Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa
File:                     8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa (raw, json)
Hash identifier:          +N5zrHStO97dkr5yVVb/zrtbxOCe7RlCNgmJGxPsY74=
Subject key identifier:   5E:4A:A2:51:5C:3E:E3:0A:A3:DE:E5:10:53:FF:AD:8E:2F:67:4D:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04E5DC50175B4FA12691423C2DD0E0C8599D0BE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa
Signing time:             Tue 11 Nov 2025 02:31:11 +0000
ROA not before:           Tue 11 Nov 2025 02:31:11 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.184.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:dc:50:17:5b:4f:a1:26:91:42:3c:2d:d0:e0:c8:59:9d:0b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:31:11 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=a6548f802549264c4b21c0f542e054d2bda826532b5bb2153d7e3ac1d4f81d1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:78:d5:93:35:5c:a7:60:33:66:c9:bf:44:
                    40:f2:10:d9:a9:a3:f0:9e:ed:97:eb:c3:b4:7c:f1:
                    25:90:3b:59:a2:39:e0:63:39:0c:e5:87:fd:f3:ff:
                    c1:c0:8e:98:35:de:e1:68:3a:ba:c3:bf:ab:f4:a3:
                    07:41:c4:14:44:7e:b4:11:e0:de:24:41:33:a4:49:
                    71:26:83:90:1f:06:cb:ae:26:a9:89:f6:30:57:e4:
                    3c:05:d5:83:33:eb:69:89:5c:52:00:45:cd:5f:37:
                    0b:b8:fd:8e:e2:41:b9:f1:f2:45:4e:1d:9f:d7:fc:
                    44:43:d3:39:b2:74:af:56:9d:7b:33:17:64:30:7e:
                    51:89:7f:fe:94:58:fa:0c:54:04:69:15:a2:68:3e:
                    1b:4d:11:31:f3:f4:68:de:ff:c5:cd:63:31:3f:da:
                    9b:cd:9d:7d:c9:3d:47:c2:66:60:ef:f7:81:ec:7f:
                    a3:30:c3:f8:60:f2:dc:66:7f:96:46:c0:1a:02:0e:
                    22:18:c3:53:fa:8c:ba:ca:2c:08:07:e1:16:b4:12:
                    29:b9:56:0e:c3:54:94:9f:c2:07:3b:91:a9:49:5b:
                    f7:8d:7f:13:6d:5b:47:9f:8a:b7:61:d2:80:1d:5d:
                    f0:1f:78:68:00:91:5b:22:ba:bd:27:dc:3c:d1:33:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:A2:51:5C:3E:E3:0A:A3:DE:E5:10:53:FF:AD:8E:2F:67:4D:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8eaa4749-a045-4880-ab8c-90d7c1406a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:b8:3c:81:fe:4d:79:ef:46:76:9d:dc:5b:75:33:49:2c:
         d0:e8:df:22:6d:3b:89:fc:e1:1a:6f:5a:92:96:b4:ac:2a:cd:
         f4:7f:b4:e0:6d:69:48:20:7a:8f:d4:b5:63:02:30:68:01:fe:
         3e:ca:fd:c7:be:b8:07:d9:ad:01:1b:26:e8:04:8c:1e:2b:da:
         cc:64:37:be:92:4a:50:79:17:6d:d8:26:8f:c6:e0:78:24:b7:
         db:fd:3e:f2:7c:4b:c0:1c:21:43:27:54:24:01:bc:4c:04:d5:
         75:90:8e:0e:1d:a5:14:80:41:aa:80:b2:b5:e6:e0:e1:4c:0f:
         41:00:2c:7a:94:2f:3d:86:9f:81:d8:92:8e:e8:13:09:5c:95:
         71:3e:30:4c:6e:5d:4b:6d:a7:16:89:b3:16:0c:d8:8c:1b:a0:
         81:ee:97:41:96:06:db:16:74:ab:2b:3e:46:e5:45:ef:86:45:
         7c:5d:95:5f:f8:27:61:c5:21:c9:40:74:88:4c:d5:82:0e:3d:
         61:28:b9:0f:d3:44:77:ea:f1:e0:f7:7e:5a:b6:41:fc:15:b8:
         6d:76:b5:eb:ba:08:5d:9a:ab:60:88:95:cb:b6:20:29:3b:49:
         32:6d:74:6c:63:a6:ff:ea:c1:da:c3:fb:fb:16:f2:8b:d4:76:
         d2:52:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----