Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa
File:                     809b6125-3665-4b5b-9735-5efa330b3442.roa (raw, json)
Hash identifier:          tZwWAuNS7v4uLhJtA9uXFkTZjdwiGgfbtbCnpIKFLDM=
Subject key identifier:   5C:85:4F:E2:7B:1D:3D:71:B8:3C:E0:FA:6B:78:55:F5:36:DC:D5:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21A4AAF7EE00F34C81D532E52AE18D69C6A89E67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa
Signing time:             Tue 14 Oct 2025 15:43:01 +0000
ROA not before:           Tue 14 Oct 2025 15:43:01 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a4:aa:f7:ee:00:f3:4c:81:d5:32:e5:2a:e1:8d:69:c6:a8:9e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:43:01 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=49b4159359d67ff98f8db75aefb48c905440c2dd8fc55fee91465f5d94259db9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:8a:db:7e:a5:08:54:b7:81:c4:5d:18:ed:
                    5e:ec:05:bc:6d:67:4b:2f:dc:62:25:53:a1:46:76:
                    50:95:c9:d6:86:17:f6:84:b5:e7:f1:b3:13:b2:a3:
                    65:e2:ab:66:54:51:48:ff:8a:83:3c:74:20:d4:79:
                    6b:10:19:d7:78:f5:70:75:71:63:56:ab:a7:80:5f:
                    02:ca:29:6c:1c:6f:d8:c0:38:32:b5:f9:df:88:fb:
                    93:e4:f0:c2:79:06:75:12:a2:2a:39:01:c2:e8:15:
                    1c:88:95:0c:c4:56:be:28:f2:14:9b:28:a6:72:ba:
                    71:5f:62:f8:9b:fd:3e:7c:e3:92:74:75:2c:d5:a4:
                    10:e7:76:9c:2a:41:af:63:51:1e:f9:33:53:36:2b:
                    66:d0:e6:63:92:1d:2f:1b:ee:3a:a0:73:ea:0d:20:
                    83:ab:d0:3e:b0:68:ff:b0:f5:2e:2f:6e:7f:7c:51:
                    04:f8:12:1a:19:22:8e:9e:a7:5d:dd:9d:80:e2:a1:
                    4f:74:4f:bb:d7:9a:6b:2e:a6:b3:49:29:54:c5:42:
                    61:d0:45:1f:83:05:bf:f8:eb:13:34:ed:2a:e8:1b:
                    91:7b:71:01:af:38:64:53:f8:7d:16:b3:42:46:5d:
                    74:5d:98:dd:83:5e:5b:e5:d0:db:26:f4:df:fb:12:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:4F:E2:7B:1D:3D:71:B8:3C:E0:FA:6B:78:55:F5:36:DC:D5:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:69:02:ee:7e:1c:56:44:1f:83:88:4f:3f:3b:30:0e:23:
         91:6e:70:cb:93:33:21:35:dc:9a:56:4e:18:6b:d8:ac:30:0d:
         79:68:6a:5a:22:35:9d:ce:54:1b:73:bd:01:1e:4d:01:8b:ba:
         fa:4e:df:9b:d8:7a:db:92:2f:69:b5:9f:03:b7:84:70:19:4e:
         90:ac:06:5a:00:90:24:b2:56:a8:36:a6:eb:4a:53:b4:b5:93:
         2e:19:55:44:5a:1b:66:f2:e0:78:55:4d:46:2a:06:3b:52:85:
         c5:39:0b:6c:74:35:60:e6:08:10:84:b7:6b:e5:8a:cd:1a:64:
         ab:a0:b3:9e:8b:e2:49:7f:1a:38:c0:d0:49:e1:ce:78:e1:a1:
         20:27:06:92:4e:f3:74:1c:6e:66:8e:ea:2c:b0:ed:52:0a:09:
         c0:e3:55:1b:bf:1a:28:98:00:4a:c9:40:30:36:b5:36:c7:cc:
         af:7e:fc:7d:91:36:a1:13:d1:ad:cc:36:e1:d5:af:9c:29:58:
         e1:6f:b1:1f:5e:93:cd:14:be:09:d0:d5:ab:c2:ed:83:2a:e1:
         dc:71:2c:d6:6b:82:2f:4a:81:a9:b6:65:9d:b7:fd:2a:d0:b9:
         bd:16:3e:db:99:77:9f:dd:3c:c9:02:41:79:42:a0:a9:6b:a6:
         ea:34:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----