Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa
File:                     45481046-38a5-409c-a78c-876f51ced0e5.roa (raw, json)
Hash identifier:          n+31FMdVOQkj04Ib8R/D/oJYRfGvY+6RUr++QIypLsc=
Subject key identifier:   55:A9:3B:5F:A8:45:63:86:E0:12:27:48:AB:41:41:B5:F8:D5:8A:7F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       20713B28E8FEB9AFF95C965DE3E05F0990BE8DC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa
Signing time:             Wed 22 Oct 2025 00:10:13 +0000
ROA not before:           Wed 22 Oct 2025 00:10:13 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        56.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:3b:28:e8:fe:b9:af:f9:5c:96:5d:e3:e0:5f:09:90:be:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:10:13 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=ccd55fc735b3beddb8ec45d5eb7b5a6ef857b73344bf904e537797f3396d0d8b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:03:3d:d8:13:75:58:a3:ca:00:84:27:46:
                    ca:b6:9b:81:64:2e:96:92:d1:85:70:3e:79:ca:ec:
                    07:b3:9f:ef:45:3b:aa:03:d6:25:3c:e2:62:14:22:
                    80:5c:2d:03:d2:3f:5f:ef:89:50:79:9f:e7:13:50:
                    aa:9f:31:8d:1a:50:67:ee:2d:2e:fd:42:e2:85:47:
                    43:ea:ac:67:4d:66:7d:7b:71:b2:fc:0d:f4:4d:f8:
                    63:54:91:7e:8a:af:d6:f5:c2:24:6b:bc:0d:3e:46:
                    5a:0a:73:e0:61:1e:ff:04:ee:d7:2d:36:2f:f7:d0:
                    8b:b8:c6:9a:78:bf:9f:5d:ad:7a:27:c3:61:ce:16:
                    e1:7e:f3:c2:7b:07:4b:1d:1d:27:c8:dd:44:a7:0a:
                    f7:42:dd:ad:28:32:0a:3a:fb:47:52:96:08:98:3d:
                    47:fb:44:04:70:33:37:38:40:9c:e8:71:65:aa:12:
                    75:4d:ae:e6:5c:45:c6:3e:4e:69:c2:39:9e:66:eb:
                    cb:0b:be:a3:f2:b5:07:75:23:a2:95:80:bf:a0:e7:
                    3e:4f:3c:d9:f8:c5:88:ed:82:48:04:d3:3a:52:91:
                    01:45:2e:b8:6d:a6:9e:22:8e:d6:96:e3:99:aa:69:
                    06:76:45:8a:a4:3d:12:09:62:d5:2e:b8:4b:be:a3:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:3B:5F:A8:45:63:86:E0:12:27:48:AB:41:41:B5:F8:D5:8A:7F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45481046-38a5-409c-a78c-876f51ced0e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:b4:f9:a9:a7:e6:23:ab:4b:6d:95:59:89:fd:3c:11:91:
         29:7e:ac:c9:bb:67:67:11:77:b7:61:60:38:e0:3d:15:39:c1:
         e5:f2:0c:74:ac:7b:79:32:fc:5a:88:13:f2:06:10:a1:d1:2b:
         7e:e9:1c:8c:ab:3e:ba:18:00:df:c0:40:b2:80:7c:7a:72:56:
         7a:d0:40:19:c0:d6:70:ca:68:ca:30:fa:cb:22:79:3d:c4:de:
         a2:0c:96:b9:24:01:e5:0e:6a:70:74:0e:0b:4c:13:c6:2e:15:
         29:fb:d9:dd:f1:69:59:76:cd:68:c4:6d:56:59:17:b2:37:ca:
         bf:d4:33:47:03:3c:2f:51:08:e4:88:31:55:5b:25:a5:6f:54:
         17:47:c9:6c:ba:5b:1b:a4:3f:c3:9b:c3:a4:16:22:b3:c2:b6:
         6f:68:8f:49:0c:4c:13:14:63:d3:ef:f8:cf:3a:1a:81:29:0f:
         3a:49:c8:fb:fa:58:33:3c:e6:9f:fd:2b:8c:29:39:87:e4:e5:
         1b:1f:ab:24:dd:0d:6c:63:33:a2:31:86:5e:19:98:ac:a3:00:
         a4:76:db:0c:33:2f:cd:56:c9:fe:77:92:5c:7a:46:23:23:e0:
         1c:78:fe:8f:13:7a:a8:bd:f0:8c:87:88:2b:3a:c4:ac:db:82:
         22:6f:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----