Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b0931d-a397-46da-8639-ccffdd2ce88d.roa
File:                     92b0931d-a397-46da-8639-ccffdd2ce88d.roa (raw, json)
Hash identifier:          jvsoBDlrG1wke02GsQnzSpm2XO2waAz0ZWZwnAUqLlM=
Subject key identifier:   2B:8C:BA:CA:EA:ED:93:A8:95:3B:A1:D5:2D:26:AB:83:80:32:46:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A1D3441C314F33CD176DDA9096C874C93174465
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b0931d-a397-46da-8639-ccffdd2ce88d.roa
Signing time:             Wed 24 Sep 2025 00:22:01 +0000
ROA not before:           Wed 24 Sep 2025 00:22:01 +0000
ROA not after:            Wed 29 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.159.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:34:41:c3:14:f3:3c:d1:76:dd:a9:09:6c:87:4c:93:17:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 24 00:22:01 2025 GMT
            Not After : Oct 29 23:59:59 2025 GMT
        Subject: serialNumber=3cf910ec2a0578a9020666bc8ccb28a97b3e8c62aed2e09ad18d095481ad033e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:d9:d8:ff:37:8f:b1:3a:c5:e8:78:75:a6:
                    c8:4d:46:43:2c:3e:54:83:36:51:7c:f9:77:b7:50:
                    f9:d1:a2:c1:08:44:1b:6d:54:b2:91:01:06:6d:20:
                    dc:30:83:d9:08:91:69:f8:56:86:a3:e9:7d:7a:67:
                    33:fd:b8:aa:40:fd:ed:c8:6f:83:7c:60:03:60:bb:
                    27:c9:01:a7:f0:3b:b5:e6:ff:59:f6:bc:dc:76:7d:
                    45:34:cf:fa:a5:55:0f:c5:84:74:9a:ec:17:0d:36:
                    29:87:95:7e:8e:6a:85:fd:4b:3e:9c:1b:bd:8a:c1:
                    0a:d0:24:4b:95:ac:36:f7:bc:61:23:04:a7:fa:14:
                    c7:9d:c5:e5:c9:56:9c:db:45:02:3b:9e:0a:c8:c1:
                    10:bd:14:6f:25:26:6d:42:7e:c7:cb:da:50:30:10:
                    47:68:fa:89:01:20:c5:44:50:3f:1c:8a:2a:ad:8f:
                    6a:25:9b:26:a0:fa:ae:68:7c:f9:cc:48:4f:1a:05:
                    71:70:bb:6f:ae:f4:2e:11:b7:b2:98:54:42:7e:f8:
                    eb:c2:09:5e:27:b2:22:23:78:af:d1:a4:d5:82:3d:
                    83:b4:f6:f0:b2:26:f8:22:5b:56:62:5a:0c:1c:fa:
                    fe:71:34:1a:df:2c:0a:a4:d3:fd:0b:de:56:bf:81:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8C:BA:CA:EA:ED:93:A8:95:3B:A1:D5:2D:26:AB:83:80:32:46:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b0931d-a397-46da-8639-ccffdd2ce88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:2b:90:84:c8:35:9e:91:a7:d1:97:01:e3:16:14:f1:0f:
         24:e3:93:8e:85:ec:e5:97:6d:fa:27:ed:27:fb:de:e4:a7:df:
         79:37:bd:69:b3:3c:3f:1f:bc:05:52:ac:4d:0c:11:5a:76:5e:
         7d:bc:cb:9f:e7:c8:f2:9b:17:14:71:a6:11:32:e8:bc:48:fd:
         2b:a3:0d:f1:09:4b:12:bb:8b:8a:d5:3f:41:3b:d9:e7:49:21:
         ae:8e:93:01:4a:0c:32:b0:38:0d:48:df:8c:b0:50:df:56:89:
         cc:9b:9e:28:a9:6a:c4:5f:62:e8:bf:21:9e:04:d2:ee:2c:e1:
         b7:4d:e1:ad:38:be:3e:7d:9a:a0:64:c7:11:8a:65:6d:83:61:
         d1:e9:cc:c6:ca:9d:a4:87:9b:a6:41:cd:52:3c:8d:f1:5a:49:
         3b:c6:96:c2:3e:c7:b8:7b:98:a7:62:2b:ca:1d:6d:97:07:55:
         76:cb:e6:1b:a4:be:2a:3f:43:0a:0c:29:2f:be:06:e2:75:cf:
         bb:ff:9c:17:6c:4a:a9:f5:ce:65:c4:4c:47:ac:e1:fa:77:fb:
         c9:55:1a:30:fc:dd:59:93:fa:f1:0b:75:14:62:c7:3d:b8:3a:
         15:5e:12:ec:63:55:3c:c9:74:27:0e:f4:f1:41:2d:a0:81:87:
         7f:f4:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----