Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
File:                     eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa (raw, json)
Hash identifier:          Bkc6sV8OPCN4sJZ/Sbagooc/fAcjX68FO7zL52H7ops=
Subject key identifier:   4D:3B:A9:7F:29:ED:1F:B1:A9:F6:EA:CE:B6:95:11:F5:1D:93:7B:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       32C6589C801EBC70CEAA65378C580046382EBA0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
Signing time:             Thu 13 Nov 2025 00:10:40 +0000
ROA not before:           Thu 13 Nov 2025 00:10:40 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.0.212.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c6:58:9c:80:1e:bc:70:ce:aa:65:37:8c:58:00:46:38:2e:ba:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:10:40 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=461a303e75119ef295050fc4567239e3c8048cdac30433713ea352228b4a65c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:19:a1:f1:75:79:74:55:7d:47:cd:b7:d6:
                    85:02:e4:da:c9:78:00:59:32:bd:3a:97:12:d7:d6:
                    74:a2:e1:a0:81:a8:36:22:1c:89:f1:33:fb:fc:ef:
                    a8:ad:30:0f:d0:23:e0:08:68:d9:c3:b2:d6:87:6c:
                    44:a8:f5:59:5a:98:a2:da:aa:e2:e8:97:a1:be:08:
                    5e:32:79:12:ae:cc:d5:19:a3:51:d9:04:44:d4:99:
                    89:e2:d8:c9:c4:ca:25:70:e6:da:85:e3:a4:08:c0:
                    6d:59:b7:92:38:58:91:95:75:85:85:69:8d:d4:ec:
                    88:e7:f0:b8:6d:27:14:04:bd:82:67:85:81:e1:66:
                    53:59:17:50:3d:a8:7e:b7:6f:56:e2:5e:17:23:f4:
                    29:de:32:0f:7e:5d:a9:69:a6:f4:be:2a:22:69:b4:
                    27:e1:b6:ad:35:bf:c3:0b:56:ad:f0:a2:06:91:37:
                    7c:ed:6a:00:0c:84:bc:a1:36:f1:30:cb:93:18:22:
                    74:b6:c4:7c:0c:6b:bf:fc:d5:d5:78:e4:e9:38:69:
                    96:ae:98:5e:9f:36:b9:69:d9:ac:8e:c1:94:03:8c:
                    ae:9d:6e:08:33:4e:48:dc:88:c5:12:79:2f:3b:70:
                    ac:46:7f:00:6c:42:e0:b3:0a:b9:4e:94:30:77:16:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3B:A9:7F:29:ED:1F:B1:A9:F6:EA:CE:B6:95:11:F5:1D:93:7B:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.0.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:5c:5e:24:58:ae:be:a3:ef:1c:d0:9f:39:b8:a8:b1:f4:
         28:fb:66:1e:7f:02:0b:90:67:ce:b1:aa:8a:c0:88:66:01:28:
         7a:ea:db:d0:9a:52:6b:0f:1f:02:23:d0:cf:27:b7:1c:c9:5d:
         34:c6:46:17:78:65:54:92:8b:be:08:50:87:a2:e4:f4:d9:f3:
         4e:1a:28:75:cb:e4:b7:57:63:d6:3e:2a:fb:11:54:d2:b9:91:
         69:7b:9f:0c:b9:a4:6d:43:d8:97:b2:81:00:bb:78:a6:63:ee:
         9d:f6:6a:ef:dd:cd:f0:62:ca:b6:5f:de:fb:8e:b0:66:56:16:
         e4:a7:0d:ba:b6:1b:19:d3:a1:86:3b:ba:1f:7c:fa:bb:18:c4:
         b7:b6:a0:49:49:ed:2c:09:42:05:d7:38:63:d9:1e:a2:65:a1:
         88:fc:38:55:b2:81:85:39:68:1d:27:96:3a:4d:1b:cb:9b:99:
         6c:a0:27:a7:5b:16:8d:01:6b:d9:a0:85:92:d3:38:31:32:52:
         56:d0:57:f6:37:3c:e4:78:48:70:ae:52:13:ee:70:c7:b1:03:
         09:1d:3d:fc:c2:be:98:04:6a:b8:2e:16:b4:d2:ec:9c:a9:12:
         1b:fd:71:44:5f:6e:9a:90:8a:bb:a1:19:05:63:07:b6:9e:1a:
         96:4b:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----