Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85e777a6-e00b-4099-a129-f872ba1815f2.roa
File:                     85e777a6-e00b-4099-a129-f872ba1815f2.roa (raw, json)
Hash identifier:          ZP9TQJeWzd1+yIKDzE9OElQ+wAkwVUcdKTzFOiUZahg=
Subject key identifier:   30:53:E1:78:7E:86:A9:68:BC:76:D1:32:7F:88:04:F7:BC:51:D9:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44C0789B556C2DFA6D7080F0EF66083F5BCE76EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85e777a6-e00b-4099-a129-f872ba1815f2.roa
Signing time:             Tue 14 Oct 2025 17:51:54 +0000
ROA not before:           Tue 14 Oct 2025 17:51:54 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        71.152.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c0:78:9b:55:6c:2d:fa:6d:70:80:f0:ef:66:08:3f:5b:ce:76:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:51:54 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=f067c66991b94bd57ea02ebdbffca7bcff8989ac6a1d7cc6e5b317688a05c5c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:56:db:54:1f:da:48:20:4c:45:12:79:9d:
                    05:e9:8b:cc:b0:9c:e2:23:44:6a:5b:50:ed:f3:4a:
                    25:e4:c7:59:8d:46:46:d3:d3:ab:f7:02:7c:79:05:
                    92:4f:19:4a:c6:1d:c0:bf:55:3b:e9:23:a6:7a:aa:
                    c9:e4:76:49:18:36:d6:85:2d:7d:01:fa:5c:c7:93:
                    cf:58:17:62:a0:49:95:30:1a:12:2b:f4:2d:1d:fe:
                    c6:83:c7:ae:7a:52:a7:79:81:5d:3e:d4:07:4a:7e:
                    db:99:54:7e:a0:29:7e:5a:98:2a:de:f7:cf:a9:14:
                    fe:ed:92:77:de:ac:ea:84:4c:e7:08:84:5f:66:66:
                    fb:14:82:72:2c:56:1f:d2:18:f8:f4:60:6a:a9:6c:
                    a4:fe:74:b5:43:18:8f:59:84:1d:d9:a6:fe:da:24:
                    05:90:05:48:94:15:fa:24:8d:d2:66:02:5b:67:ac:
                    bb:93:80:dd:90:22:3c:41:88:a2:a1:9f:11:bb:6a:
                    34:d9:07:83:b2:b9:08:82:82:ba:4f:f5:04:15:7e:
                    c7:6b:8b:2b:77:38:eb:72:30:2c:40:70:6c:51:14:
                    f5:78:68:0a:89:5d:4c:49:14:62:ab:b8:d2:f8:cf:
                    6d:3a:9e:d7:29:cb:15:80:fb:86:42:0e:c9:82:90:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:E1:78:7E:86:A9:68:BC:76:D1:32:7F:88:04:F7:BC:51:D9:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85e777a6-e00b-4099-a129-f872ba1815f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:69:84:bb:c9:73:1c:89:7b:e0:1c:99:1c:cb:17:e7:f5:89:
         32:65:a2:4a:13:25:17:01:79:fc:c6:a6:64:a1:4d:64:0a:10:
         d3:a2:b4:25:4d:13:dd:b2:42:d0:75:4d:a3:e3:2e:45:ca:84:
         ae:d2:ae:91:c5:7d:a4:aa:1b:74:1a:02:ee:a9:34:84:45:25:
         e3:1f:90:c6:dd:80:d2:b5:d3:2b:a6:9f:2a:1b:d8:93:c2:35:
         ba:62:7a:71:b7:04:0d:f6:03:63:12:fd:a3:c0:22:4d:23:df:
         d4:30:49:87:eb:69:c4:3a:ea:bd:2f:c3:c8:a1:c6:b0:27:74:
         48:5f:53:43:3c:33:9a:06:f6:de:dc:1f:a5:da:a2:f7:61:b8:
         63:96:a5:87:21:21:99:16:82:95:e4:58:4f:bc:96:af:d5:b7:
         65:25:4e:fc:6c:e2:66:df:34:27:bf:d7:d8:2d:da:48:76:ca:
         6c:28:8d:5c:e4:1c:58:44:29:70:0d:cd:4f:fe:97:a0:8d:48:
         1c:92:a6:05:a5:5a:29:c0:22:95:ce:52:e9:01:12:18:38:c1:
         83:83:49:fb:88:23:77:ca:c7:21:2f:94:0e:37:99:84:b7:82:
         fa:c0:4f:ca:18:f7:fd:ea:5e:b8:5c:bc:d2:1a:b9:83:c6:9c:
         56:4f:dd:a7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURMB4m1VsLfptcIDw72YIP1vOduswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc1MTU0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDY3YzY2OTkxYjk0YmQ1N2VhMDJlYmRiZmZjYTdiY2Zm
ODk4OWFjNmExZDdjYzZlNWIzMTc2ODhhMDVjNWM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSIlbbVB/aSCBMRRJ5nQXpi8ywnOIjRGpbUO3zSiXkx1mN
RkbT06v3Anx5BZJPGUrGHcC/VTvpI6Z6qsnkdkkYNtaFLX0B+lzHk89YF2KgSZUw
GhIr9C0d/saDx656Uqd5gV0+1AdKftuZVH6gKX5amCre98+pFP7tknferOqETOcI
hF9mZvsUgnIsVh/SGPj0YGqpbKT+dLVDGI9ZhB3Zpv7aJAWQBUiUFfokjdJmAltn
rLuTgN2QIjxBiKKhnxG7ajTZB4OyuQiCgrpP9QQVfsdriyt3OOtyMCxAcGxRFPV4
aAqJXUxJFGKruNL4z206ntcpyxWA+4ZCDsmCkMAVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMFPheH6GqWi8dtEyf4gE97xR2VgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg1ZTc3N2E2LWUwMGItNDA5OS1hMTI5LWY4NzJiYTE4MTVmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmCwwDQYJKoZIhvcNAQELBQADggEBANZphLvJcxyJe+AcmRzLF+f1iTJl
okoTJRcBefzGpmShTWQKENOitCVNE92yQtB1TaPjLkXKhK7SrpHFfaSqG3QaAu6p
NIRFJeMfkMbdgNK10yumnyob2JPCNbpienG3BA32A2MS/aPAIk0j39QwSYfracQ6
6r0vw8ihxrAndEhfU0M8M5oG9t7cH6XaovdhuGOWpYchIZkWgpXkWE+8lq/Vt2Ul
Tvxs4mbfNCe/19gt2kh2ymwojVzkHFhEKXANzU/+l6CNSBySpgWlWinAIpXOUukB
Ehg4wYODSfuII3fKxyEvlA43mYS3gvrAT8oY9/3qXrhcvNIauYPGnFZP3ac=
-----END CERTIFICATE-----