Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39f28c1c-e8a0-455c-b483-9ef7e5fb8402.roa
File:                     39f28c1c-e8a0-455c-b483-9ef7e5fb8402.roa (raw, json)
Hash identifier:          ol0WBowSM2srI36G1Bq/R7HmuCxdffhLoUfMo7WtZds=
Subject key identifier:   03:7E:B6:FC:B5:C4:E0:0A:C4:FD:C8:79:61:91:1D:AF:56:FF:13:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B5BFF1BE59F62EC00B9F6AE590A509547FE02EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39f28c1c-e8a0-455c-b483-9ef7e5fb8402.roa
Signing time:             Sun 19 Oct 2025 00:00:43 +0000
ROA not before:           Sun 19 Oct 2025 00:00:43 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:ff:1b:e5:9f:62:ec:00:b9:f6:ae:59:0a:50:95:47:fe:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:00:43 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=8dbed10fbea725e90acfe6765f29cd79c7eb7309e569ff62efa7c82c21989838, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fa:da:ef:a8:d9:38:a3:ae:80:e3:07:1e:ef:
                    50:70:c6:7a:d2:be:07:bd:b5:7e:1c:67:2d:59:aa:
                    7b:fc:8e:52:fc:b8:45:fd:8b:42:e6:da:46:1a:ca:
                    45:9b:86:a2:ee:df:f1:9a:c4:fd:95:bc:5c:53:fd:
                    a5:0d:b9:d4:ea:d3:38:a2:4a:f1:49:31:88:67:ef:
                    2e:be:fd:c0:14:33:35:4e:60:5f:fa:f4:a0:de:d9:
                    81:65:ea:61:0c:89:ef:04:fc:eb:e9:b3:cd:ff:fd:
                    b7:1d:99:ec:0f:12:43:98:f2:97:8b:49:26:8a:8a:
                    49:e7:86:6c:6e:98:0a:84:3f:3d:23:5c:e7:a0:9a:
                    a6:fc:16:ce:5a:68:e1:c3:06:45:47:83:b9:73:cc:
                    e8:54:59:35:9f:f5:6f:f9:7e:1a:ec:8d:cc:66:4e:
                    3d:60:e4:0a:93:71:fa:d6:b1:7f:3f:68:e0:c5:25:
                    f9:53:cf:98:9f:c4:44:5c:e7:96:bb:c3:b1:d3:a4:
                    c6:19:24:87:4f:a9:5d:3a:83:cd:8c:51:9b:9e:46:
                    15:07:64:56:14:ee:53:2d:dd:09:36:33:fc:fc:6c:
                    78:ea:57:aa:84:4e:7a:17:3b:3c:32:f9:85:b9:be:
                    ef:63:af:ec:2d:10:7e:1e:b5:92:d8:92:7f:de:c2:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:B6:FC:B5:C4:E0:0A:C4:FD:C8:79:61:91:1D:AF:56:FF:13:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39f28c1c-e8a0-455c-b483-9ef7e5fb8402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:e8:9d:1c:1d:13:cf:12:01:3b:5e:a9:d3:72:58:31:da:
         40:d6:e7:8f:ed:2b:9c:6c:88:e7:93:81:72:a1:26:2c:32:2b:
         6a:56:bf:06:de:ce:f9:f0:dd:7a:e6:d8:41:4e:b2:b0:df:3d:
         92:73:56:f1:2d:48:d3:2f:46:e2:9a:da:d5:50:74:36:3a:89:
         cf:ee:79:25:7a:8d:9c:38:bc:5a:d0:e7:0b:18:4b:10:d3:8b:
         5a:6d:d2:13:41:30:82:3f:c7:df:5e:4c:61:ba:7c:45:fb:2d:
         04:9d:80:e2:01:9e:6e:bc:9f:94:68:57:d3:0c:ef:9a:4d:f6:
         07:9f:cd:ee:1f:76:d5:c5:dd:7e:62:3c:27:72:2a:d3:fb:0c:
         61:cf:46:a7:81:99:4e:99:1d:1f:04:51:34:f9:29:09:a9:4c:
         a3:03:3f:0d:67:c1:d4:99:f3:a9:70:cb:93:c5:f8:5d:ab:05:
         19:3e:a8:6a:4b:2d:5d:88:dd:83:bb:72:3c:40:bf:c9:26:9b:
         08:33:78:9c:67:48:d7:78:4d:f1:d7:78:a4:b9:2b:84:23:ad:
         fe:ed:e6:f4:2d:a0:aa:1d:2a:25:f1:22:b4:d3:bc:39:80:29:
         9b:60:09:6d:87:d1:b6:da:a6:35:ab:8a:ce:60:b1:84:07:6a:
         4f:44:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----