Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae21202-cd8c-4702-a068-c6844ab74c52.roa
File:                     2ae21202-cd8c-4702-a068-c6844ab74c52.roa (raw, json)
Hash identifier:          Gf5GN/M7RMlmAMzf+mMnZMI0Oo3RLytcaenN2U4B54E=
Subject key identifier:   0F:D1:70:ED:20:F2:29:E7:D7:58:CE:23:92:06:97:6C:8E:2C:14:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4812C300FAE5786664DC5B500C2418ECBEEFB82F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae21202-cd8c-4702-a068-c6844ab74c52.roa
Signing time:             Mon 20 Oct 2025 04:50:08 +0000
ROA not before:           Mon 20 Oct 2025 04:50:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:12:c3:00:fa:e5:78:66:64:dc:5b:50:0c:24:18:ec:be:ef:b8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:50:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5dddef95bfb7a16c319bd9b3cb2ee6226d32597513b657c2611df43e7a5e8ce6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:d9:db:06:12:bb:1b:90:5c:9b:80:dd:a6:
                    1b:f9:13:bd:cf:a0:1f:5f:06:fb:0e:9a:83:80:6b:
                    53:8b:04:02:94:9a:ca:b9:64:0e:04:c1:6f:55:b6:
                    99:a9:fe:2b:0a:56:b8:10:72:87:f7:31:70:21:ea:
                    bf:d7:71:2e:bf:50:f7:6c:c6:7f:65:83:01:46:0e:
                    77:04:ec:f4:99:f8:7f:38:ea:be:c1:89:24:98:49:
                    e7:00:c3:69:55:91:0c:b8:a2:83:22:9a:29:fc:09:
                    73:30:83:47:33:a9:c3:92:fd:2e:a7:91:d3:1a:2f:
                    d9:4d:85:d3:ff:f2:22:6e:58:37:1e:18:70:f7:63:
                    89:f0:8a:bd:ff:80:f2:a6:36:be:6e:b5:29:a9:6f:
                    20:75:54:3d:42:05:c7:6e:60:db:f9:ab:3e:c0:b1:
                    98:26:d2:ef:37:e5:13:2c:91:ac:1b:ec:76:5e:27:
                    b0:d0:0d:f9:81:e2:67:68:a0:66:d5:bd:e2:84:5e:
                    09:9f:f5:46:0a:2c:da:c8:02:f8:7a:a2:c9:44:c1:
                    eb:1f:d7:23:1c:e0:36:0a:11:e6:b9:0e:78:05:f2:
                    26:af:ca:ba:9f:0a:30:73:9b:64:35:63:a2:67:a3:
                    13:68:28:3a:cd:16:74:14:8a:80:23:c9:7a:78:38:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D1:70:ED:20:F2:29:E7:D7:58:CE:23:92:06:97:6C:8E:2C:14:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae21202-cd8c-4702-a068-c6844ab74c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:cd:65:a1:2d:18:60:84:bb:20:97:3a:1b:55:fc:2c:19:
         ff:eb:ad:f9:78:2d:78:87:02:0f:c7:bd:0d:cf:ce:a1:b3:b1:
         07:67:6f:08:38:99:cc:8c:6c:fb:c4:c9:64:4c:c8:e6:64:11:
         bc:d7:1a:14:50:b3:2a:da:7e:8f:2c:01:29:ee:37:32:5f:26:
         09:aa:14:f7:fe:9f:0f:13:df:89:08:db:b8:2f:ce:4f:50:71:
         57:28:a1:54:59:8a:f0:10:a3:e3:87:1d:ba:92:73:c2:9d:bf:
         2f:ce:6f:00:35:ae:65:a7:0e:c1:bf:4b:98:31:a5:cb:c5:b6:
         84:1f:25:ae:4a:f8:09:76:ee:26:9c:70:b6:94:e5:67:96:3b:
         fa:85:a2:31:1a:9e:47:26:81:56:74:e7:75:d4:3e:5f:64:c8:
         f7:46:d0:3a:d2:49:d7:03:0c:95:8c:1c:44:be:4a:3f:2b:0b:
         de:d4:bc:67:41:a6:df:dd:df:a6:3f:66:59:80:35:ef:bf:5d:
         23:99:d5:54:c2:06:ab:94:9b:bf:11:df:eb:f7:e5:ea:fb:ae:
         dc:79:6d:34:1a:15:a1:70:42:df:b6:38:f3:aa:7b:67:2e:e5:
         2e:79:3b:a6:7a:f7:c4:0f:2d:e5:c2:31:d3:77:10:7e:13:fb:
         c4:f1:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----