Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa
File:                     1c3959a7-6911-4246-baa0-2136c782f021.roa (raw, json)
Hash identifier:          jGd99zDho5Ba0rzHlEDT/BQ1GqJtGXIYB/RD7tj1jgM=
Subject key identifier:   AA:08:33:F9:DF:61:2E:7E:25:13:BD:AA:13:3C:46:48:E7:BE:90:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3723A943D6507C9EF424E132E56DEAAC5BED544E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa
Signing time:             Wed 12 Nov 2025 01:00:45 +0000
ROA not before:           Wed 12 Nov 2025 01:00:45 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.21.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:23:a9:43:d6:50:7c:9e:f4:24:e1:32:e5:6d:ea:ac:5b:ed:54:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:00:45 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=d3b2d497a5f421f7f1740c03c1ddb26517bac69e8a3ac5d0ecb8818f922a5fb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:01:6f:2b:c6:4a:eb:56:f6:f2:89:17:85:
                    5a:c5:5c:b3:a3:1f:ef:09:da:c0:60:ae:6d:bb:0e:
                    a0:6c:91:6b:10:96:49:ff:c5:2f:a6:cc:68:83:48:
                    af:b5:79:05:44:a8:70:e6:e7:6c:f8:99:ba:ed:f2:
                    65:61:04:9e:00:9a:32:ac:3e:9a:91:55:6f:b2:df:
                    8d:30:31:e0:2e:53:18:6c:27:06:88:70:22:32:f6:
                    71:60:b6:50:fb:56:20:c7:d9:0a:ec:fc:ff:7f:fc:
                    51:02:3d:b0:ff:a9:42:b3:3b:4f:d6:d0:54:f5:45:
                    b7:81:d0:52:c5:2d:89:e8:9f:60:7d:54:12:ad:e6:
                    bc:f1:47:70:66:2d:32:27:21:c7:3e:a0:bf:db:5e:
                    6b:59:a5:b4:e2:d9:4e:3d:cc:f4:09:ea:ab:77:55:
                    e1:43:59:5f:a4:fc:45:c8:0c:94:92:12:76:9c:d8:
                    f8:92:14:26:90:9d:e7:4a:0f:86:64:06:e2:be:6d:
                    32:60:c4:b7:8d:54:6a:c7:62:eb:f0:78:ef:20:be:
                    a3:bb:aa:f6:d6:77:c2:d3:4e:e0:c5:2b:b6:ca:d7:
                    25:3d:c5:61:2d:ae:9c:83:b3:48:9a:9a:c4:d1:b6:
                    09:da:ce:cf:78:90:34:38:7a:67:dc:15:ad:60:c1:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:33:F9:DF:61:2E:7E:25:13:BD:AA:13:3C:46:48:E7:BE:90:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c3959a7-6911-4246-baa0-2136c782f021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:ef:d3:87:56:57:57:c1:13:26:6c:a2:2c:a7:b6:cd:2b:
         ee:da:64:9f:d4:4c:89:f7:7c:19:f8:bf:eb:cc:bf:2b:0c:98:
         d3:7a:96:b8:51:4d:67:c7:11:e1:f0:c6:42:44:bc:85:d2:0b:
         50:57:d3:73:e5:54:03:49:6f:3c:3a:68:f5:ab:a0:b1:59:41:
         65:f6:54:19:63:9f:d0:fb:df:cf:8c:5f:f6:94:d9:19:05:1a:
         57:f0:ff:75:9a:2e:ab:d5:e3:6b:5c:00:25:80:5a:4e:dd:ca:
         89:74:ae:50:d8:3a:aa:34:2f:a3:83:5d:05:aa:47:4d:94:45:
         a8:06:8f:88:64:d8:d3:b0:c3:f9:14:16:19:41:37:79:e5:59:
         02:0f:b8:7f:04:bd:c2:c9:49:bc:9d:4e:41:99:14:b3:18:b1:
         76:c6:57:b9:76:9c:dc:95:b2:07:a3:33:e6:b1:ce:53:12:75:
         b8:6c:84:21:90:c9:59:62:0c:f1:cb:02:3c:94:b0:a0:2c:17:
         e3:f0:bb:a4:23:cb:68:12:cd:85:b8:64:a2:5d:f3:04:40:2d:
         c4:36:19:45:33:99:ab:ac:74:90:d5:27:71:4e:13:f4:e5:47:
         6e:9d:c8:53:b4:15:40:50:00:5e:69:68:59:86:5f:1b:57:bd:
         ed:0b:4c:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNyOpQ9ZQfJ70JOEy5W3qrFvtVE4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDEwMDQ1WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkM2IyZDQ5N2E1ZjQyMWY3ZjE3NDBjMDNjMWRkYjI2NTE3
YmFjNjllOGEzYWM1ZDBlY2I4ODE4ZjkyMmE1ZmI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJXwFvK8ZK61b28okXhVrFXLOjH+8J2sBgrm27DqBskWsQ
lkn/xS+mzGiDSK+1eQVEqHDm52z4mbrt8mVhBJ4AmjKsPpqRVW+y340wMeAuUxhs
JwaIcCIy9nFgtlD7ViDH2Qrs/P9//FECPbD/qUKzO0/W0FT1RbeB0FLFLYnon2B9
VBKt5rzxR3BmLTInIcc+oL/bXmtZpbTi2U49zPQJ6qt3VeFDWV+k/EXIDJSSEnac
2PiSFCaQnedKD4ZkBuK+bTJgxLeNVGrHYuvweO8gvqO7qvbWd8LTTuDFK7bK1yU9
xWEtrpyDs0iamsTRtgnazs94kDQ4emfcFa1gwTv5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqggz+d9hLn4lE72qEzxGSOe+kH0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFjMzk1OWE3LTY5MTEtNDI0Ni1iYWEwLTIxMzZjNzgyZjAyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUXFQAwDQYJKoZIhvcNAQELBQADggEBAE/P79OHVldXwRMmbKIsp7bNK+7a
ZJ/UTIn3fBn4v+vMvysMmNN6lrhRTWfHEeHwxkJEvIXSC1BX03PlVANJbzw6aPWr
oLFZQWX2VBljn9D738+MX/aU2RkFGlfw/3WaLqvV42tcACWAWk7dyol0rlDYOqo0
L6ODXQWqR02URagGj4hk2NOww/kUFhlBN3nlWQIPuH8EvcLJSbydTkGZFLMYsXbG
V7l2nNyVsgejM+axzlMSdbhshCGQyVliDPHLAjyUsKAsF+Pwu6Qjy2gSzYW4ZKJd
8wRALcQ2GUUzmausdJDVJ3FOE/TlR26dyFO0FUBQAF5paFmGXxtXve0LTCg=
-----END CERTIFICATE-----