Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1883d0da-f5b6-4c2a-a763-e698cde6b41d.roa
File:                     1883d0da-f5b6-4c2a-a763-e698cde6b41d.roa (raw, json)
Hash identifier:          nqAJ4XgN54CmHQvDHnKdI39IM1z9PUI9dk7IjHEj/GY=
Subject key identifier:   62:84:9C:D6:CC:96:DF:F8:28:3F:36:9B:B5:08:60:6C:67:C5:F2:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D34B248D13FE2A0D6C552FA94268B6218A58DAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1883d0da-f5b6-4c2a-a763-e698cde6b41d.roa
Signing time:             Sun 19 Oct 2025 02:40:49 +0000
ROA not before:           Sun 19 Oct 2025 02:40:49 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:34:b2:48:d1:3f:e2:a0:d6:c5:52:fa:94:26:8b:62:18:a5:8d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:40:49 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=f83d18059a91e9a3091b811221096df9f1c34e34a5362e698eac1c0cc4cad807, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:7b:c8:d7:5e:ff:88:02:fe:e1:73:cf:8e:
                    aa:6e:57:ba:08:f3:68:fb:57:11:13:02:0b:f5:20:
                    fe:ec:2c:60:4d:2b:36:b8:9d:7b:5a:e6:a8:7d:a7:
                    1e:f2:3a:ba:9f:af:f5:46:46:cb:9f:5c:4c:00:ab:
                    2b:4c:20:a5:eb:d9:7b:06:ce:56:8c:0f:48:19:29:
                    0a:c4:94:56:b6:6c:49:65:8e:eb:fb:c6:f3:19:59:
                    be:9d:ef:af:50:62:cf:63:92:1e:79:13:11:ab:15:
                    c6:9d:30:88:40:02:73:1a:34:fd:fa:51:73:ca:c4:
                    77:9b:93:fa:ea:42:86:27:2f:ae:07:6b:9f:09:e0:
                    9e:63:14:fe:6d:16:c4:a3:02:0c:1e:ac:8b:cd:99:
                    02:e7:67:a1:6e:38:f3:e0:a2:4f:be:01:59:0e:6f:
                    3c:ba:c5:f5:cf:07:6a:d1:37:85:8d:e5:07:15:4c:
                    7c:bf:2d:c2:85:24:2b:73:35:45:dc:28:16:65:df:
                    bf:e2:7d:1b:2e:30:04:3c:fc:63:f2:ab:c5:93:a1:
                    ab:54:38:04:86:ec:08:6f:48:06:58:91:d9:26:53:
                    29:6d:2a:21:97:6e:80:16:52:73:04:b7:29:8c:a6:
                    b2:e4:a1:c0:63:51:53:15:fe:77:17:19:58:a9:f7:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:84:9C:D6:CC:96:DF:F8:28:3F:36:9B:B5:08:60:6C:67:C5:F2:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1883d0da-f5b6-4c2a-a763-e698cde6b41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:52:39:7f:bc:2e:19:a3:cd:fa:36:5f:61:63:7f:9d:44:94:
         26:07:c7:e7:eb:4f:88:21:bd:18:73:a8:23:9d:3d:2e:c5:1b:
         02:a3:d7:aa:5f:b6:7d:e6:f0:c1:6c:81:9e:34:84:01:6f:67:
         d1:99:74:b8:1c:91:3c:f2:30:e8:58:79:05:7e:7f:44:20:cc:
         48:d4:6d:58:a4:73:3c:af:aa:0b:04:6f:44:b0:f9:d0:4f:30:
         03:b1:d4:34:b3:c6:a4:ff:cd:c6:bb:4a:de:af:de:40:7c:d3:
         1d:d3:1e:44:76:79:57:0c:22:72:6c:63:56:a3:dc:89:78:0f:
         41:73:d4:01:87:ff:0c:3b:c3:7a:84:64:79:fc:8c:9b:96:43:
         84:b3:82:89:47:de:7a:63:b6:28:f5:6a:78:57:ec:41:8c:ff:
         aa:10:60:91:46:30:d3:4d:9e:f5:d1:2c:7b:f4:ce:4c:26:f4:
         4a:9e:d0:af:21:61:68:09:60:8d:7b:b5:07:0f:23:13:60:a2:
         68:ed:86:50:a4:80:0d:16:e6:e7:f7:cc:8b:25:2a:ab:5c:8c:
         0f:c4:1e:a7:72:dd:d7:13:dc:ee:e0:5d:1b:95:95:25:4d:fb:
         6e:40:20:aa:ee:e9:42:91:85:21:62:65:e3:44:94:7f:3a:90:
         33:10:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----