Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa
File:                     c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa (raw, json)
Hash identifier:          UgULROBKhSXgJ3Pi1eGJrCiD84BDgtIhpYFcU6wFsvc=
Subject key identifier:   1A:F4:A2:53:45:29:B8:58:3D:70:DB:6E:24:DC:79:F3:D6:21:5F:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1279480E39500BCB13183911DE7F36551409BC7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa
Signing time:             Wed 12 Nov 2025 01:41:25 +0000
ROA not before:           Wed 12 Nov 2025 01:41:25 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.124.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:79:48:0e:39:50:0b:cb:13:18:39:11:de:7f:36:55:14:09:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:41:25 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=fbc5a82506088b79c5e50dff98ea978713eca048f796e38cb67f763c523231f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:5b:f5:ef:98:47:5a:b0:90:35:e4:d5:21:
                    c6:b4:be:a4:2c:ff:8e:00:95:45:e6:7b:94:7f:4c:
                    a2:34:2b:0a:a2:0a:b2:3d:bd:15:ab:f4:ee:58:8b:
                    fa:ca:84:ae:cd:6b:21:99:16:85:e6:33:72:ce:27:
                    cf:77:b1:a7:bb:3b:36:64:fc:c4:4e:5f:d4:f4:6e:
                    37:a9:29:95:90:28:e6:eb:73:ef:67:25:fc:cd:27:
                    70:7c:29:d7:de:ff:4a:b3:da:c0:b2:d8:dc:65:d9:
                    ca:22:34:b8:c3:af:1e:a6:07:b6:41:6a:74:e0:75:
                    14:18:f3:dd:73:a6:ff:70:85:01:c3:30:6e:34:f0:
                    0e:96:8f:02:5f:a6:27:64:89:75:77:b2:cb:1e:49:
                    92:c7:31:be:44:76:15:7b:5a:90:e3:a3:8f:93:a6:
                    94:39:1c:90:e1:28:9d:3c:89:fe:bb:a8:dd:2e:10:
                    fc:e3:bf:04:e3:86:44:38:60:23:ee:4c:97:39:de:
                    e7:6f:0d:7e:66:ea:a9:34:4c:a4:88:74:a8:d3:f6:
                    78:b5:d3:58:16:8a:2d:83:54:6b:42:cc:c6:b3:bd:
                    dc:2c:c7:7b:07:09:5b:c8:9b:bf:cc:3e:82:5c:79:
                    b3:50:3a:a0:68:ea:ca:6e:2d:ee:a2:06:49:a9:59:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:A2:53:45:29:B8:58:3D:70:DB:6E:24:DC:79:F3:D6:21:5F:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c4abb1-44f3-48de-9583-ed4f370ddd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:b0:42:a9:dc:be:9a:18:fc:a0:b4:5d:ee:e1:3c:ab:a0:
         e1:5d:2f:64:69:ed:dd:e3:ce:b9:ad:e8:9e:53:8a:ba:97:4a:
         35:e9:5c:31:b4:0d:df:2c:c2:28:9d:c1:ee:c7:6a:ff:89:38:
         10:0e:38:c8:f2:2f:77:2f:5e:8b:27:a8:a1:32:d9:df:83:12:
         22:eb:9e:62:b5:11:95:59:21:52:4f:63:f7:3d:aa:9f:01:1f:
         33:05:71:9e:2a:47:99:9e:45:41:44:3c:96:07:bd:86:c2:be:
         34:c8:16:21:49:c9:25:69:ea:52:88:c3:d8:c8:fd:9d:33:ec:
         60:dd:e3:ef:8c:af:15:97:a1:a0:88:61:40:36:dd:f1:2f:c0:
         55:9a:86:a0:f3:c5:b4:b5:db:09:fa:24:7c:d3:c8:0d:04:29:
         63:30:a1:a7:e1:55:6d:8f:4e:d5:83:1a:c3:7e:c7:a8:e8:83:
         62:d3:8b:41:69:60:33:db:23:7a:bd:77:43:54:b6:b6:ef:27:
         42:54:41:d8:bb:5a:0c:ba:11:22:c5:74:0b:9f:6d:df:60:c0:
         85:1d:2b:4c:a4:4b:47:31:4d:7c:61:cc:ac:88:8e:3c:e3:7e:
         8d:1f:89:e2:ea:d4:f6:76:3d:f4:71:b9:1b:10:15:32:3c:16:
         fe:2c:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----