Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa
File:                     7538292c-9697-4822-8500-3088da3cb9a2.roa (raw, json)
Hash identifier:          AaeuN1VALr8vgAU6jkv2vfciogOwSavsP8FvCPml3aM=
Subject key identifier:   46:2C:ED:E6:39:58:AA:FD:49:A0:F0:CA:57:67:6E:BA:DE:B0:50:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7697897B58D6F6031DBDAA082C3525232F7B2C66
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa
Signing time:             Tue 11 Nov 2025 02:30:43 +0000
ROA not before:           Tue 11 Nov 2025 02:30:43 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.88.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:97:89:7b:58:d6:f6:03:1d:bd:aa:08:2c:35:25:23:2f:7b:2c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:30:43 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=6d461ffc1e6795fe9e73275cbcf7e8648027d294d8b6bcf679b80c3dc82002bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:d0:24:e5:65:b5:d9:ed:8f:5f:85:5a:a4:
                    bc:63:cf:0e:70:cb:56:7f:6a:3d:ff:e7:5d:d2:f1:
                    8d:44:7e:2f:a0:89:ba:dc:ee:cc:41:df:f9:bb:36:
                    02:f2:85:5a:d8:cb:db:f5:4b:14:2d:fb:10:70:9c:
                    5e:93:17:16:df:84:55:cf:76:b9:92:14:42:b8:e4:
                    c2:f8:2b:98:c7:cd:ba:22:1a:c9:5e:bf:13:d0:50:
                    ae:c0:77:75:45:35:c4:4d:ef:00:75:6b:31:ff:2b:
                    56:1c:72:7f:19:0b:5a:b3:6d:f6:84:a3:fe:0d:a4:
                    3b:8b:62:29:76:4d:65:3e:9c:63:f7:1a:20:8f:4f:
                    d3:c2:9e:f2:22:d1:51:fd:86:d1:e6:65:6b:6e:b7:
                    cd:fc:f4:77:95:dc:4e:80:d9:e4:85:08:c2:18:cc:
                    92:ea:95:18:3b:b5:29:af:49:80:1d:65:91:ec:be:
                    b2:d1:1f:ff:fa:cb:02:00:38:89:77:c3:71:9b:22:
                    c9:92:34:3f:6a:c6:21:9a:a8:8f:ad:61:f8:c9:ea:
                    a7:4b:9c:6f:a8:aa:12:28:e1:dc:41:05:26:8e:14:
                    d6:13:e8:fd:0c:9e:93:30:ac:80:b6:11:35:0b:c0:
                    27:f7:7e:d4:e9:e2:1f:d8:84:f2:f9:ab:6c:bf:16:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:ED:E6:39:58:AA:FD:49:A0:F0:CA:57:67:6E:BA:DE:B0:50:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:21:a2:dc:32:42:d5:26:72:e2:c9:17:1d:f0:f3:d6:1a:
         4a:81:87:ab:2e:7c:9f:cc:d4:4a:6f:7b:72:38:3c:17:b5:99:
         5d:1f:65:ea:07:22:59:a2:d6:f0:bd:c4:3f:d7:b0:f5:29:2e:
         33:9a:6c:99:a2:5d:ed:cd:ef:ab:5c:d1:18:a9:08:fb:32:8a:
         0b:aa:3d:33:2f:92:d2:f7:1e:33:8e:6b:7a:a5:07:a6:46:11:
         13:b2:e2:3e:06:fa:7d:fb:8d:aa:40:4d:ec:de:2f:80:cc:48:
         99:6d:32:25:df:2f:cc:6b:d6:16:fc:b2:e3:3a:54:c9:61:a9:
         e9:df:a0:d2:47:45:9d:e4:00:32:5b:ca:e3:9f:11:a1:d8:35:
         d2:fa:1c:ae:b7:20:c8:0f:fb:16:23:03:92:49:83:44:68:bf:
         88:9c:87:63:7e:9d:97:21:02:0b:ea:92:7a:f8:e7:b4:da:cd:
         9e:df:fb:8c:48:a7:03:e9:3b:6a:ad:37:e0:47:25:82:37:8f:
         50:d0:5b:74:ff:b7:8c:fd:dc:f9:f6:cc:93:ed:ba:f8:06:2c:
         b8:08:dd:23:04:81:5b:44:fc:a7:85:e5:b7:28:3d:d8:f7:a6:
         f6:5a:9a:7b:a0:3e:d4:72:e6:d5:36:67:fa:b4:43:fc:4e:c5:
         e2:b0:a3:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUdpeJe1jW9gMdvaoILDUlIy97LGYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIzMDQzWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDQ2MWZmYzFlNjc5NWZlOWU3MzI3NWNiY2Y3ZTg2NDgw
MjdkMjk0ZDhiNmJjZjY3OWI4MGMzZGM4MjAwMmJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2ldAk5WW12e2PX4VapLxjzw5wy1Z/aj3/513S8Y1Efi+g
ibrc7sxB3/m7NgLyhVrYy9v1SxQt+xBwnF6TFxbfhFXPdrmSFEK45ML4K5jHzboi
GslevxPQUK7Ad3VFNcRN7wB1azH/K1Yccn8ZC1qzbfaEo/4NpDuLYil2TWU+nGP3
GiCPT9PCnvIi0VH9htHmZWtut8389HeV3E6A2eSFCMIYzJLqlRg7tSmvSYAdZZHs
vrLRH//6ywIAOIl3w3GbIsmSND9qxiGaqI+tYfjJ6qdLnG+oqhIo4dxBBSaOFNYT
6P0MnpMwrIC2ETULwCf3ftTp4h/YhPL5q2y/FsmvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURizt5jlYqv1JoPDKV2duut6wUHUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1MzgyOTJjLTk2OTctNDgyMi04NTAwLTMwODhkYTNjYjlhMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEAVuAhotwyQtUmcuLJFx3w89YaSoGH
qy58n8zUSm97cjg8F7WZXR9l6gciWaLW8L3EP9ew9SkuM5psmaJd7c3vq1zRGKkI
+zKKC6o9My+S0vceM45reqUHpkYRE7LiPgb6ffuNqkBN7N4vgMxImW0yJd8vzGvW
Fvyy4zpUyWGp6d+g0kdFneQAMlvK458Rodg10vocrrcgyA/7FiMDkkmDRGi/iJyH
Y36dlyECC+qSevjntNrNnt/7jEinA+k7aq034EclgjePUNBbdP+3jP3c+fbMk+26
+AYsuAjdIwSBW0T8p4Xltyg92Pem9lqae6A+1HLm1TZn+rRD/E7F4rCjVg==
-----END CERTIFICATE-----