Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f0ab7e-20c2-40dc-a124-449356f8afd3.roa
File:                     a2f0ab7e-20c2-40dc-a124-449356f8afd3.roa (raw, json)
Hash identifier:          RrK7geO/cVl8Qz6Lp+aQAgTxE8M+VBzl0X0IRJhh7wg=
Subject key identifier:   EF:00:85:DC:E4:C1:1F:65:FB:60:CA:51:D1:D4:99:7F:25:E3:C5:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F3B032006F04A96C39A2021223A0A2FEE8A72BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f0ab7e-20c2-40dc-a124-449356f8afd3.roa
Signing time:             Sat 18 Oct 2025 04:01:52 +0000
ROA not before:           Sat 18 Oct 2025 04:01:52 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3b:03:20:06:f0:4a:96:c3:9a:20:21:22:3a:0a:2f:ee:8a:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:01:52 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=0bd5b6c9d47b00f1edf202e22d900248eae1e6b1f37e5f8b70267b827ba6d2e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:19:07:37:21:c8:23:f7:05:be:a3:f8:70:
                    71:a4:8b:d5:d3:ae:04:a5:3e:b6:f4:84:bf:ec:5d:
                    5c:3c:ed:e5:3f:93:2e:12:9f:1a:8f:d0:5d:27:14:
                    dc:72:9e:8c:13:30:b1:02:c9:00:ad:01:ad:98:ee:
                    0e:9d:de:dd:fd:74:5b:7b:53:88:2e:d0:ce:19:58:
                    ed:3e:30:e1:64:84:2b:95:5a:e3:77:c5:0c:4a:8c:
                    2c:b5:2d:93:7b:10:12:bd:55:87:60:89:be:75:34:
                    37:79:02:34:5f:49:3b:54:8b:a5:a1:ec:af:f9:19:
                    35:e5:b4:f8:63:68:eb:84:7d:1c:a1:51:3b:fe:66:
                    40:29:d0:78:24:bb:2d:93:e8:bc:a4:ac:f1:58:72:
                    53:8e:f2:db:b3:6f:cc:69:fc:03:a7:da:24:90:40:
                    c0:1d:4d:33:a3:2d:ea:c8:4d:0e:8a:29:f1:e0:ad:
                    76:d8:8d:ee:75:1d:8c:c2:ee:00:b6:e4:2e:d7:b7:
                    ea:4e:97:b9:78:24:1c:e5:8a:79:f2:b3:a5:8c:9a:
                    01:e2:52:bf:35:87:77:49:a9:fe:8a:5d:ee:7c:7f:
                    72:62:b1:9c:6d:94:37:ed:21:32:ce:c8:13:9a:b9:
                    a1:80:ee:0d:90:b3:68:ef:41:da:72:33:81:de:29:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:00:85:DC:E4:C1:1F:65:FB:60:CA:51:D1:D4:99:7F:25:E3:C5:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f0ab7e-20c2-40dc-a124-449356f8afd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:58:a9:08:9b:71:46:2f:e9:62:f0:3b:79:a5:81:8f:87:34:
         a4:45:22:7a:a1:6b:19:e7:c9:bf:fd:35:86:96:ff:bb:b1:ba:
         36:61:80:3a:1f:eb:bd:e9:e8:0c:d5:b6:c1:72:9f:85:59:3a:
         b3:b0:34:0b:c7:84:ab:d2:78:a9:bc:90:08:43:c2:36:a5:45:
         58:62:4b:f3:d3:e6:c7:10:91:31:44:94:0b:e8:ab:9e:28:08:
         77:60:94:57:b3:43:4f:27:60:9d:8d:03:09:f8:8b:30:9b:2f:
         ce:80:88:c4:0c:8b:ba:66:24:da:06:98:91:64:a6:ca:b8:f5:
         cb:f5:49:9c:47:a5:a5:53:c0:d9:fa:94:a2:5d:8d:c7:3c:41:
         9a:dd:9b:ae:59:bb:a0:20:d2:4a:3b:06:4f:b3:52:ea:ed:1e:
         c1:44:58:f0:09:00:1f:64:06:f4:79:be:cf:f0:b0:74:a7:2d:
         75:b9:ec:3b:81:d1:23:23:84:88:4f:64:26:df:7b:ff:86:74:
         9d:25:80:33:d5:78:37:79:5c:fb:6e:15:90:37:38:5f:69:44:
         8a:9b:1a:0b:a3:01:c2:4f:33:0f:fb:0d:f4:5a:22:06:fb:23:
         a7:a3:86:83:b7:5a:fa:dd:51:6b:c2:f2:53:8e:5a:02:8b:c6:
         18:af:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----