Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fd2576-93fb-41bd-848b-6d748e273b13.roa
File:                     16fd2576-93fb-41bd-848b-6d748e273b13.roa (raw, json)
Hash identifier:          nlqMPbJPp8GuAxS+8h5nWxzoX6xZh/dJ5r/xyZIi6rk=
Subject key identifier:   08:4A:99:2C:CE:7E:C2:D2:85:2A:C6:EE:9D:CB:C9:4A:7F:76:45:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B2C9B9168AADAA70428934E80C126386AED67EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fd2576-93fb-41bd-848b-6d748e273b13.roa
Signing time:             Mon 20 Oct 2025 01:31:04 +0000
ROA not before:           Mon 20 Oct 2025 01:31:04 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2c:9b:91:68:aa:da:a7:04:28:93:4e:80:c1:26:38:6a:ed:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:31:04 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=3acbbefe4c70ecc2ef6ffc69814694de39fc9b1b190a57cb862083a438ce9e00, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:d6:67:6a:9e:98:fc:a1:3a:3b:ba:18:5e:
                    9d:96:7c:54:6d:ad:a5:f6:8e:34:08:f2:7c:75:b4:
                    2f:86:15:aa:2f:c3:f4:e0:5c:b8:d3:52:9f:9e:cd:
                    59:72:d9:c7:7d:58:40:fc:18:9e:cc:06:fc:45:1f:
                    4d:e9:dd:66:1e:b8:2c:5d:c8:4f:bc:0d:36:a0:fc:
                    7c:0b:05:5a:37:4a:65:6a:00:49:7e:3a:33:cf:23:
                    eb:9c:55:4c:f9:d2:45:a2:57:5e:8d:4c:77:3c:cb:
                    69:be:43:64:54:43:be:d6:db:5b:9b:49:83:79:f8:
                    8d:e1:e2:90:28:fa:66:e6:b2:ef:88:f3:3c:e9:69:
                    ee:ad:7d:e4:b0:4e:5f:2c:3a:76:53:a0:d8:c0:2e:
                    2a:37:ad:75:11:68:a8:e1:b7:dd:e5:15:f4:ce:66:
                    2b:95:48:43:90:a8:bf:41:19:9f:84:72:fd:33:ec:
                    73:22:75:27:14:2f:ee:73:ed:f9:44:3f:e6:db:57:
                    a5:83:9b:46:1d:5c:6a:a1:13:1e:40:e6:3e:7e:71:
                    55:89:96:89:a3:4f:2b:15:d2:db:66:dd:02:ab:9b:
                    a1:b2:2d:b3:7d:02:49:28:81:c9:fc:0a:a4:bb:2d:
                    0f:42:67:ca:12:12:85:4f:66:12:fc:61:a3:2e:6e:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4A:99:2C:CE:7E:C2:D2:85:2A:C6:EE:9D:CB:C9:4A:7F:76:45:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fd2576-93fb-41bd-848b-6d748e273b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b3:28:09:22:ec:20:bb:5e:52:43:08:6c:84:bd:7d:63:b9:bb:
         22:d1:b6:60:c1:6c:5b:ef:12:99:2d:ec:2b:3f:73:12:4d:8a:
         a2:dc:bd:e2:a7:fb:2f:84:87:e2:77:7c:85:7a:54:b6:1f:54:
         9f:8f:16:c0:29:b7:5e:94:cb:6c:27:e0:8a:fa:b8:e5:8a:14:
         1e:5f:06:2b:54:9e:54:bf:d9:50:29:47:bb:49:bc:1a:a7:5d:
         a7:8e:91:e3:ae:d4:0e:83:b0:72:b0:64:0f:c7:f5:4e:0c:b7:
         91:3a:b4:90:b7:b5:83:49:35:35:eb:78:e7:67:a8:4f:29:91:
         f6:9e:68:3d:e8:ba:4d:cf:0f:77:16:8b:4c:8a:1f:0c:57:64:
         25:b6:5e:0b:65:2a:88:52:43:82:d8:a7:9d:e2:d0:31:71:1b:
         83:a3:9f:0b:bd:8c:2a:68:dd:1b:5b:86:e4:98:d9:b0:1b:46:
         4c:86:bc:47:0f:27:f4:90:df:bf:b9:a2:cf:dd:df:9d:98:e6:
         e3:7f:a7:f4:a4:5a:e5:1a:19:6e:0b:f2:ff:1a:ed:45:2e:2a:
         36:ce:19:35:31:1f:48:4f:cf:f2:da:d7:d5:a7:05:76:68:da:
         a3:fd:6e:93:9e:ca:a1:35:da:df:76:c8:b5:d4:43:b1:d2:a6:
         0b:a5:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----