Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25292d56-ab79-4c77-a1d4-21b7d3a54e62.roa
File:                     25292d56-ab79-4c77-a1d4-21b7d3a54e62.roa (raw, json)
Hash identifier:          SehYH0MCFZQ/i03QceDjnqC8ddzDztpO0NaX1vUPfJY=
Subject key identifier:   E5:AA:1F:F6:C9:A6:3A:74:C5:16:93:71:E3:79:2E:11:36:63:0F:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       18B2347F90F04E861D669462C34214E8FC43852F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25292d56-ab79-4c77-a1d4-21b7d3a54e62.roa
Signing time:             Mon 20 Oct 2025 02:40:05 +0000
ROA not before:           Mon 20 Oct 2025 02:40:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b2:34:7f:90:f0:4e:86:1d:66:94:62:c3:42:14:e8:fc:43:85:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:40:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=40f9ce8ad6b3deffa081865f58aa1231f56143d0d184967ca9b5970da5653f21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:1d:3b:c7:6d:00:48:e5:7b:de:73:22:89:
                    6b:1a:9b:ce:26:64:9e:98:77:9e:38:40:80:6f:a9:
                    e7:f1:9b:dd:79:ed:02:c5:83:c7:0a:77:23:d4:81:
                    a2:2f:da:71:66:57:de:49:ec:ea:73:95:83:3a:24:
                    73:4f:fb:7e:c6:ad:e5:12:84:36:2c:12:cd:8f:b4:
                    34:1f:cb:01:af:b6:47:ba:48:9d:73:37:ef:20:a1:
                    d7:c9:f9:b9:63:a2:44:59:75:67:b1:5e:2e:e9:74:
                    13:e5:61:68:97:71:26:d6:a4:34:0c:6a:12:60:53:
                    ed:20:3a:ee:19:19:81:7b:b6:c9:2e:d6:af:68:dc:
                    c0:3f:08:79:7c:cd:dc:8c:4c:de:bd:6b:10:b7:5f:
                    5b:76:10:39:4a:f9:c7:1a:55:15:0b:f9:81:cc:0a:
                    db:50:0e:19:6f:cf:33:fa:a0:66:9d:19:2f:79:a6:
                    9f:2c:6a:13:99:69:7d:ef:e6:2d:01:80:69:d4:71:
                    fc:c2:d8:47:22:c4:b0:7b:3c:0d:be:6b:9a:31:82:
                    6a:a3:ff:d7:88:ec:2f:70:84:9c:60:1b:06:1c:5b:
                    d5:7c:46:6e:31:23:77:10:02:69:e5:23:47:4e:c7:
                    33:fd:36:d8:28:c4:98:9a:82:73:ad:6d:67:05:c4:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:1F:F6:C9:A6:3A:74:C5:16:93:71:E3:79:2E:11:36:63:0F:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25292d56-ab79-4c77-a1d4-21b7d3a54e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:6f:af:5f:c5:a1:b3:fb:fb:cd:23:df:b7:ab:ff:4e:e8:
         54:38:1e:a1:ff:84:5f:77:28:d6:d5:00:30:5f:4f:7a:8b:56:
         34:e9:e7:cd:71:73:4e:0b:05:a1:0b:62:bd:51:ef:4a:67:03:
         08:d7:63:60:35:bf:e8:bc:df:73:e7:2f:5c:7d:ae:00:82:a8:
         42:cf:d9:2e:3b:aa:dc:a9:ba:f6:27:41:05:95:a8:1a:4a:93:
         3a:2e:1c:7c:6f:4f:14:57:f6:67:26:53:4b:08:51:13:2d:da:
         81:32:13:ce:3e:6d:e9:4f:7a:89:78:a5:17:05:49:d1:b4:74:
         a3:02:42:3a:f3:1d:b8:64:61:b4:a5:24:17:72:01:95:c9:01:
         fc:cf:4e:8d:ed:32:2c:49:4f:53:80:27:bf:87:1f:ce:c2:f3:
         ae:5c:e6:b5:f7:0c:11:81:0c:72:71:65:11:0d:c5:cd:ea:71:
         43:f0:5d:73:70:f0:4d:01:a7:e9:d2:fb:ef:3d:52:26:d2:d3:
         2b:ea:97:26:c1:44:cc:3a:e9:5a:60:cb:06:98:9c:31:8b:1d:
         c7:59:77:d8:f4:b4:c1:5f:fd:53:da:57:0e:6b:57:74:8a:33:
         8d:ab:f7:b9:c4:a3:03:ef:61:5a:d8:36:ad:9b:86:58:f6:68:
         ac:fe:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----