Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea91218-1b79-4ad4-9d8e-58bc31686ed4.roa
File:                     6ea91218-1b79-4ad4-9d8e-58bc31686ed4.roa (raw, json)
Hash identifier:          dIQ1Pc8F1ehDe2nx6YsqmugLv9HNiC9RtOpJv0p0Sao=
Subject key identifier:   80:E3:C7:2D:1B:43:85:40:70:EC:D9:C7:28:20:F6:89:1A:7A:A5:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1EA0480D92A95B563E48887ADC0C333CC856EDD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea91218-1b79-4ad4-9d8e-58bc31686ed4.roa
Signing time:             Wed 12 Nov 2025 02:40:11 +0000
ROA not before:           Wed 12 Nov 2025 02:40:11 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a0:48:0d:92:a9:5b:56:3e:48:88:7a:dc:0c:33:3c:c8:56:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:40:11 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=b60748d6d0328ca7b1755837c1a4a6fbd15c1c6b6141d605fc83d230d4aba024, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:a1:5a:fa:97:6f:e5:a1:4f:b4:4f:48:37:
                    be:b1:84:49:f4:31:9c:9c:7b:d7:a8:32:83:90:74:
                    21:d4:28:7a:f8:fa:1c:3d:1d:cf:57:d7:c6:56:8b:
                    23:73:0a:ae:b4:6c:2a:23:83:28:87:f5:2b:07:ed:
                    82:38:fb:4f:dd:cb:b7:a2:d9:a2:c8:c2:5a:c1:82:
                    6e:af:6b:5a:19:6d:3a:a5:b2:37:a1:81:ef:aa:c7:
                    f8:66:21:de:be:e0:16:c4:4b:01:14:47:72:09:1a:
                    0c:8a:da:1c:b9:d7:48:56:af:d4:12:34:48:11:d6:
                    9b:39:2d:b2:13:72:69:ac:a0:bc:6c:08:19:b2:5e:
                    71:a0:94:3d:aa:90:5a:2d:cb:da:53:a5:39:28:31:
                    fe:d6:f3:fd:68:89:31:d4:c2:3d:f4:47:40:62:d9:
                    c9:90:f7:6b:73:99:19:c5:42:32:9c:c1:97:fc:46:
                    f3:00:5f:49:6b:36:c7:9b:c8:87:82:ac:20:f0:40:
                    56:c8:aa:f2:e2:1f:7c:20:dd:d2:0b:3f:9d:d7:07:
                    7b:23:17:e3:f4:9d:4b:61:c6:30:73:67:af:91:cc:
                    86:b2:77:13:08:c8:d4:2e:30:cc:e9:b5:14:00:18:
                    d6:8d:c3:66:60:a9:f6:e2:3b:fe:09:f4:96:13:07:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:C7:2D:1B:43:85:40:70:EC:D9:C7:28:20:F6:89:1A:7A:A5:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ea91218-1b79-4ad4-9d8e-58bc31686ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:24:c0:b0:90:16:62:6b:bc:d0:43:e3:9c:98:32:96:3c:02:
         3b:b6:ca:24:0a:c6:f3:0b:03:53:99:8e:8f:9b:0a:35:d3:c2:
         38:7d:5b:d3:a4:0c:37:fc:dd:f8:4d:f1:d9:f9:12:99:79:5a:
         02:22:f5:ef:d7:51:d4:2c:70:94:c6:b6:f2:f7:34:b8:07:38:
         b7:a6:89:06:7b:3e:77:eb:bf:c7:28:e4:30:de:50:45:6f:cd:
         a3:d4:3c:9b:48:c9:a6:fe:d6:8b:ec:76:4f:11:2f:6e:24:18:
         ef:37:4f:1d:62:1e:e3:92:52:13:5e:d6:79:63:b2:2a:fa:74:
         e5:d9:09:a4:8f:8d:f1:7f:9d:4a:aa:c4:fc:79:59:de:df:aa:
         25:cc:f9:9d:7c:ee:23:c2:81:38:b3:98:a7:67:4e:f6:1e:1f:
         9e:74:9a:44:94:90:f2:a6:0d:42:e1:41:b4:be:df:f2:cd:b8:
         68:fe:93:84:37:e7:41:fd:36:b8:21:34:c3:81:58:ed:44:8d:
         a4:61:d7:ca:0f:56:07:24:6c:50:80:4d:ed:93:77:64:8f:dc:
         58:23:d6:30:8e:82:82:7a:eb:59:15:01:02:7f:70:3e:c7:ec:
         04:0f:05:7f:14:9f:1e:4c:0c:9b:68:6a:97:0d:bf:94:83:6b:
         db:96:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----