Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
File:                     2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa (raw, json)
Hash identifier:          PcW3drcET3BhS2xsbFYEl5CuV/Nq5LBkCcAk0r2RY94=
Subject key identifier:   69:B0:2A:B2:13:84:B5:D8:A9:F6:3D:7A:E9:A6:CD:7B:4B:79:E2:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C0493861CBF20943381B4304E6445FAB258C2A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa
Signing time:             Tue 11 Nov 2025 00:31:22 +0000
ROA not before:           Tue 11 Nov 2025 00:31:22 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.43.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:04:93:86:1c:bf:20:94:33:81:b4:30:4e:64:45:fa:b2:58:c2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:31:22 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=55c5ca0d961379ee1ce4a949355a7f83fcc23c603b04e2e9a784e840b0ab23e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:34:97:64:bc:28:af:39:d7:80:09:46:da:0c:
                    5e:46:ca:e7:f7:e3:67:d9:3a:af:00:11:1f:d8:2a:
                    64:6c:31:73:d9:d6:10:88:2c:7b:b6:7d:76:d6:eb:
                    d3:ec:d1:58:2f:1c:f0:b6:d0:5f:fb:e8:29:b5:90:
                    ea:37:e2:84:87:c9:22:9f:85:13:3c:3a:fe:74:ca:
                    ca:9a:96:c8:c9:24:fd:62:08:34:8e:f7:64:65:a3:
                    82:97:be:89:6e:50:84:b5:06:3e:f6:fb:20:f7:89:
                    0c:dd:e6:fa:04:1c:67:60:02:db:cd:7d:ca:96:f1:
                    85:e6:75:51:65:b3:17:af:35:80:33:30:5b:9f:aa:
                    60:40:9d:dc:cb:00:3a:ec:db:57:80:cf:4d:d8:7e:
                    19:93:16:3b:44:d9:f0:b4:5b:ce:b5:35:0e:9f:96:
                    a3:48:0f:b8:7f:e9:b0:28:4b:de:f9:ff:0a:80:0e:
                    05:40:56:45:2d:c6:97:ca:c0:b8:fb:75:8d:b2:e8:
                    25:93:fd:65:6b:a4:43:d0:cf:49:fa:ed:d0:c7:26:
                    e1:c9:78:ab:38:96:3b:89:c7:9b:91:3f:d3:25:69:
                    86:cb:20:fd:97:5d:b9:57:ed:26:b8:13:93:bf:3d:
                    c4:90:95:5f:9e:41:63:bf:4a:93:7c:90:ce:f4:2c:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B0:2A:B2:13:84:B5:D8:A9:F6:3D:7A:E9:A6:CD:7B:4B:79:E2:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fe276d2-f02f-49cd-b13c-ebf023b52d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:15:db:a5:ef:24:8a:5e:1b:de:ad:c9:49:17:26:7f:65:55:
         87:b8:ec:76:88:13:39:03:3a:87:92:70:3c:50:c9:96:3f:78:
         e1:23:68:f2:ab:c3:02:eb:86:83:a4:d0:a3:5b:eb:c8:5c:74:
         4b:b0:e1:14:fa:f4:83:3c:ab:4f:b2:9b:13:bd:05:20:d4:e8:
         ea:52:62:cf:28:d6:2a:67:02:47:a7:2c:42:49:3f:85:1e:82:
         57:e7:74:8a:08:ea:34:84:7f:de:5d:4f:7b:ed:14:c4:0b:7e:
         41:bc:77:ca:8c:2c:fe:3c:8a:6e:6a:ff:e6:4f:33:b0:8a:29:
         7f:5c:ff:f5:b8:f0:ee:c3:d8:03:17:b0:a5:3c:0a:78:c0:41:
         16:00:e9:11:0c:fb:21:1b:6f:28:65:30:ea:9e:e3:79:50:ed:
         40:94:3d:05:09:b5:b2:bc:28:de:37:2c:20:b4:6f:29:00:ee:
         79:a5:cc:c3:37:49:44:6b:1a:e7:0c:7c:fe:9f:27:86:59:d1:
         ec:0c:2c:60:19:d7:7d:ab:55:dc:42:b1:77:91:e4:88:6a:0d:
         db:d9:eb:59:92:18:f6:4b:df:8c:c3:bb:28:94:a6:91:f3:bc:
         00:c2:7f:60:bf:3b:84:db:77:f9:65:1f:f6:1d:c8:cd:c1:2b:
         5f:10:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:32 2025 by rpki-client