Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23831fc9-0c56-444b-8fd2-c1edd2bef424.roa
File:                     23831fc9-0c56-444b-8fd2-c1edd2bef424.roa (raw, json)
Hash identifier:          Ey+1cTNMghRxFYt4TxZDgpUu0GOC9aCqVkt/CRu7q54=
Subject key identifier:   4E:13:2A:A0:CB:02:E3:33:41:1E:1B:8C:FE:B0:72:B9:B9:21:61:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76AF0999CEF09626EB8D32F86392B27172FA6003
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23831fc9-0c56-444b-8fd2-c1edd2bef424.roa
Signing time:             Mon 20 Oct 2025 01:21:56 +0000
ROA not before:           Mon 20 Oct 2025 01:21:56 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:af:09:99:ce:f0:96:26:eb:8d:32:f8:63:92:b2:71:72:fa:60:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:21:56 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5adf4bf513465d7a8744aff196802d921d61c0f6961e0b05c6af3bc18825a1f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:bb:4d:88:79:2f:a5:5b:a8:55:81:12:57:
                    0d:39:fd:97:79:f7:55:c7:3e:97:e8:74:c2:a5:7e:
                    f4:80:f3:42:48:8e:b9:bd:ad:52:15:66:fe:cd:02:
                    e1:59:12:b3:de:9e:0c:dd:90:c4:3b:47:9b:15:9e:
                    16:f8:b6:6f:ed:9b:54:8e:b4:a9:bd:e6:18:d4:0a:
                    0c:fc:72:37:6a:90:91:04:f8:0c:18:64:74:45:16:
                    31:b8:90:bc:6e:7b:7e:12:aa:e4:c9:82:f6:8c:5f:
                    77:98:55:a5:63:37:25:80:2f:8f:a8:a7:c1:82:81:
                    7c:ed:a3:82:29:d2:74:e8:37:2e:d3:cd:48:8d:0d:
                    00:61:84:23:38:45:da:8e:0c:75:db:f7:44:55:3e:
                    77:01:6c:0d:bf:a2:2d:10:fa:61:5e:d2:6b:4c:49:
                    08:54:93:df:61:fe:8b:e7:b0:44:8b:0e:e4:6a:bb:
                    2c:4d:3a:15:41:7d:d1:f2:b5:52:c7:c9:0c:3d:6a:
                    b6:3a:8c:d4:64:83:d5:1a:66:0d:d2:d5:e1:d6:09:
                    84:54:e4:1e:b8:c5:e1:d8:cc:f9:8e:34:44:05:1b:
                    77:9f:da:02:a2:c6:6a:c2:2a:f0:e0:b3:34:06:19:
                    a1:0f:98:24:8d:3e:9d:4f:63:c3:49:d2:75:f1:16:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:13:2A:A0:CB:02:E3:33:41:1E:1B:8C:FE:B0:72:B9:B9:21:61:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23831fc9-0c56-444b-8fd2-c1edd2bef424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:38:3f:e5:fa:ff:59:0b:bd:fd:52:d8:a5:c3:96:d4:d1:
         1b:90:2c:aa:8e:87:68:3c:37:54:89:84:af:ec:31:f5:a5:58:
         1d:26:ab:4f:a1:7b:4d:dd:01:54:be:44:07:98:90:08:5f:c0:
         2c:44:0f:32:3d:0a:c4:64:69:b8:a2:cd:cc:b6:92:d0:6d:d5:
         3d:ea:5c:50:9f:27:1b:86:c7:2f:01:77:aa:a1:a9:03:fb:98:
         f5:2d:25:58:be:06:02:6c:f6:d5:7c:04:96:32:b0:26:4d:18:
         69:97:90:d8:ae:8c:5a:d8:ea:95:a4:1c:cb:42:16:74:50:4e:
         10:a7:8b:28:e7:f7:3e:51:4d:35:12:31:c3:c0:3b:2e:89:c7:
         e2:8f:99:e1:c7:2a:05:98:e6:ad:ca:cc:fe:8d:e2:70:5c:e1:
         43:47:88:e1:4b:75:8b:09:10:c6:39:b9:52:6d:3a:6e:4f:68:
         cd:60:bf:cf:8b:60:3b:1e:ad:4d:ca:93:5d:71:39:28:f5:95:
         a9:7a:1e:2f:62:a5:a8:b2:e3:65:a3:73:0b:34:0f:15:ea:95:
         0b:e9:d8:8d:77:8b:ef:7e:96:5c:92:8d:fb:a5:43:1e:65:cf:
         1e:b3:1a:22:ac:cf:1f:6a:94:ce:21:6f:73:fa:88:c7:c6:98:
         70:75:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----