Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab45c334-88cd-4c7a-8aaa-26d315e40820.roa
File:                     ab45c334-88cd-4c7a-8aaa-26d315e40820.roa (raw, json)
Hash identifier:          c2GhUlvtrHM/9s6tUzDy6dgaN4WyQ5QiBatePJxYVu0=
Subject key identifier:   07:D6:5E:9A:1E:3B:09:AA:CF:3C:61:73:0C:F2:B8:03:EB:F8:F0:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0794EB282EDC4CAE25F407F286D26DA1C9EB7173
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab45c334-88cd-4c7a-8aaa-26d315e40820.roa
Signing time:             Sat 18 Oct 2025 01:31:49 +0000
ROA not before:           Sat 18 Oct 2025 01:31:49 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:94:eb:28:2e:dc:4c:ae:25:f4:07:f2:86:d2:6d:a1:c9:eb:71:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:31:49 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=6d6f5b914e0e1af7c6b8c1bbc8c258095f9428b9a7cd3e2abbddec9c35943038, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:f2:b4:74:54:b7:a0:c7:e6:0c:48:09:a1:
                    23:6b:14:c6:d0:3a:81:45:c6:93:f2:56:69:35:a8:
                    cb:1c:b2:11:ec:f9:07:5e:f4:0f:4a:21:33:6b:f2:
                    a1:19:99:ca:88:5f:fe:84:a0:59:47:6c:42:88:e6:
                    d5:e8:e7:1a:77:ef:de:17:60:1b:88:46:ce:58:b7:
                    a7:19:02:69:98:ba:59:06:42:05:af:a0:26:ea:e7:
                    98:c6:41:9c:de:a0:4c:7f:fa:8c:53:c4:37:88:0a:
                    9c:79:ca:8c:2e:30:0b:a5:c7:f6:d7:34:cf:80:20:
                    26:90:64:51:2a:c3:cc:d0:a8:ff:28:99:b5:ec:b9:
                    8b:91:83:53:75:39:69:ba:d0:2b:a5:a8:cf:14:76:
                    aa:78:aa:7f:ff:da:90:e1:d7:28:d7:b1:53:26:42:
                    72:95:c2:58:66:ad:38:6a:38:9e:f7:4b:e8:dd:e7:
                    d1:5d:bd:9c:4b:ee:63:6f:7d:32:dc:d6:59:09:70:
                    66:75:28:bd:e0:c4:69:01:f5:fb:36:d8:de:6e:b1:
                    cb:08:55:23:28:ee:19:64:41:30:dc:a2:5b:f5:10:
                    bf:5e:1c:2e:b6:51:69:8b:2a:a5:ee:bb:bb:b6:d1:
                    5e:b0:0a:40:65:ff:51:69:3b:1c:88:ef:69:f6:49:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:5E:9A:1E:3B:09:AA:CF:3C:61:73:0C:F2:B8:03:EB:F8:F0:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab45c334-88cd-4c7a-8aaa-26d315e40820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:45:3b:f4:fe:19:b5:70:9e:29:dd:ad:f3:89:19:dd:76:
         46:53:1a:37:10:67:75:b8:39:dd:10:95:f3:65:33:6e:f3:8e:
         1c:22:78:06:28:0f:32:b1:1d:e9:c6:19:ee:27:88:d1:8e:f6:
         dd:eb:cc:f0:bc:7e:1c:fb:ca:be:20:cd:5b:3d:df:86:32:95:
         18:12:ea:5d:4b:b8:b9:fb:3b:d0:a0:64:d7:9a:0b:31:c6:6c:
         3f:3a:a8:29:27:d8:dc:ac:f6:f0:6c:25:8d:8c:b6:8c:66:76:
         30:1a:cb:83:c2:dc:41:89:bb:49:9f:72:23:74:87:c8:13:3b:
         e0:09:24:25:e2:29:9e:75:27:2f:63:50:94:b9:a0:da:1a:60:
         f8:dc:1d:f8:98:92:81:67:00:e4:be:7e:a3:b6:b9:81:99:6c:
         6b:6f:4c:7a:00:e4:31:db:58:5b:8c:18:0a:6b:da:c8:df:59:
         91:5f:4c:16:7e:7a:ad:d1:8b:3b:8c:d9:0d:2a:cb:94:4a:db:
         dd:10:0b:c2:d7:c3:d4:36:1e:cf:51:7d:02:9c:df:64:42:97:
         c4:e3:6d:43:2c:ed:65:71:fb:bd:03:aa:76:31:e2:5b:42:fa:
         db:cc:8c:f4:8d:82:f1:8f:4a:31:72:7f:c5:de:2b:ec:12:96:
         20:4c:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----