Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa
File:                     50988588-6545-4acd-aaf1-bb3943b2fcca.roa (raw, json)
Hash identifier:          bFaRFjIQnH0qf4dUDLKn3LtomKTmZP4kLJSoJQWCWDc=
Subject key identifier:   14:F5:CF:6B:B0:6C:BC:E4:41:CC:55:09:CD:37:88:96:2B:62:14:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A10678E04E15197F705DA92DC0E0D70F5D17FE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa
Signing time:             Sat 25 Oct 2025 00:31:19 +0000
ROA not before:           Sat 25 Oct 2025 00:31:19 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        182.29.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:67:8e:04:e1:51:97:f7:05:da:92:dc:0e:0d:70:f5:d1:7f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:31:19 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=762d6f1bdc7c80b044fda9268d318c87787243a3657f88f98d88e3cea0195a32, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:af:e6:3c:62:f9:eb:68:67:ba:aa:45:88:
                    24:78:c5:52:48:49:47:e5:31:e5:93:75:e7:5f:ac:
                    c0:72:63:31:d2:b2:94:3d:ad:1e:a4:fe:5c:ac:41:
                    f3:66:df:ca:12:49:69:31:bd:e9:92:6b:1f:91:e8:
                    5c:75:22:e2:96:61:b6:11:ee:9d:c7:1c:56:1e:1b:
                    16:05:19:d7:d3:38:a7:ef:42:ff:8b:bd:b0:dc:28:
                    43:22:3d:ef:32:00:04:8d:80:76:97:e0:d4:c2:bd:
                    72:f2:2e:ae:55:92:34:db:15:4e:86:eb:5a:89:55:
                    d6:ee:a0:48:0d:2a:bd:2c:20:a6:37:da:21:ad:91:
                    8f:81:78:54:40:32:e8:f8:30:9a:9d:3f:ec:d2:92:
                    9d:3f:f6:b5:36:4d:f2:f9:0c:ac:87:02:3b:81:80:
                    12:ff:80:2c:de:ea:1f:ef:3b:76:c2:21:13:c8:63:
                    26:74:bd:f2:72:a6:a2:01:c6:fa:8f:22:d6:f5:58:
                    a1:f7:d5:ef:2c:44:db:80:6b:25:2f:29:d2:a2:53:
                    35:bd:d0:f0:e0:33:fc:c4:86:85:71:0e:34:eb:39:
                    1b:64:16:f9:1c:d5:f4:5f:fe:5f:69:02:75:b3:b7:
                    33:81:c1:c1:67:75:2d:52:ec:88:a2:85:54:92:9a:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:CF:6B:B0:6C:BC:E4:41:CC:55:09:CD:37:88:96:2B:62:14:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:81:d0:a8:01:3f:7c:51:ff:55:62:e4:b2:39:75:b4:35:
         06:59:96:53:73:f2:34:39:a4:2a:40:f3:65:76:b6:b7:f6:64:
         3e:46:de:19:5d:2d:f1:8e:03:97:e8:f6:81:33:18:a9:89:c3:
         c3:9f:84:31:a3:31:2b:0a:96:0d:6c:ca:8e:78:09:fa:29:bc:
         e1:c5:0e:fe:df:7c:04:4e:1d:c3:01:35:5e:f1:84:6d:62:33:
         1b:00:c3:9e:96:3b:15:7b:66:17:60:d0:2c:d9:02:e0:d6:99:
         e2:33:c0:da:78:bc:7d:e1:75:cc:fe:6a:f5:ac:2f:fb:2f:31:
         b3:d9:d4:a4:38:9a:9e:50:f6:ba:58:15:3b:d8:b5:7c:a8:3e:
         3a:c2:a3:3f:15:bb:11:a4:33:b4:2f:bd:01:e0:22:9c:1f:ec:
         eb:bb:64:4a:ac:4f:b7:0c:a6:1a:bf:ce:71:e4:e2:0e:83:3c:
         65:dc:a4:4a:7e:65:d5:09:bf:56:20:81:58:10:95:7d:15:95:
         09:bd:2d:d4:cd:89:47:83:16:e7:51:8e:57:c4:e3:d0:f5:33:
         17:27:2b:16:00:32:2b:42:ae:19:93:e0:db:27:e2:c8:fb:75:
         34:2e:06:2b:37:81:b7:bd:70:de:18:d4:21:60:2d:3b:ed:fe:
         45:12:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----