:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CAD0A044498281529BAF99437D9F9C28D3B9CD2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa
Signing time:             Thu 13 Nov 2025 00:51:52 +0000
ROA not before:           Thu 13 Nov 2025 00:51:52 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.244.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:0a:04:44:98:28:15:29:ba:f9:94:37:d9:f9:c2:8d:3b:9c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:51:52 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=cae706d1e27c0ba4d26dfd33532383f4a08b7a1d4cad5d4074c780897d13b4c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:31:75:4f:4f:e9:73:c4:0c:db:59:78:79:
                    be:88:76:bd:95:08:71:b8:0e:77:54:e7:77:fd:1b:
                    61:b7:1a:3a:13:1c:4d:bf:a3:52:3d:64:0b:5b:8e:
                    5f:89:77:57:b6:38:07:4c:5f:bb:5a:e7:ac:9c:43:
                    90:63:91:73:c6:2d:e0:53:c2:e9:e4:9b:c4:21:5c:
                    39:13:b0:ba:d5:ed:e2:05:74:ef:9e:4d:0d:98:c2:
                    71:41:12:76:86:ed:b3:bd:cd:2c:d4:13:bd:cb:81:
                    ff:76:0a:b0:82:78:2c:2d:72:b1:2e:cd:96:40:41:
                    43:95:b3:ad:7c:f4:b8:e0:2c:9a:23:d3:11:eb:44:
                    9c:3c:34:ba:2e:36:9b:83:3e:0b:36:0c:6c:77:9c:
                    e6:bc:52:1b:85:6c:42:10:fa:3e:d7:a7:f7:b7:17:
                    4b:e9:d7:31:a2:33:67:65:16:2d:c6:33:85:83:7c:
                    b2:ca:56:bb:4d:98:60:19:d2:f6:99:4b:0b:9d:47:
                    28:bf:0c:32:2b:14:53:95:22:32:49:aa:bf:92:4c:
                    02:d8:83:61:a2:5d:c5:ee:35:5d:fa:af:55:a2:e3:
                    0e:ac:e2:2a:98:fa:12:7c:06:03:cd:a5:41:12:49:
                    a5:77:2b:52:80:0e:1f:5f:15:99:6e:f4:8b:3e:49:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:F9:36:E9:DA:79:40:1C:52:20:10:8F:47:F2:75:14:CB:21:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:23:4c:73:fb:d5:57:72:51:05:d0:2f:99:d0:ff:05:7b:9d:
         de:60:ac:14:8c:0e:98:24:d9:73:c2:ad:4f:da:52:4e:be:30:
         d3:f3:4a:2d:97:9c:23:15:04:ce:99:53:dc:ba:b5:2e:c1:0c:
         5e:2a:a0:be:53:ef:2b:f8:80:62:7a:31:86:06:93:01:e7:44:
         26:de:80:36:b5:ce:95:3e:33:8a:bf:8b:ae:7d:2f:0e:91:c1:
         55:08:a7:1a:26:8e:e7:a4:a7:fc:d0:dc:76:2e:9d:3d:47:59:
         1b:ca:23:08:6e:9c:2e:2e:b5:ec:dc:3a:9a:f2:53:d4:8d:46:
         54:30:b1:dc:02:ad:06:62:01:2f:3c:2b:52:cf:37:07:7c:52:
         69:c7:4e:ec:f2:da:0b:05:0d:dc:f0:7b:f0:21:0b:6f:1c:1b:
         78:d0:87:bf:51:9b:01:8c:01:40:2a:28:b3:06:07:0d:06:20:
         90:4b:e9:9d:98:24:df:9b:f5:fa:69:48:22:1e:74:f4:f5:47:
         b4:bb:64:bc:35:3d:88:4f:3c:3d:e2:4c:1b:e2:03:07:08:8f:
         2e:b5:ed:82:38:d5:6f:1a:fc:22:e3:f9:26:f6:c0:43:be:51:
         55:bd:08:a7:95:58:69:2b:49:be:02:88:a5:2e:2e:5c:a3:c0:
         0f:aa:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----