Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa
File:                     1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa (raw, json)
Hash identifier:          KTrmlpZcBt3XWI3r7/KTFHtdTHQXY/kjqavxsyg3Y3c=
Subject key identifier:   26:A1:04:36:93:E5:B6:23:05:CF:DC:DA:81:B8:85:BF:78:AF:04:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       446A641C2B59CFF6CF91EDFC27EAFC9D5EFBDF25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa
Signing time:             Tue 07 Oct 2025 15:01:17 +0000
ROA not before:           Tue 07 Oct 2025 15:01:17 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:64:1c:2b:59:cf:f6:cf:91:ed:fc:27:ea:fc:9d:5e:fb:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 15:01:17 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=da044b73335a389fd1f7f4494d98809f70c39f5e7ae2c22a595dff042b209cc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:c0:3f:6b:23:a5:77:36:f1:2b:b3:d8:17:
                    13:c7:73:ca:55:2f:76:a2:f0:d7:b7:bc:e9:85:48:
                    c3:d0:94:61:65:19:4b:21:a5:66:ca:9d:cd:c1:d3:
                    3c:3c:b5:e8:f0:28:6b:30:62:76:de:d8:2b:b8:78:
                    b5:c3:51:58:e2:e0:84:e3:63:d9:55:fa:8a:7c:09:
                    06:ec:d5:0b:bf:aa:ed:09:84:3c:a7:71:5f:c4:ac:
                    b5:3f:0c:d1:72:84:e6:87:00:41:a7:ca:09:7a:a8:
                    61:4c:84:32:87:1a:42:27:21:70:86:97:21:00:f6:
                    4e:2f:5c:b0:1c:92:0c:9b:6e:11:ef:de:de:e5:5e:
                    24:8c:e1:83:17:38:b2:84:42:c9:c1:cb:94:4f:07:
                    b5:e7:1e:24:53:96:93:35:5d:62:1e:0e:f1:0c:27:
                    4c:4b:45:1c:e8:9c:54:4b:ff:91:58:34:8f:54:04:
                    c7:cb:10:d8:68:d5:b9:ad:62:0f:00:9f:37:2c:6a:
                    c0:b4:97:78:ed:79:c7:9f:af:b1:f3:04:13:cc:1a:
                    30:d4:72:8b:9a:f1:35:43:80:88:b8:b0:79:e8:24:
                    fd:29:09:44:0b:6c:84:6b:5c:06:ab:e5:93:93:61:
                    8d:b3:e3:4c:bb:d5:fb:fe:8b:5e:27:c1:66:08:85:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:04:36:93:E5:B6:23:05:CF:DC:DA:81:B8:85:BF:78:AF:04:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1aa1ce22-611e-497d-b5a2-a85a34928e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:84:70:cf:af:bc:ea:b5:80:13:00:51:0c:43:bc:f2:ca:
         c2:8a:c1:8a:c3:2d:b9:cd:d8:54:da:c1:40:53:0d:9f:9a:28:
         ca:0b:ea:3a:57:27:c4:fa:3a:69:eb:0c:79:5c:2c:d6:9d:af:
         55:f8:d2:82:df:a1:c1:54:5c:52:16:c4:56:7c:22:59:d0:ba:
         75:5f:73:77:df:8b:8e:8a:8e:e5:72:7e:55:9f:29:60:5b:2e:
         93:19:a9:fd:2f:80:26:ce:c4:83:3a:69:65:07:ba:ad:0a:43:
         cc:78:7f:9c:f3:4a:72:82:b0:3e:6f:5b:fd:ef:88:ca:5a:e1:
         90:3f:07:e4:f4:d5:8c:86:96:53:97:7f:a0:8f:8f:9e:4d:0c:
         da:47:9b:48:ba:c9:5c:dd:63:ad:05:62:82:6f:21:b0:8b:2d:
         2c:be:49:85:67:81:09:43:96:b0:33:85:6e:f9:99:24:37:ec:
         8b:9f:bf:09:a1:40:29:9b:2f:33:5a:42:73:3f:79:91:00:b5:
         10:09:76:bc:b0:22:21:af:88:e3:24:43:16:7e:9c:09:e3:63:
         41:30:4d:b5:f1:ca:31:80:4f:b2:39:a6:b4:36:d3:eb:81:8c:
         63:02:da:5f:f7:ad:ba:fd:88:9f:7a:80:4b:3a:a1:05:70:d1:
         95:c8:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----