Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
File:                     7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa (raw, json)
Hash identifier:          w/apgYixUxdYCSRpHTAB5Z5mLTxGyXayB8Bfu4WvQS8=
Subject key identifier:   0E:B7:24:99:35:35:EE:B0:43:52:AA:5B:40:12:FB:0D:77:04:46:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2CB7AEF793CC54D23B94B63266D2CFB62D5391F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa
Signing time:             Tue 28 Oct 2025 01:01:15 +0000
ROA not before:           Tue 28 Oct 2025 01:01:15 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.255.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b7:ae:f7:93:cc:54:d2:3b:94:b6:32:66:d2:cf:b6:2d:53:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 01:01:15 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=69c896f2743c55c8f208468d6222fabc932257ea708ad98f5acb880d152f0c0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:3e:d6:77:9d:3b:4a:25:43:f6:ee:20:2d:
                    d3:74:88:c0:d2:8a:eb:98:81:51:00:4f:69:01:0a:
                    d7:6f:41:e6:6b:64:e0:37:db:6e:27:53:8a:cb:95:
                    2a:ab:ce:ef:60:9a:27:d9:2a:53:2f:24:4d:bc:a0:
                    66:0c:76:df:ad:97:21:ed:5b:b8:06:30:d3:6f:b5:
                    d2:af:83:7c:e9:3e:e9:37:a4:78:dc:f2:51:8a:08:
                    a3:59:a0:1d:0f:62:0b:16:43:dc:ea:c5:81:ab:49:
                    32:b3:40:82:21:ff:4f:26:74:fd:bb:71:ed:70:0f:
                    cd:fa:12:9e:d5:6c:39:3a:73:58:bf:90:5a:99:b1:
                    8f:52:8e:2e:4d:46:1b:ac:79:98:2a:db:65:62:13:
                    93:62:1c:d2:70:5b:86:f2:b9:34:03:8d:93:29:08:
                    0f:0d:e4:21:df:45:14:b7:9f:2f:77:6c:fb:93:2d:
                    fa:f2:8c:59:e9:ca:66:31:b9:a7:b0:8a:5a:57:f7:
                    58:01:88:cc:10:4b:dc:df:d0:ec:a1:d4:93:0e:10:
                    c1:88:ed:d5:6e:7f:da:a4:8b:cf:bc:91:3f:2c:53:
                    21:fa:13:df:47:54:da:6c:6b:78:12:8e:1b:f1:37:
                    72:ee:ad:f8:50:64:95:1d:18:69:b2:ec:a2:69:2b:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:24:99:35:35:EE:B0:43:52:AA:5B:40:12:FB:0D:77:04:46:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c0d17be-256c-4d26-83ba-b3ae68aeef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:49:1f:f0:b3:dc:ab:59:b9:9d:8d:9f:32:f4:d2:63:b0:fe:
         76:3f:2c:58:7d:d0:5c:93:b2:16:3f:6d:f4:09:59:39:25:f0:
         ab:6b:13:d6:9a:dd:86:a5:2d:a8:2a:a3:5b:c3:84:5c:af:12:
         1e:77:5d:c7:78:02:26:ec:a8:1c:40:a2:4b:e9:49:16:86:b6:
         33:88:33:a6:17:0b:a2:4f:a3:b5:f6:14:aa:9a:82:70:b4:5f:
         51:85:d9:aa:bc:07:3f:e9:de:6f:51:f9:5c:eb:92:e7:48:30:
         31:85:02:ab:f5:33:61:27:cc:bf:4b:36:06:2d:4a:9b:f6:ca:
         30:7d:4e:c7:2e:d1:cc:e6:67:af:65:96:b1:b3:c2:e0:58:37:
         37:6f:95:90:86:20:ec:af:fd:dc:6f:82:38:fe:dc:7d:07:4a:
         23:89:52:a1:73:3d:7d:4d:52:c6:d3:34:a0:0c:b8:96:12:1f:
         c6:ea:32:8b:76:fb:9d:62:c9:41:69:0e:08:14:5f:3f:22:59:
         93:1a:20:77:c3:ce:92:04:0e:92:b8:ca:9c:04:02:6c:6b:5f:
         be:ea:ad:c8:3c:71:76:d4:fd:1b:48:71:9e:bf:9b:b2:5f:ab:
         27:9e:31:0d:03:2a:84:7e:0f:2c:6e:ea:66:37:16:e4:f0:fc:
         65:68:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:43 2025 by rpki-client