Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa
File:                     f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa (raw, json)
Hash identifier:          73OBFHm9CBYdkoY6YwWceXA8GoqxpxSRDKoBvXMvN4g=
Subject key identifier:   79:1D:30:13:57:C1:14:68:9C:EF:CC:A8:2F:DC:C6:42:2B:CF:FF:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08F254C016E1C18D3C327BDDE904262EDE245CAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa
Signing time:             Tue 11 Nov 2025 02:11:08 +0000
ROA not before:           Tue 11 Nov 2025 02:11:08 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        119.13.16.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:54:c0:16:e1:c1:8d:3c:32:7b:dd:e9:04:26:2e:de:24:5c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:11:08 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=2b2cb56edf84df7875d819b82dc06e657f906b05e6b53b4d71770d78c0690e9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:90:25:71:0b:53:8c:2d:47:47:95:43:20:
                    77:f5:e2:30:bc:9a:54:3c:e7:bb:e2:48:cb:b1:5d:
                    a6:81:5b:52:1b:a9:be:a2:e0:f8:8b:72:7c:3b:81:
                    bf:49:d4:08:da:4e:a5:63:e9:a1:53:ed:fd:e7:21:
                    f5:03:0b:48:a2:e9:e3:74:3e:32:48:fa:8f:10:96:
                    e6:8d:fa:98:14:08:0d:f2:33:76:6d:bc:44:cc:f2:
                    c5:a8:c7:6d:5e:e8:28:0a:c2:1f:78:ce:fb:14:e6:
                    96:33:9f:10:d5:fd:80:3f:e3:47:41:00:e5:5c:10:
                    fb:df:39:58:d7:e0:e5:0d:7a:d0:a3:cb:9c:4a:80:
                    9a:b0:18:87:a6:6b:93:bb:14:e3:ad:15:85:7e:e5:
                    f1:ca:2c:48:cd:dd:2e:84:17:de:d4:05:96:a6:68:
                    94:75:63:c6:b9:85:e2:bc:9d:87:f3:2d:f7:d8:b1:
                    e0:13:28:a5:db:24:1d:12:69:af:39:9b:de:01:4d:
                    a0:e5:c8:d2:59:20:b6:7a:05:3c:2c:b0:a1:60:74:
                    60:18:e4:da:ff:7d:e8:70:db:02:e9:47:66:ed:ea:
                    b0:05:3b:ab:be:ea:af:89:1c:9e:bf:e9:03:0e:02:
                    bc:51:a9:b9:06:16:1e:1f:f6:43:f9:e0:36:e0:50:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:30:13:57:C1:14:68:9C:EF:CC:A8:2F:DC:C6:42:2B:CF:FF:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ecbf08-dd1f-4660-af54-3c3bb1f37cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.13.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:13:84:51:b3:8f:3d:fe:2c:82:8e:a3:f4:d4:1d:f6:37:
         8a:df:64:dc:ea:d4:d2:27:7d:3e:3f:ac:f8:7b:0e:6b:ab:49:
         f1:c8:50:f4:42:5f:b3:ab:fe:a6:cc:5e:10:2d:7d:eb:b0:9a:
         a5:54:3a:c0:f6:0a:00:46:20:7c:6e:b8:dc:bd:bb:80:0e:fc:
         0c:00:01:67:71:d7:d2:20:ed:f0:f1:4e:9f:31:7d:d2:3b:bf:
         8d:bb:33:d4:b1:d4:4b:53:25:29:72:9e:a2:ef:3e:db:50:e5:
         0a:6f:e9:8f:fc:b8:4a:83:8e:f4:33:01:e3:55:80:a9:60:3d:
         c6:8e:70:42:21:cd:e6:74:6b:f8:c5:96:c8:96:59:ea:b7:95:
         82:98:d5:3e:f9:be:e0:2f:f4:0e:26:8b:9e:93:d5:57:8a:06:
         be:95:74:8d:90:4d:3a:28:3b:83:2b:37:70:89:1b:85:13:87:
         37:59:1c:5c:79:a5:05:6b:79:b3:ae:be:31:65:ee:fa:fc:f2:
         f8:2b:9b:f3:9a:e9:eb:5d:c2:36:58:fb:b4:93:7d:6e:4f:5c:
         68:f5:ba:78:58:17:06:85:47:af:38:52:cc:de:46:c5:be:b5:
         f1:5e:69:54:62:95:96:c1:0e:eb:2a:24:28:4e:19:61:cd:fe:
         c8:b1:12:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCPJUwBbhwY08Mnvd6QQmLt4kXK4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIxMTA4WhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjJjYjU2ZWRmODRkZjc4NzVkODE5YjgyZGMwNmU2NTdm
OTA2YjA1ZTZiNTNiNGQ3MTc3MGQ3OGMwNjkwZTliMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ45AlcQtTjC1HR5VDIHf14jC8mlQ857viSMuxXaaBW1Ib
qb6i4PiLcnw7gb9J1AjaTqVj6aFT7f3nIfUDC0ii6eN0PjJI+o8QluaN+pgUCA3y
M3ZtvETM8sWox21e6CgKwh94zvsU5pYznxDV/YA/40dBAOVcEPvfOVjX4OUNetCj
y5xKgJqwGIema5O7FOOtFYV+5fHKLEjN3S6EF97UBZamaJR1Y8a5heK8nYfzLffY
seATKKXbJB0Saa85m94BTaDlyNJZILZ6BTwssKFgdGAY5Nr/fehw2wLpR2bt6rAF
O6u+6q+JHJ6/6QMOArxRqbkGFh4f9kP54DbgUCqjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeR0wE1fBFGic78yoL9zGQivP/2MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5ZWNiZjA4LWRkMWYtNDY2MC1hZjU0LTNjM2JiMWYzN2NiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN3DRAwDQYJKoZIhvcNAQELBQADggEBADVbE4RRs489/iyCjqP01B32N4rf
ZNzq1NInfT4/rPh7DmurSfHIUPRCX7Or/qbMXhAtfeuwmqVUOsD2CgBGIHxuuNy9
u4AO/AwAAWdx19Ig7fDxTp8xfdI7v427M9Sx1EtTJSlynqLvPttQ5Qpv6Y/8uEqD
jvQzAeNVgKlgPcaOcEIhzeZ0a/jFlsiWWeq3lYKY1T75vuAv9A4mi56T1VeKBr6V
dI2QTTooO4MrN3CJG4UThzdZHFx5pQVrebOuvjFl7vr88vgrm/Oa6etdwjZY+7ST
fW5PXGj1unhYFwaFR684UszeRsW+tfFeaVRilZbBDusqJChOGWHN/sixEq8=
-----END CERTIFICATE-----