Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66c32367-8469-414b-b22c-ee4a9a320966.roa
File:                     66c32367-8469-414b-b22c-ee4a9a320966.roa (raw, json)
Hash identifier:          EeFUnURiGJGjATMm3qTPNdWz60WAA4b93ITMSCrh5NE=
Subject key identifier:   C4:3C:13:4E:B7:82:2E:EB:3A:B2:17:AE:DB:87:6D:22:3B:71:CB:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64E9077E86B7568F1C62E2427094378A284223A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66c32367-8469-414b-b22c-ee4a9a320966.roa
Signing time:             Sat 15 Nov 2025 00:21:10 +0000
ROA not before:           Sat 15 Nov 2025 00:21:10 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        167.65.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:07:7e:86:b7:56:8f:1c:62:e2:42:70:94:37:8a:28:42:23:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:21:10 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=654b3536221e34bad54fa5a3b183ed017c09d70013e23d24763de594f3719f78, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:fb:07:33:d1:bb:5a:0c:42:62:b5:ea:61:
                    96:a9:14:c7:b2:85:2e:ea:a1:1b:47:fe:38:d3:a0:
                    c0:3d:be:e6:8d:9f:6e:74:01:7b:56:06:94:0e:e7:
                    f2:1e:41:e2:4f:23:82:90:15:f2:ad:db:58:45:b1:
                    ec:4c:fe:f1:ea:a0:f5:9a:f7:04:05:58:ad:d1:e6:
                    a6:e9:4c:71:38:fb:ee:8d:8d:f9:4e:c3:19:2f:f8:
                    d0:fb:77:f2:08:0c:b1:82:58:37:9f:3f:23:09:15:
                    fc:bf:1f:5f:28:5d:74:af:95:2a:3d:2a:14:71:0e:
                    43:1f:0c:69:c5:89:40:c6:52:ae:da:55:b4:42:64:
                    27:30:81:81:a8:2e:96:59:cf:fd:d7:df:81:6b:14:
                    b3:25:1d:7d:06:97:57:8b:09:3e:e5:33:08:45:2d:
                    0b:bd:bb:ac:d8:f0:ca:18:a5:93:34:36:69:fb:33:
                    d1:8b:82:4c:f3:05:03:49:6e:fa:75:6a:04:83:5a:
                    0f:fa:22:29:9f:38:97:0f:8b:c8:ad:3b:ed:eb:30:
                    60:4d:49:b0:b4:04:82:9a:44:55:e0:10:4d:fd:0b:
                    90:a6:f5:78:3b:dc:01:90:55:25:4d:33:a4:92:2e:
                    46:77:0e:aa:1a:98:a2:0a:11:ad:c4:51:ff:15:5a:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:13:4E:B7:82:2E:EB:3A:B2:17:AE:DB:87:6D:22:3B:71:CB:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66c32367-8469-414b-b22c-ee4a9a320966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:83:f1:38:64:9b:e7:bf:1e:0c:09:f1:ee:93:78:e3:8e:0b:
         ca:67:f0:4e:dc:8c:85:51:86:76:91:2a:f8:53:3e:86:61:e7:
         94:af:45:23:0b:f1:38:c7:32:e9:75:91:64:09:01:5f:e1:ee:
         ad:35:d6:7a:1f:d3:db:cd:4e:c8:e9:bb:89:d6:96:fa:8c:1f:
         f6:50:55:30:70:6f:77:1a:83:7d:ab:f4:91:e9:35:1c:09:48:
         a8:72:f5:b3:dc:a1:c0:4f:60:45:e2:66:68:a1:70:c9:21:26:
         86:fe:a3:3f:e8:ba:c4:8d:2a:d0:45:e6:79:3f:b4:b2:d9:ea:
         b9:6b:a5:58:2a:f0:cf:c3:85:ed:c6:6a:98:bb:2e:d7:84:0c:
         8b:66:71:6a:ea:7d:55:d7:34:60:e2:5c:8a:54:1a:4a:39:16:
         82:eb:10:53:61:8a:35:ea:86:f8:da:b5:f7:4c:8f:a9:2a:f6:
         c6:6e:0d:75:05:c2:f5:78:29:b7:b6:31:90:9c:6f:c8:f0:5f:
         be:44:f1:c2:79:23:02:82:6d:e0:90:76:cf:f1:99:46:d4:75:
         5a:35:a9:6c:17:51:2d:3b:33:17:37:c7:4e:9d:1f:7d:1d:01:
         12:fd:b5:58:db:fe:65:9d:4d:b9:39:4b:e1:46:6e:77:08:a8:
         fd:45:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----