Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c2c37c-dbad-40e8-bcc3-17987526695f.roa
File:                     68c2c37c-dbad-40e8-bcc3-17987526695f.roa (raw, json)
Hash identifier:          zuHvQRfmumuMrBMWBybqm9+LF+/2ZUOlB0HD2wb7ROM=
Subject key identifier:   3F:87:BB:1C:45:4B:07:18:8A:FD:BB:A8:6B:B0:CE:69:19:50:09:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       07A6109844D6F1F1C6ABA6195EF23782D42AB19C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c2c37c-dbad-40e8-bcc3-17987526695f.roa
Signing time:             Sat 27 Sep 2025 00:42:24 +0000
ROA not before:           Sat 27 Sep 2025 00:42:24 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        98.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a6:10:98:44:d6:f1:f1:c6:ab:a6:19:5e:f2:37:82:d4:2a:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:42:24 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=1fed83b9dffbf93f400bdc9086a009192dc4b562a872db7987f5850ea3d12942, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:01:fe:45:52:3d:85:b5:9f:da:0e:31:c7:
                    1f:54:ac:14:29:35:a8:ad:ae:c3:ef:f9:cd:f3:c7:
                    9f:6a:3e:81:cc:00:31:97:08:45:e1:d3:e1:e0:32:
                    93:49:fa:4d:aa:39:4c:5c:75:ee:6a:3b:f6:fe:bf:
                    b4:3c:28:38:eb:83:94:54:26:bb:2a:f7:4f:99:41:
                    dc:5d:12:43:10:10:35:37:c9:9c:7d:05:78:51:6e:
                    6d:9e:f8:06:17:21:ad:6b:24:64:85:0b:30:39:8a:
                    45:4e:46:91:4d:ee:dc:3c:d8:04:a8:cc:ee:44:75:
                    56:cc:3b:b2:7b:5b:32:dd:52:67:6d:34:06:42:5c:
                    23:4e:80:7c:1c:6a:e9:25:5d:01:0c:35:b4:91:64:
                    ab:09:4c:51:57:43:e8:bd:71:cc:e4:10:dd:2c:22:
                    44:f4:4b:82:73:37:60:cb:07:11:2d:fd:a8:cf:d8:
                    eb:cc:d1:7b:2f:fe:35:d5:88:e3:90:24:b0:49:87:
                    7e:c9:c5:5d:4c:1c:c5:d4:e5:09:46:ea:39:1b:a2:
                    30:92:32:db:d6:ef:81:83:f4:5f:a8:91:5a:e1:a9:
                    64:e6:0b:6f:48:37:15:72:b3:67:69:1b:f0:65:d6:
                    ab:0b:f9:08:d1:3d:b1:e0:1f:fd:21:d3:b8:77:e9:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:BB:1C:45:4B:07:18:8A:FD:BB:A8:6B:B0:CE:69:19:50:09:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c2c37c-dbad-40e8-bcc3-17987526695f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:0d:3d:5c:53:0b:1d:29:9b:cc:cd:8a:bf:84:86:33:b4:
         77:1a:07:1b:00:f2:ba:b3:7e:a9:60:27:4d:6e:4d:83:ad:5f:
         e4:73:7a:5b:1b:5f:c8:0d:6b:4e:e0:c9:ab:9b:d6:7d:9d:ce:
         ea:c2:e8:4c:e2:4b:3f:6c:79:1c:bc:85:9f:6c:04:b4:8b:6c:
         c8:45:fb:51:bb:1e:f5:b2:8e:1a:0b:e3:a3:09:0c:46:5b:26:
         7c:9a:19:80:e3:d5:83:12:5c:ba:a5:16:27:68:45:5e:b4:af:
         78:a3:e8:9e:25:36:b1:96:71:09:38:7a:57:50:99:89:76:87:
         c6:a5:2f:ca:15:f7:98:1f:b3:db:24:95:d1:72:03:72:8b:97:
         29:13:b2:f9:04:de:1a:9e:28:0f:24:cc:72:bf:b7:4b:d3:2c:
         87:37:87:31:8f:1a:f9:65:4b:8a:0e:7e:a0:7a:a3:ac:be:e6:
         81:3d:31:62:79:41:76:9a:08:08:ca:ab:d6:b8:04:9d:21:64:
         e7:03:5d:e0:af:21:5d:23:dc:ab:f7:68:cc:d1:c0:f4:54:80:
         d5:b0:1c:dc:4d:68:ff:cd:9a:6d:13:72:59:00:3b:e4:aa:cd:
         99:83:bc:2e:e2:d1:0f:9f:0a:e2:8d:70:98:d8:aa:04:80:a8:
         13:fa:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----