Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ee3cdc-19ad-42b5-a61e-43278af5d104.roa
File:                     d3ee3cdc-19ad-42b5-a61e-43278af5d104.roa (raw, json)
Hash identifier:          kwy14l21DtaCHgMz6Ru38OSLd8hdJUQ7WYcZrG9/pUk=
Subject key identifier:   99:79:04:D7:F2:0D:79:60:F1:F7:6D:B5:7D:F6:C7:92:13:97:AA:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A32D16701BFFA38C9D0F343148B25D637A2059F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ee3cdc-19ad-42b5-a61e-43278af5d104.roa
Signing time:             Tue 30 Sep 2025 00:11:08 +0000
ROA not before:           Tue 30 Sep 2025 00:11:08 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.18.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:32:d1:67:01:bf:fa:38:c9:d0:f3:43:14:8b:25:d6:37:a2:05:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:11:08 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=ed0ea46f07a49806baac2330c2b9794b05a1e30878fd650375bed2e09e452b23, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:67:4e:dd:75:22:1c:dc:96:15:af:4c:c7:
                    7f:0e:3b:c1:32:9b:d5:bc:03:fe:d5:31:51:78:57:
                    1c:3e:29:00:c4:43:6d:80:c4:2e:fb:d9:93:a7:e6:
                    bc:df:e6:48:6a:00:0a:5b:4c:53:d0:2a:c6:49:c0:
                    32:af:bc:c9:cf:6d:2c:95:a8:32:dc:32:ae:69:34:
                    cc:13:dd:55:ad:db:2d:aa:b6:38:07:9b:9a:48:23:
                    55:a9:c1:fb:f8:96:8f:b4:c6:80:a2:9a:02:de:4c:
                    01:16:be:6f:c5:76:45:c9:5c:a9:1d:77:14:7e:aa:
                    f7:ac:f4:ef:35:ab:76:fc:ad:07:f1:2e:a0:32:89:
                    fd:e4:13:41:2b:03:75:a7:8a:54:6e:47:ea:cf:3d:
                    9a:60:5d:e5:8f:90:3a:a9:ac:6b:95:7d:27:ef:c7:
                    f7:85:a3:93:2f:11:41:1f:d7:3a:29:b7:d1:0b:66:
                    62:77:bd:29:aa:0d:ed:c8:ea:df:dd:bc:13:15:41:
                    81:77:72:67:cf:26:a0:94:7c:63:0c:59:8e:9d:77:
                    01:34:6f:c7:c6:82:df:dd:da:42:e5:7c:de:f2:14:
                    b5:81:7b:c4:2e:1c:89:1d:6b:13:9a:44:bc:fd:0b:
                    e8:57:e8:13:a3:6a:25:91:2e:a1:24:ba:da:0b:7c:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:04:D7:F2:0D:79:60:F1:F7:6D:B5:7D:F6:C7:92:13:97:AA:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ee3cdc-19ad-42b5-a61e-43278af5d104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:31:cd:b9:27:2f:50:69:8d:a7:d6:39:80:9e:8f:0d:e4:
         15:52:20:bf:56:5e:60:4d:4c:7f:2e:6f:bf:f0:4e:09:f8:4e:
         c8:97:38:89:b7:5c:5d:36:14:2c:ca:35:0e:39:d6:25:6c:64:
         42:58:05:2d:0e:46:f1:53:60:8d:59:5b:78:20:2c:47:ea:c6:
         8b:f7:8b:b7:25:c8:4c:c7:a5:f8:89:2f:0a:8e:d6:0e:f7:5f:
         30:c0:60:44:1d:59:14:e1:e9:b6:be:0c:e4:9d:77:55:51:1f:
         4e:10:a9:a2:aa:0b:b6:be:2e:35:3b:92:11:46:7b:7d:86:1a:
         cb:3c:e1:32:43:97:5b:96:f0:0f:78:66:4e:df:d2:37:04:ff:
         87:bc:b0:46:c8:8d:8d:25:bb:13:6e:02:78:00:8a:59:18:fc:
         38:ef:13:98:d7:08:d7:50:43:c3:50:08:ae:d7:d2:6c:1a:93:
         ae:14:16:cb:75:23:5a:a3:56:1c:13:ad:ce:2a:8f:2e:dd:1f:
         c8:0d:32:d9:5e:d6:8d:2e:9e:28:32:07:f6:0d:40:d5:bd:f5:
         06:a3:7e:cb:37:76:0c:d0:01:fd:b8:df:d1:1b:84:0f:dc:b2:
         cd:3d:2b:90:73:9c:ee:2d:dd:c5:98:a7:d5:0b:ef:8b:7e:45:
         76:98:07:c8
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSjLRZwG/+jjJ0PNDFIsl1jeiBZ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAxMTA4WhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDBlYTQ2ZjA3YTQ5ODA2YmFhYzIzMzBjMmI5Nzk0YjA1
YTFlMzA4NzhmZDY1MDM3NWJlZDJlMDllNDUyYjIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyU2dO3XUiHNyWFa9Mx38OO8Eym9W8A/7VMVF4Vxw+KQDE
Q22AxC772ZOn5rzf5khqAApbTFPQKsZJwDKvvMnPbSyVqDLcMq5pNMwT3VWt2y2q
tjgHm5pII1Wpwfv4lo+0xoCimgLeTAEWvm/FdkXJXKkddxR+qves9O81q3b8rQfx
LqAyif3kE0ErA3WnilRuR+rPPZpgXeWPkDqprGuVfSfvx/eFo5MvEUEf1zopt9EL
ZmJ3vSmqDe3I6t/dvBMVQYF3cmfPJqCUfGMMWY6ddwE0b8fGgt/d2kLlfN7yFLWB
e8QuHIkdaxOaRLz9C+hX6BOjaiWRLqEkutoLfJa/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUmXkE1/INeWDx9221ffbHkhOXqqwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzZWUzY2RjLTE5YWQtNDJiNS1hNjFlLTQzMjc4YWY1ZDEwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQEjANBgkqhkiG9w0BAQsFAAOCAQEACosxzbknL1BpjafWOYCejw3kFVIg
v1ZeYE1Mfy5vv/BOCfhOyJc4ibdcXTYULMo1DjnWJWxkQlgFLQ5G8VNgjVlbeCAs
R+rGi/eLtyXITMel+IkvCo7WDvdfMMBgRB1ZFOHptr4M5J13VVEfThCpoqoLtr4u
NTuSEUZ7fYYayzzhMkOXW5bwD3hmTt/SNwT/h7ywRsiNjSW7E24CeACKWRj8OO8T
mNcI11BDw1AIrtfSbBqTrhQWy3UjWqNWHBOtziqPLt0fyA0y2V7WjS6eKDIH9g1A
1b31BqN+yzd2DNAB/bjf0RuED9yyzT0rkHOc7i3dxZin1Qvvi35FdpgHyA==
-----END CERTIFICATE-----