Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7fe1a-6982-419e-bf47-7a5f13a90875.roa
File:                     46a7fe1a-6982-419e-bf47-7a5f13a90875.roa (raw, json)
Hash identifier:          +uPCTbGJZ3GiFFtr8RjbC7TQmC6AonM3C5Z1QMRatTA=
Subject key identifier:   C2:08:4F:FF:AF:53:01:E0:FD:4F:DE:07:72:55:8F:E0:1E:46:FD:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D341A296CD77B25DC418A1126BD286A92F98364
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7fe1a-6982-419e-bf47-7a5f13a90875.roa
Signing time:             Wed 12 Nov 2025 00:50:48 +0000
ROA not before:           Wed 12 Nov 2025 00:50:48 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.46.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:34:1a:29:6c:d7:7b:25:dc:41:8a:11:26:bd:28:6a:92:f9:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:50:48 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=2d9c7c9b985503681498e2e9f7a17818db1f09850cf996c71381e65a394a5958, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:8d:db:35:86:e0:23:77:92:88:3d:b0:d8:
                    e0:c9:68:9c:27:25:26:7a:42:3d:73:ec:13:b2:15:
                    ac:b5:95:ce:15:8d:57:2f:9d:80:47:90:f9:7f:9c:
                    e8:62:9a:3e:24:51:5f:e2:9c:8b:f0:0d:22:67:23:
                    6b:8d:f6:7d:84:12:b7:a2:25:7a:17:f1:ba:a4:a0:
                    ca:62:8d:01:1b:f4:9b:99:01:b7:b2:1e:f8:49:11:
                    29:2b:19:c7:92:3e:bc:26:3a:e9:bf:f0:67:55:a0:
                    60:3f:ef:31:f4:2c:c6:ed:bf:a7:ab:cd:e3:37:61:
                    91:a0:17:71:b9:fe:c3:a8:a3:ca:e6:3f:9c:9b:09:
                    b0:0d:b4:30:78:87:6e:00:f1:40:26:9f:1c:64:93:
                    12:8a:78:30:47:f9:55:5c:12:ea:ee:54:4e:28:81:
                    e4:0f:0d:99:00:5b:cc:85:53:fd:4a:bd:9b:90:f3:
                    20:81:71:7f:ab:68:3d:ff:e1:de:e8:62:3e:47:89:
                    2c:0d:14:a9:1e:4b:f6:d4:ea:de:b2:29:06:5a:96:
                    59:83:0d:38:0c:ea:5a:49:f0:02:17:3e:e5:da:a8:
                    11:a3:36:6c:f5:26:12:1f:66:60:9a:e5:ad:57:80:
                    f0:fb:0f:55:64:2b:14:58:fc:b3:63:84:f3:a7:97:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:4F:FF:AF:53:01:E0:FD:4F:DE:07:72:55:8F:E0:1E:46:FD:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46a7fe1a-6982-419e-bf47-7a5f13a90875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.46.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:0e:ff:7b:0e:b3:ed:1a:5d:6f:20:99:d7:2a:3a:e4:cf:
         c1:60:90:06:78:23:90:13:9c:fc:9e:22:1b:21:e3:d2:70:73:
         98:a7:4c:30:f9:7b:90:b5:c0:76:a2:0f:29:b3:95:ed:8b:eb:
         95:50:c1:1f:2a:5b:71:d7:08:22:60:bf:07:aa:68:19:56:fd:
         f1:2d:ed:52:b9:df:2d:0b:b4:6e:19:4a:a4:92:84:9a:e6:31:
         3b:bd:8a:dd:00:cd:6b:cc:b4:c5:c6:e2:2e:96:e8:07:48:24:
         96:13:21:aa:72:d9:4b:c4:6f:42:04:9c:5d:4f:aa:77:e1:7b:
         e7:a0:17:26:ec:53:0f:d4:dd:36:37:30:a4:23:74:1e:62:f9:
         2e:06:88:01:46:4b:7e:ab:2f:ba:8a:ff:a9:61:aa:6b:d5:8a:
         0b:65:d9:9c:7c:14:51:4f:16:34:e5:63:80:6a:23:51:4d:60:
         0f:00:0c:86:be:a7:0f:f3:dd:07:dc:04:73:3a:83:3a:5a:8f:
         7f:64:6c:21:83:56:99:1e:fd:79:57:f5:27:3c:b4:7c:a9:57:
         f6:5c:d6:70:f5:99:96:20:ee:4c:9c:42:2a:ee:43:99:24:12:
         f8:6d:95:08:90:3d:8d:63:3d:b7:b9:e9:a5:c9:41:2f:6d:1d:
         64:87:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----