Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c74c98a-16d3-407f-8f0f-51e07e02b8d4.roa
File:                     3c74c98a-16d3-407f-8f0f-51e07e02b8d4.roa (raw, json)
Hash identifier:          SF2BVWG+wxxVR6M7/q1YnGl3L78HRryOJjgLskmGiT8=
Subject key identifier:   27:52:8A:96:8F:E2:D5:39:3F:B4:C6:48:C4:78:A1:42:D7:B6:3E:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A1D15BC29E6282034E3E3DB76CA4073EC5394F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c74c98a-16d3-407f-8f0f-51e07e02b8d4.roa
Signing time:             Mon 20 Oct 2025 00:51:29 +0000
ROA not before:           Mon 20 Oct 2025 00:51:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:15:bc:29:e6:28:20:34:e3:e3:db:76:ca:40:73:ec:53:94:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:51:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a46d03390032f9603fc7c0d208a92fc435feb2ecbb1187482fa0019e81bd5271, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:61:c5:f2:e4:61:8e:d2:77:1e:e5:e3:6f:
                    66:82:29:e4:79:7e:36:d8:5d:1d:6f:6c:8d:a2:5b:
                    a5:c6:0a:67:aa:a3:db:f1:82:f9:d3:c2:fc:1b:1f:
                    db:15:35:d4:a4:4a:f4:66:1b:16:b1:3e:77:9b:71:
                    1f:4d:63:eb:9b:0d:6c:2f:a1:25:b7:ca:b3:d5:33:
                    2e:05:d5:d9:f5:03:c4:4a:57:19:c9:3d:b7:aa:da:
                    23:68:dc:c9:be:e6:31:92:95:8c:4d:0f:f8:25:8a:
                    75:25:3d:6f:cf:e2:fd:74:07:9e:d8:c5:c0:bb:7f:
                    9c:6c:4a:a9:4b:1b:b7:0e:9c:f8:23:5a:fc:f6:41:
                    d0:cc:e1:8b:2b:18:c3:7a:bd:bb:43:2e:30:6a:97:
                    42:ee:e7:f5:71:73:24:0c:dc:0f:42:9b:be:ad:c0:
                    d4:e4:e2:9b:73:ac:a5:a5:1f:09:36:79:0c:e6:52:
                    54:a7:a2:92:29:13:b0:b4:4f:61:a2:ae:f7:43:00:
                    5f:f2:60:42:77:e7:77:51:99:b9:c0:4b:b1:51:7f:
                    0f:fe:82:48:91:2a:6b:f4:6c:5f:58:80:65:54:84:
                    34:ee:4e:28:d9:a7:f5:9f:6d:5a:75:c1:df:ae:a5:
                    66:d2:90:1d:d1:26:bb:d3:26:58:8e:ad:09:d7:e0:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:8A:96:8F:E2:D5:39:3F:B4:C6:48:C4:78:A1:42:D7:B6:3E:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c74c98a-16d3-407f-8f0f-51e07e02b8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:62:13:8c:36:f4:24:ad:49:c7:0c:ee:aa:42:ca:00:6d:
         a4:97:e8:9d:f7:f2:08:34:10:15:99:f9:b8:a1:98:fb:84:a9:
         a5:05:9c:fc:1f:e3:39:05:79:33:5d:ca:c1:c3:40:f2:79:5e:
         53:20:43:8d:c0:ec:04:17:03:30:9a:09:fb:61:ab:59:ef:dc:
         dc:1e:b3:6a:cd:bd:7a:2b:26:d8:c4:de:af:bf:a3:88:09:52:
         f6:7a:13:35:dc:4f:73:6e:6e:e8:28:d5:28:8a:50:02:90:78:
         d5:77:68:3e:40:18:80:bb:47:49:77:35:95:fd:06:43:ea:2f:
         be:22:76:63:92:f0:68:6a:35:8c:d2:aa:ab:cf:0d:ff:cb:24:
         26:c6:ed:ed:cb:01:c9:41:9c:86:e3:1b:0d:5b:87:12:83:fb:
         68:6d:d9:c6:05:bd:2a:62:7f:6f:49:ca:28:d3:5d:23:5b:90:
         43:82:a6:b9:60:28:f7:90:66:25:9e:b7:5b:5e:5b:24:3f:f8:
         f8:b9:04:e2:9a:e4:4c:78:fe:fa:2b:5f:68:08:48:d1:52:39:
         42:e7:eb:10:69:ea:78:b3:cd:a3:e6:ee:50:1a:bc:49:23:54:
         bb:86:19:a8:4d:3b:07:b2:52:41:2e:44:72:55:1d:0e:98:bd:
         35:38:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----