Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa
File:                     9155fb8e-4b88-4b5d-acc6-999e583f0281.roa (raw, json)
Hash identifier:          3l0OI1uQMWOJqDV1/q33NVVxmJbE+nYwO2KRowtOxxA=
Subject key identifier:   05:C2:6D:EF:E0:EA:11:34:43:37:DA:B6:31:2B:EC:62:39:29:7B:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EDD578BAFE5C3CAEE2049FFBDC8C1F13CC9D079
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa
Signing time:             Sat 15 Nov 2025 00:40:06 +0000
ROA not before:           Sat 15 Nov 2025 00:40:06 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.73.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:57:8b:af:e5:c3:ca:ee:20:49:ff:bd:c8:c1:f1:3c:c9:d0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:40:06 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=d97cedd2d5744287da1028d433b257d7f5196c30d472872575f4fc274b036028, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:60:18:20:4a:d4:b4:4d:e0:14:40:43:1d:
                    5a:f4:ea:b8:b7:d2:0e:d5:7b:35:af:a7:37:68:ae:
                    03:c8:9e:43:fc:1a:24:6e:e8:4b:54:bf:ce:0d:e1:
                    61:e2:3e:ae:d3:28:c5:64:16:d5:4c:49:9b:e9:3f:
                    45:c1:4b:a7:96:e8:64:6d:a0:2e:64:50:d5:94:ab:
                    be:b9:51:80:78:d4:7a:fa:f3:81:02:39:ca:72:48:
                    a2:40:86:38:81:10:58:56:7a:47:59:8a:d2:e8:40:
                    f3:d4:f2:5a:9b:dc:89:39:02:cb:a8:40:2b:99:a6:
                    82:4b:9b:e6:b8:75:91:91:97:18:5c:f5:52:13:ee:
                    ce:fb:96:39:86:e8:ef:7d:29:64:4c:a7:a9:22:04:
                    22:0e:6b:9e:8f:c9:f1:6e:1e:1e:15:3f:14:e7:fa:
                    0b:e2:ed:eb:00:21:53:ef:2a:75:0f:00:02:99:d9:
                    8a:3e:7c:84:03:0b:66:0b:8e:ee:65:fd:52:d5:07:
                    4b:ef:46:2a:9e:2a:1f:b5:28:81:ed:9f:e2:8e:be:
                    50:d2:41:55:19:89:58:d5:db:90:b1:34:be:6c:a4:
                    49:0b:43:04:9c:38:1b:c0:b3:9e:d6:26:1b:57:94:
                    74:0b:e2:2d:12:56:bb:31:37:53:ad:53:0a:5f:6a:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:6D:EF:E0:EA:11:34:43:37:DA:B6:31:2B:EC:62:39:29:7B:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9155fb8e-4b88-4b5d-acc6-999e583f0281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.73.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         cb:fb:47:1c:b0:ce:f1:80:72:37:64:ef:10:83:21:44:ef:9d:
         51:b7:17:ed:43:0f:c2:9d:fb:67:2e:28:f5:84:2b:40:30:86:
         0f:37:d7:d9:8d:ed:bc:90:80:c4:f7:a7:54:b6:7e:fa:a7:d7:
         8d:a8:90:55:08:fd:3c:cd:e6:9f:b8:2d:20:e6:58:6d:16:f9:
         4c:45:31:0d:4a:14:83:0f:06:17:46:1d:cd:ce:27:36:11:bd:
         dc:28:2d:9d:e6:96:78:37:ec:af:f6:92:a4:6f:df:b5:6a:55:
         47:e1:ba:4f:79:3e:8b:72:3b:5a:10:47:3a:b4:8f:7b:4d:39:
         7d:48:9e:d3:9f:3e:08:9e:83:7b:33:8e:ac:5b:c2:61:fe:e4:
         dd:f3:08:90:44:5d:61:35:34:86:bf:73:90:fa:53:e7:54:91:
         8b:68:4d:23:f1:c1:d9:75:05:8e:c2:3c:a5:14:7e:68:a3:02:
         88:6c:6f:ad:94:68:8a:ef:02:9f:cc:96:c8:ca:20:00:ae:ea:
         fa:9a:52:99:ae:c0:63:62:80:cf:57:9b:44:2d:4a:1b:ea:25:
         0a:be:c9:2a:2f:cf:af:5a:d1:b3:d9:e2:16:eb:b3:81:7f:59:
         58:2f:19:f5:0a:cd:78:13:6d:15:72:2d:63:6f:d7:68:67:56:
         ed:7d:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----