Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d2c468-6fa8-4ee3-8a85-a265692b4c26.roa
File:                     12d2c468-6fa8-4ee3-8a85-a265692b4c26.roa (raw, json)
Hash identifier:          m8WeD5xzitDDdzrtHc80DKO++E3ntnANigqQPUz1mvI=
Subject key identifier:   8A:FC:C3:2C:95:80:1B:E5:9C:E1:45:0C:B8:C4:7C:57:D9:F5:00:6D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1ADE790CB02C9894E4C73E965600B35F19740D27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d2c468-6fa8-4ee3-8a85-a265692b4c26.roa
Signing time:             Mon 20 Oct 2025 05:50:46 +0000
ROA not before:           Mon 20 Oct 2025 05:50:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:de:79:0c:b0:2c:98:94:e4:c7:3e:96:56:00:b3:5f:19:74:0d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:50:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=b52081ad13b627c7e822d34224835e1b1c480fb0ac75864f05abde87dcfd57d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:13:4e:e6:04:d0:34:76:70:30:c8:c1:37:
                    bd:19:17:cf:77:a7:1a:97:51:b0:d1:ff:d3:98:a5:
                    1f:74:bc:0b:ca:24:97:57:71:b4:d7:2f:4d:d8:bb:
                    e5:49:18:0c:83:72:04:08:33:e9:25:b5:c5:11:68:
                    b0:83:11:28:d0:ee:fc:de:d6:ba:04:d9:ad:42:0f:
                    7b:84:2d:c1:7b:c1:1d:ba:d7:2f:8f:11:45:a4:eb:
                    40:7e:5f:39:72:12:37:48:0c:bb:b2:dd:5c:3c:7e:
                    da:52:a2:8e:ee:2d:d2:06:66:39:18:74:62:52:a8:
                    8a:51:97:69:0d:a3:7d:35:d2:75:6f:97:98:9f:38:
                    5c:0f:46:c8:59:0f:bf:90:eb:65:2e:0b:a2:be:dc:
                    48:14:c4:45:11:04:00:5a:38:b5:46:08:74:70:21:
                    ce:43:9a:98:e3:15:88:c8:1e:e1:5f:66:6c:e5:c2:
                    28:f8:bd:ea:5c:fa:1f:ac:6f:40:94:a1:53:18:87:
                    d0:e7:86:dc:17:51:8b:d7:17:73:5d:95:64:68:ca:
                    63:cc:3d:79:d6:ce:aa:da:eb:38:50:5d:c6:8a:8f:
                    91:89:4b:3d:e1:db:d9:7e:c1:b5:35:30:c7:cd:47:
                    50:cc:a3:c7:6e:82:65:f0:c5:3d:6f:6e:d9:28:a8:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FC:C3:2C:95:80:1B:E5:9C:E1:45:0C:B8:C4:7C:57:D9:F5:00:6D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d2c468-6fa8-4ee3-8a85-a265692b4c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:f8:e2:4f:d8:5d:96:3d:c3:10:46:06:79:d4:6e:0b:c2:
         0a:95:2d:f7:62:a9:7f:72:82:98:35:06:08:ff:3c:aa:93:1d:
         67:26:72:a1:8c:25:26:d8:a8:87:96:31:dc:a6:c4:9c:e7:f7:
         85:fc:e1:c0:75:2c:50:81:a1:4e:89:1e:fa:04:ea:15:f5:b2:
         66:66:71:22:47:18:04:4d:18:16:55:b4:6a:26:79:33:15:be:
         5b:4a:9e:47:5f:81:f5:b9:33:4a:46:87:59:58:83:9a:ab:c2:
         88:2d:d6:c1:28:b1:fd:2c:0c:1d:1a:bc:d3:4b:5b:1e:28:db:
         84:2a:8d:5a:e1:4b:d9:89:31:4d:04:12:b0:5d:38:55:8d:40:
         fa:90:d5:79:7a:82:bd:5b:26:a3:64:4c:db:38:68:ae:6d:61:
         16:51:ba:47:bb:88:e2:90:5a:5d:ba:c5:ef:8e:cc:c5:95:fe:
         9c:6c:59:82:7e:50:5a:ae:b8:45:cc:b8:34:ca:fd:8c:0b:b0:
         c2:ad:28:ee:f0:73:e8:2c:ac:81:87:f8:d8:c7:48:4c:f8:c2:
         5b:9f:a1:ad:17:b1:08:16:68:c6:2c:a0:ea:11:6a:fb:de:ba:
         28:b1:23:10:87:a5:fa:12:08:8d:05:e3:c8:20:59:88:98:db:
         dc:fb:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----