Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
File:                     8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa (raw, json)
Hash identifier:          Ena8PyO2zpLCEdpHKqNFBp0weyrulytSOW1ZNpSQAts=
Subject key identifier:   8C:7A:6A:52:94:1E:F8:44:B4:82:30:9F:FD:BE:A9:E8:55:95:DC:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7541459802424689A35111F60D11FF7D94FC83ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
Signing time:             Mon 31 Mar 2025 16:01:27 +0000
ROA not before:           Mon 31 Mar 2025 16:01:27 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        98.80.0.0/13 maxlen: 13

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:45:98:02:42:46:89:a3:51:11:f6:0d:11:ff:7d:94:fc:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 16:01:27 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=cb8771773be8d94fa5a37bfe558d079e8039c023592b43aec7d07f907c13bc31, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:a0:4d:ef:a3:92:0d:62:24:b9:d8:98:b1:
                    76:56:a2:71:3f:7f:a6:dc:52:40:97:87:df:b9:c1:
                    2b:ec:ac:65:5d:74:dc:8a:ea:a2:93:95:19:ef:f2:
                    23:cb:bf:e2:bd:dd:87:17:b3:e0:31:e6:ca:9c:7a:
                    46:9d:dc:7a:8f:96:0d:75:5c:b9:3c:48:52:03:43:
                    c6:da:3d:34:d3:c3:e2:4c:2e:48:bf:22:8e:f7:aa:
                    ba:5e:2b:15:cc:ad:eb:7f:84:e6:29:7d:70:89:af:
                    ab:a6:cf:ac:3e:74:ba:48:5e:2a:8b:72:8c:82:70:
                    7e:10:1e:e4:14:11:a4:8c:16:4f:71:52:2d:62:2b:
                    fb:b7:6c:f0:24:89:07:69:17:84:0a:cc:34:f6:df:
                    0b:3e:df:8f:26:cf:7b:df:03:2d:0e:ed:07:d5:cd:
                    49:fa:66:8e:72:62:b3:bf:9d:23:77:5e:d2:95:25:
                    c8:d1:51:d9:81:cd:bb:cd:0d:85:bb:4a:cd:59:fe:
                    35:10:bd:8a:4b:51:8e:55:82:01:b0:68:d0:10:c4:
                    ca:26:5a:ff:f1:19:e1:72:b6:e8:7c:2a:cf:6a:15:
                    c8:63:08:c9:46:0a:02:50:a1:ba:0d:b6:08:20:61:
                    80:5c:c4:25:d3:7c:3b:f7:ad:b4:50:0a:ad:d2:f1:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:6A:52:94:1E:F8:44:B4:82:30:9F:FD:BE:A9:E8:55:95:DC:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:87:36:eb:b8:02:c8:03:0b:7e:3e:08:33:57:7e:b5:8f:
         8a:aa:22:72:81:e1:a9:52:1c:38:f1:d2:26:07:06:67:1a:15:
         39:b5:40:0b:b3:26:38:ae:25:05:ea:e5:4b:48:de:0a:f2:21:
         17:99:a2:7b:fe:de:f4:97:01:46:35:42:c1:e9:98:0f:fb:1c:
         77:b9:3b:fb:18:1e:81:de:0e:97:fa:7f:4e:d9:e5:76:4a:ed:
         f1:2a:53:34:91:ab:02:61:f5:d1:23:1a:7a:94:be:32:ae:97:
         f4:bd:2d:32:52:6c:26:1b:69:4e:fc:d9:c0:39:36:85:3d:41:
         78:3c:df:f7:99:e2:1e:94:2d:41:c4:ca:c4:46:ac:be:0e:f4:
         7a:78:46:7a:21:9f:ff:81:cb:b6:88:cd:20:c8:13:82:2c:0e:
         6d:4b:91:3c:b4:ca:91:65:2c:80:96:94:06:e2:4d:da:9a:3c:
         b1:70:e8:24:e8:8d:f7:72:88:8d:20:1c:68:18:65:4c:cd:fa:
         16:b1:8f:5a:33:64:23:87:8a:b5:60:b0:98:07:46:f5:1f:47:
         a4:46:e8:a5:4a:68:e4:25:4d:93:d2:1d:48:3e:34:39:7e:0a:
         eb:77:0e:7d:a9:a3:2d:7d:47:00:1b:40:3d:c0:6f:1b:4e:cc:
         00:59:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:12 2025 by rpki-client on console.sobornost.net