Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d5489ec-d0c6-48d6-b722-33c5cbd24da1.roa
File:                     2d5489ec-d0c6-48d6-b722-33c5cbd24da1.roa (raw, json)
Hash identifier:          9WUwcAAmF75rid8IO6/9PljunkNeoh0CRNvYelTamSM=
Subject key identifier:   A0:63:D5:B3:05:F1:FD:4A:39:2E:53:2A:10:65:D8:16:0F:5E:6C:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31638D7D6E35FEC1143BA7696AF1FB2EE9E458B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d5489ec-d0c6-48d6-b722-33c5cbd24da1.roa
Signing time:             Mon 06 Oct 2025 16:22:41 +0000
ROA not before:           Mon 06 Oct 2025 16:22:41 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.192.0.0/11 maxlen: 11
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:8d:7d:6e:35:fe:c1:14:3b:a7:69:6a:f1:fb:2e:e9:e4:58:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:22:41 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=e0c1b45778ca978c7ada824b917421d38ae48c417e5ff565d94d2c4f095bb164, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:18:8f:ea:52:3d:00:d4:39:93:1b:ce:fd:
                    14:47:c2:21:cc:91:6c:e1:2a:00:e6:bd:99:42:2d:
                    9c:dc:be:ac:88:42:d7:51:8e:fe:01:5a:f9:72:3b:
                    86:b5:20:20:cc:b8:5b:65:6a:39:7a:19:d5:60:51:
                    47:75:e9:62:d9:e2:00:42:cc:1f:05:9d:e7:89:44:
                    3e:7a:f5:22:14:f8:cb:9f:e7:3c:ed:8d:aa:c0:24:
                    ab:8f:f2:20:d6:2f:fd:f4:26:3c:5f:c4:8c:03:8d:
                    f6:02:82:7b:7c:1f:69:d7:58:6d:e8:3c:71:79:e2:
                    5a:59:16:76:3f:a4:c2:ce:ec:43:cb:7a:09:79:41:
                    d0:3d:af:ee:a0:b8:5d:dd:b6:a5:66:57:7b:9c:b7:
                    e1:f9:a5:a7:12:40:7d:9e:97:2b:d9:e5:ff:60:93:
                    4e:0b:22:0e:92:20:48:a2:17:97:77:d8:51:52:22:
                    da:59:de:1a:95:c8:e8:ed:28:be:94:79:d9:4b:6d:
                    d2:c6:14:7e:e8:fb:4b:2d:73:e2:2d:8a:37:a6:30:
                    28:b7:cf:df:b8:db:28:81:de:ad:16:de:e6:c0:0d:
                    57:f9:43:41:3e:4f:f6:f1:fc:56:aa:fe:19:8a:cc:
                    8f:93:b7:7e:0e:82:88:0a:70:7d:31:04:5a:99:f9:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:D5:B3:05:F1:FD:4A:39:2E:53:2A:10:65:D8:16:0F:5E:6C:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d5489ec-d0c6-48d6-b722-33c5cbd24da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         00:17:11:5b:32:a1:ff:71:c1:e5:22:32:5b:7a:1b:0b:bf:fa:
         8c:76:7d:42:0d:f5:1e:35:f6:73:af:2d:71:64:67:ea:be:4a:
         68:73:c2:69:4d:6a:4c:84:75:30:b4:fc:fa:59:60:c2:44:6f:
         1f:b8:b8:25:4a:d2:7a:f5:fb:bc:3f:57:82:2d:6e:ce:a4:7b:
         87:b5:bb:b7:1b:53:ec:58:90:e2:f6:cb:6a:fd:e1:f9:42:3a:
         dd:0a:fb:6b:ef:50:e6:f0:3d:f4:3f:16:8b:35:66:10:ec:e4:
         db:d4:00:10:da:99:75:e7:ba:d1:07:61:76:de:81:fc:a9:91:
         7b:9e:ac:f5:29:7d:36:65:d9:3c:64:16:e4:2c:a5:6f:62:cf:
         a2:18:f9:5b:c9:39:e4:5c:04:e7:48:0f:ac:b6:88:8c:33:40:
         a6:bc:09:6c:95:fd:cd:00:09:ce:fe:b5:aa:d2:3b:20:a8:fe:
         99:35:a1:94:0e:5c:2e:5f:ce:1d:89:68:cd:03:16:28:34:8a:
         70:ad:6b:f2:f8:05:d8:7e:0f:ea:f1:fa:8f:8e:e9:9d:63:0f:
         dc:4f:1d:c7:60:b4:16:00:8f:f7:77:47:a3:22:2c:f0:13:b3:
         63:52:01:7b:12:58:a9:fe:c9:55:bb:1b:92:1b:dd:2a:26:3a:
         6a:5b:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----