Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63d86a8c-cfba-4a7c-8d4e-2c4e4262249c.roa
File:                     63d86a8c-cfba-4a7c-8d4e-2c4e4262249c.roa (raw, json)
Hash identifier:          fZWqoM4ZF8A6O/NOrEhr9EfWRfqQ9/TUW2G04psmMAA=
Subject key identifier:   4A:8D:34:66:09:5C:3C:35:D9:50:5B:60:21:FF:4D:B6:C3:C9:D0:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E55D2BD9338DDDA258D3CA99219180690BD7C2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63d86a8c-cfba-4a7c-8d4e-2c4e4262249c.roa
Signing time:             Tue 14 Oct 2025 16:52:59 +0000
ROA not before:           Tue 14 Oct 2025 16:52:59 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        64.252.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:55:d2:bd:93:38:dd:da:25:8d:3c:a9:92:19:18:06:90:bd:7c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 16:52:59 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=c39bb37ca16eb6734501f396e047ece10cda28c9f7899c4b9b4e880394fa5e52, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:ad:79:f8:0c:36:9b:7a:2a:09:9b:45:a4:
                    f0:b7:9d:6d:d4:a2:3a:ef:4b:43:80:86:ba:ca:33:
                    0f:15:0f:62:95:16:40:33:48:75:da:19:a9:59:90:
                    5e:bd:e4:cc:37:97:64:ed:ef:b9:71:57:e9:75:26:
                    82:48:a6:3f:8e:ee:76:16:44:c5:14:d4:ff:f8:8f:
                    de:46:42:05:f3:6c:08:a5:7d:c1:82:f4:aa:3f:e7:
                    69:aa:bc:92:54:d5:4e:63:97:08:ae:a8:1d:58:c7:
                    31:eb:d0:a9:97:00:e2:61:04:96:aa:7b:fb:5b:af:
                    73:e0:6f:00:50:fa:fe:3f:24:6f:60:d2:2d:73:bf:
                    72:ec:e6:3a:c7:94:b6:a0:6b:e7:7d:11:48:43:47:
                    e8:65:d0:a1:8c:82:5b:09:99:df:dc:f2:62:3f:08:
                    0c:f7:b5:fe:92:27:57:00:bb:0b:88:86:1d:91:90:
                    69:f0:04:26:bb:65:67:c6:0d:66:4e:d4:d2:51:a2:
                    3a:08:ef:d5:76:2b:3d:ae:2f:9e:2c:64:0e:e7:4b:
                    31:c7:b8:0e:6a:44:64:5d:8a:2f:3b:2c:c3:49:99:
                    b8:3b:fe:fb:44:eb:f3:23:11:f2:67:ce:c5:11:30:
                    bb:69:68:fc:36:99:18:c0:ce:b7:99:6c:36:be:35:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:34:66:09:5C:3C:35:D9:50:5B:60:21:FF:4D:B6:C3:C9:D0:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63d86a8c-cfba-4a7c-8d4e-2c4e4262249c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:25:81:cb:65:9b:4e:0a:f7:64:c8:8a:fb:57:81:d3:84:d3:
         fb:d0:89:32:7b:d1:b3:6e:c2:09:b8:9d:a5:8d:12:c9:7f:80:
         b7:72:f0:e9:8b:ff:56:c2:c0:07:2c:50:c3:e1:fa:59:b2:18:
         96:5e:d2:d7:88:bf:93:c1:10:9b:28:ed:e1:96:e7:38:3a:fd:
         f8:25:d0:da:02:0a:6f:aa:8d:05:48:39:07:bf:ed:a2:6d:38:
         e7:3d:37:54:3d:f7:34:af:d4:83:66:5a:2e:4d:1b:61:7b:5a:
         0d:25:f1:a1:de:dc:5f:c1:d5:1d:67:cf:ce:12:ca:8b:11:cf:
         ea:37:a8:bf:3c:1d:40:37:b2:e1:6a:1b:c5:63:f6:45:2f:a4:
         cb:4e:a0:ed:d7:ba:c8:86:d6:7e:7a:dc:36:5e:1d:e1:4b:ae:
         25:c8:dc:a4:92:50:8a:c7:70:a7:5a:a1:48:af:58:92:21:fd:
         d8:93:18:1b:8e:3c:8e:e8:1d:08:6b:33:77:fb:f1:da:54:12:
         41:65:b5:a0:61:69:32:92:65:ac:c9:19:44:4b:29:f1:9b:c5:
         6b:e9:80:ec:c8:21:fe:4b:1c:f4:ce:97:7a:50:1c:3a:e1:a8:
         07:4a:57:ff:85:9b:87:ee:ce:12:50:df:2b:e6:e3:c2:a6:e3:
         73:8e:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----