Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3985cec7-2c3b-45d9-890f-a46621f32316.roa
File:                     3985cec7-2c3b-45d9-890f-a46621f32316.roa (raw, json)
Hash identifier:          Ie/y+l/W82AJpkNMJ/TzpOpdvXGEUPt1WRnmy3U1GNg=
Subject key identifier:   12:BB:B2:D4:EF:09:39:80:9F:61:33:BE:19:10:00:75:2E:82:42:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5BD42318CE18F5257A9EDFF90CB3F4D1EC1F9E13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3985cec7-2c3b-45d9-890f-a46621f32316.roa
Signing time:             Tue 11 Nov 2025 01:11:51 +0000
ROA not before:           Tue 11 Nov 2025 01:11:51 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.24.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:23:18:ce:18:f5:25:7a:9e:df:f9:0c:b3:f4:d1:ec:1f:9e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:11:51 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=6b12cc401c002e0a86de044a4d144b1718ff3a74fef43e67a3437eb73edc4988, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:f7:ed:00:4f:b5:07:38:b1:af:78:41:c1:
                    0c:f5:aa:6b:e9:7a:e8:cd:66:95:13:90:e4:2b:72:
                    a8:8e:9b:e9:c6:05:73:e3:37:06:34:f7:7e:59:38:
                    9f:bc:c1:5c:c0:80:fe:c2:5b:5d:55:f0:b0:ef:07:
                    af:d3:42:ac:bc:45:33:b9:b2:fa:72:9f:e8:51:46:
                    05:cf:66:36:24:d4:21:fa:8d:ec:f5:e4:15:25:3d:
                    2e:e2:53:b1:ce:b7:4a:61:96:cf:d0:8b:23:12:c2:
                    ab:6b:fd:4c:56:7f:8e:91:8e:b2:9e:eb:b6:ca:42:
                    2f:8e:67:97:f8:0d:27:00:99:93:02:b6:37:dc:b5:
                    b7:9d:73:85:d6:0b:4d:4b:ea:6a:49:ff:9c:7e:74:
                    89:68:81:f1:42:0e:bc:78:c4:bf:99:04:ed:09:94:
                    13:47:3c:5d:27:6b:5f:87:6f:50:43:37:08:3c:08:
                    47:df:89:b0:7f:6d:e0:6a:81:70:a7:a6:a3:e0:7b:
                    3d:95:79:bd:6f:bf:7b:43:b6:dd:74:86:43:02:d2:
                    4e:e1:fb:52:bf:89:ab:3f:20:44:7e:e4:6f:8b:89:
                    9e:7b:38:f4:cd:5e:94:ce:d3:0a:38:89:cf:51:17:
                    bb:cf:22:05:fb:22:d9:2a:08:ef:36:de:95:a1:89:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BB:B2:D4:EF:09:39:80:9F:61:33:BE:19:10:00:75:2E:82:42:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3985cec7-2c3b-45d9-890f-a46621f32316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:aa:a0:52:28:6c:81:a8:f9:47:e2:58:f6:11:c7:d6:6d:
         e1:56:ed:cb:d9:86:38:66:22:50:3d:8b:8f:88:09:e3:96:a3:
         88:8a:4e:71:d9:99:ea:8f:43:a4:ea:f7:1f:d0:a2:8a:05:38:
         b5:37:4f:71:f2:81:5b:28:69:33:cb:9f:db:cf:35:aa:b1:01:
         19:cd:d4:0e:12:35:18:6c:55:4e:12:33:6f:b3:fd:58:cc:35:
         17:3a:bf:41:24:dc:b2:73:c4:3c:b0:b7:76:57:a3:ba:5f:f4:
         44:70:df:56:e4:f8:a2:b3:5e:25:6d:ab:7d:8a:cb:bc:d2:ea:
         b3:e1:04:d3:0b:19:67:7f:97:e5:17:7f:41:80:2f:5d:2f:42:
         61:c7:ca:9b:e4:f5:80:0e:15:15:47:7e:92:6c:0a:19:e2:96:
         73:5e:b0:f9:8e:64:13:30:58:f3:0d:af:22:5f:f6:23:be:20:
         63:0e:1c:56:54:22:39:ca:8e:46:db:9d:81:11:13:18:a5:9f:
         f7:d7:20:2b:58:29:38:eb:33:82:19:1c:63:26:f7:33:11:8e:
         72:04:6d:67:c7:31:45:56:44:f2:1f:43:95:7b:06:86:03:64:
         5d:e2:2b:8e:f3:9c:23:87:26:4a:51:54:2b:37:b0:0b:9f:e7:
         47:8f:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----