Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168231e8-15c3-43f3-9d89-c9262257809b.roa
File:                     168231e8-15c3-43f3-9d89-c9262257809b.roa (raw, json)
Hash identifier:          oE9yTC0Ij3fO/xysHGXmSAwDWBlqc0N7xvYQPcL/hlY=
Subject key identifier:   81:4A:E8:22:6A:11:44:39:15:CF:65:2F:22:78:83:A9:AA:CE:36:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E012C8BAEF1120E50FF4F8B4AE159F8FB3DD4A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168231e8-15c3-43f3-9d89-c9262257809b.roa
Signing time:             Sun 19 Oct 2025 03:10:59 +0000
ROA not before:           Sun 19 Oct 2025 03:10:59 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:01:2c:8b:ae:f1:12:0e:50:ff:4f:8b:4a:e1:59:f8:fb:3d:d4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:10:59 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=8418b59a8464d2b734a4fc6d32e80c971ef98150ef8a1fd18627873732cbacdd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:b9:f1:46:20:8c:6f:a4:7b:8b:73:a3:a9:
                    69:db:f3:e9:5d:12:6f:dd:57:72:c9:d0:48:69:72:
                    24:b6:22:c0:b5:d3:0e:64:84:48:b9:1f:25:ac:a5:
                    90:e1:d4:7c:ff:11:c1:27:c4:fe:e7:9c:38:cf:2f:
                    c7:dd:3a:87:2a:bc:de:e0:23:4c:7d:83:81:1d:b4:
                    13:58:d0:66:92:14:aa:c4:14:ad:26:8d:82:a4:66:
                    d9:09:da:d5:fc:83:a7:f2:51:b2:9b:53:2c:a8:f9:
                    48:f5:da:c3:3d:08:1c:bc:37:67:60:80:45:c1:5a:
                    92:52:b3:0f:10:51:77:74:c2:b2:95:31:a6:59:81:
                    71:82:a3:a9:93:7e:18:d6:4d:b9:fa:15:34:f8:a3:
                    7e:2b:2f:0e:83:47:52:bb:08:10:ae:d4:43:cd:33:
                    af:59:3b:20:c2:e8:cf:ec:fc:7a:22:c7:a0:f0:61:
                    d5:9c:4f:cf:42:b6:ae:f8:83:4a:4d:87:30:ac:4a:
                    fb:a6:37:fe:d9:94:53:7e:98:ff:eb:46:cb:e8:f5:
                    04:32:5d:2c:a9:01:ed:61:41:5d:d4:22:51:6f:50:
                    4b:db:05:81:d9:83:c8:1b:ca:4d:3b:d4:53:01:76:
                    47:0c:98:9c:3e:3e:68:8d:49:d7:e0:eb:7a:e7:c4:
                    cf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4A:E8:22:6A:11:44:39:15:CF:65:2F:22:78:83:A9:AA:CE:36:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168231e8-15c3-43f3-9d89-c9262257809b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:61:89:44:5f:69:e6:06:c0:66:40:1c:12:a3:49:0a:74:50:
         a4:2a:fe:70:b6:80:75:36:4d:dd:b6:58:fb:6a:55:c1:c6:1e:
         15:74:06:72:6f:fe:42:98:2c:c1:ec:e7:14:c1:7a:f3:1d:95:
         23:da:44:c0:5a:c5:f4:8b:05:a0:64:9e:15:0f:ba:fe:e0:e4:
         09:6d:d7:2a:16:76:d3:cc:be:a5:da:f6:3c:94:76:44:87:d8:
         d8:05:9b:66:e5:2e:7e:e2:71:db:66:72:67:ea:e5:63:5c:5a:
         79:ae:4a:c3:63:3e:a5:d3:66:02:ab:f3:db:2b:08:40:db:c8:
         5b:60:97:49:75:3b:c2:0a:49:2f:5a:eb:23:0e:d0:01:ab:37:
         06:17:a4:3c:18:74:5b:90:f6:b9:57:a9:88:d2:96:d0:b5:20:
         be:1f:ff:82:dc:44:02:88:35:08:3f:a2:d3:f7:9a:4b:d0:be:
         65:15:d6:78:55:c8:be:a9:fc:64:83:d7:25:11:0b:b1:fc:48:
         f7:ee:af:82:34:8e:e9:17:7e:7f:8b:42:c8:91:d0:52:00:ca:
         6e:fe:ad:04:16:42:c5:d4:44:5b:ed:cd:fe:4f:20:b6:f7:ec:
         60:d0:98:0c:1d:ef:be:94:e7:70:9b:2a:b1:14:01:0d:17:6e:
         1e:39:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----