Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316a4bb4-cd6d-4e54-b0cc-25248fb5fe62.roa
File:                     316a4bb4-cd6d-4e54-b0cc-25248fb5fe62.roa (raw, json)
Hash identifier:          hNw9M8SHGpnQJgkOwMqzmqlQe5CUi7znXNSyJtKaqQM=
Subject key identifier:   46:90:5A:49:58:C6:8E:94:E0:B9:8D:18:CC:D3:E5:26:3C:59:9C:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       170B8823632F6634AF55A645190B69E8E9308C67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316a4bb4-cd6d-4e54-b0cc-25248fb5fe62.roa
Signing time:             Sun 19 Oct 2025 02:00:07 +0000
ROA not before:           Sun 19 Oct 2025 02:00:07 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0b:88:23:63:2f:66:34:af:55:a6:45:19:0b:69:e8:e9:30:8c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:00:07 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=be76a1ebbbb235f6ae9d9421e4c115230db87fa10ae0ad943ecd9c2c106b20e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:73:35:66:ac:ed:34:b7:50:62:20:71:41:
                    99:84:71:c4:08:7b:c9:fb:c6:6d:69:af:73:c9:b5:
                    8f:cd:5a:28:c4:da:51:65:f5:36:5f:5c:17:b3:fd:
                    b9:ac:66:02:3b:27:9c:66:4d:b6:2a:18:63:16:ce:
                    c3:51:82:f8:64:2f:cf:74:9d:f5:75:23:9f:70:4b:
                    ac:7f:9c:53:25:96:9a:30:18:2c:99:c4:bc:e9:89:
                    0d:64:f4:fb:3d:45:9f:c8:ee:ad:0a:15:f1:bb:e8:
                    c7:51:7b:67:b0:65:84:4c:3c:c2:d1:de:55:ca:a7:
                    08:7c:89:3d:ef:0f:91:69:ef:67:72:75:1c:e1:cd:
                    2c:ce:87:c4:82:55:82:55:8b:c6:23:e2:6c:42:5d:
                    a4:f8:39:8a:47:98:42:51:58:13:e3:ce:c6:26:3f:
                    98:8e:37:b8:0f:76:46:41:b5:56:04:5c:a0:94:85:
                    d6:90:3f:14:39:56:b8:07:89:5f:f2:2c:17:d0:9b:
                    9e:5b:95:33:91:34:fd:78:f5:5c:28:9d:fc:51:58:
                    b8:a9:a5:b5:aa:8b:77:fd:89:40:6a:0a:cf:8a:af:
                    e3:ac:82:dc:9a:75:c5:56:12:d1:5a:dd:7f:00:fa:
                    f8:02:1a:72:17:0c:eb:3f:14:b1:1a:de:fc:cf:77:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:5A:49:58:C6:8E:94:E0:B9:8D:18:CC:D3:E5:26:3C:59:9C:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/316a4bb4-cd6d-4e54-b0cc-25248fb5fe62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:15:9b:ef:28:8b:36:9f:de:f8:3f:69:09:f8:9a:b3:b1:
         a6:0e:03:e4:56:07:55:f9:3a:64:c7:17:6b:08:93:c4:99:bd:
         c8:56:fc:2f:c5:71:3b:e5:8f:f9:8d:76:d7:8a:26:fb:05:63:
         9a:82:49:d0:9a:0e:9f:64:bf:23:e4:23:b2:13:b8:39:5d:37:
         04:43:da:d6:d2:d3:f3:74:fb:90:5f:f1:4c:ac:0a:37:ab:5f:
         93:ee:8a:18:6d:f6:5e:dd:14:63:56:45:bd:a9:c6:a5:60:34:
         ee:77:0d:d7:b5:6c:bf:30:21:66:da:a5:1d:d5:3b:12:ec:0a:
         e1:70:a7:44:87:73:c6:0b:14:d6:f5:9e:92:ab:b0:b3:97:23:
         af:4c:48:bf:c7:c7:2d:14:2f:c6:0b:03:f1:0d:e3:0b:17:7f:
         5d:20:d0:ec:95:5e:bf:fc:9e:1a:76:eb:97:e8:cb:3d:dc:8b:
         85:7a:3e:89:72:9a:85:c6:a2:93:94:79:7f:36:b5:9d:f2:99:
         01:5b:32:04:d4:5e:90:4f:ac:eb:b1:56:ca:1a:86:c8:ae:f9:
         42:a7:53:a5:9f:7f:85:c2:c7:e0:a8:60:02:74:c3:3e:9f:1d:
         9e:37:12:df:b5:a0:0f:c9:3e:98:b7:66:47:21:ba:08:51:73:
         64:8c:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----