Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b8df-e6db-44f6-8bd4-fa4cd4ecbd53.roa
File:                     3e99b8df-e6db-44f6-8bd4-fa4cd4ecbd53.roa (raw, json)
Hash identifier:          rm0XV3KmmnASQaadx/c2JFsnRdv46n32zvCyFc5vWVY=
Subject key identifier:   38:A0:BB:3F:C0:27:8A:2E:B0:01:4F:46:A3:71:89:61:1A:01:75:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E6868562BB083F29061D348F92E3A25959E362F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b8df-e6db-44f6-8bd4-fa4cd4ecbd53.roa
Signing time:             Mon 20 Oct 2025 00:40:12 +0000
ROA not before:           Mon 20 Oct 2025 00:40:12 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:68:56:2b:b0:83:f2:90:61:d3:48:f9:2e:3a:25:95:9e:36:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:40:12 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ba8fcbca9b761ac769c82c0fd5d8c2729c1bb2dc6bc5cee66df0412f6a4903e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:0d:a9:a0:1a:ff:6e:d7:b5:42:83:b7:63:
                    04:e3:94:e6:a1:af:d1:27:2d:4f:b0:19:8d:da:64:
                    c0:34:3f:46:26:da:e7:47:16:e0:fa:f4:57:f0:15:
                    95:2d:92:60:45:83:7a:87:19:35:de:93:3b:f3:d1:
                    e4:56:b7:46:79:d3:0c:51:83:b1:fc:61:d5:86:5a:
                    9b:f1:df:33:47:6e:65:2b:47:11:98:1e:03:2b:f6:
                    5f:ff:a7:47:95:4c:8f:21:76:94:c9:63:ae:b1:0c:
                    5b:01:b5:a7:43:a9:23:0f:54:98:40:30:81:1d:e5:
                    73:f1:79:2d:4c:e2:86:77:99:8b:ce:04:db:e5:6b:
                    98:ec:40:96:9d:eb:74:2d:97:18:2e:b9:92:61:b2:
                    ed:a0:5d:61:25:ac:f0:5d:79:4c:55:58:fa:f4:e4:
                    82:24:5f:a1:99:b4:50:69:7a:f4:f7:52:62:b2:e4:
                    20:98:87:17:cc:7e:01:4d:bf:4a:60:21:62:ee:9e:
                    94:fc:91:2e:dd:24:51:b9:b6:ba:35:89:30:67:df:
                    c1:be:fc:9d:f7:1b:65:02:73:bd:14:61:e2:16:59:
                    60:cd:cb:34:8f:db:18:46:58:06:dc:61:22:54:3a:
                    13:14:a8:73:11:1a:04:5e:15:dc:15:86:a6:fc:1c:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:BB:3F:C0:27:8A:2E:B0:01:4F:46:A3:71:89:61:1A:01:75:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e99b8df-e6db-44f6-8bd4-fa4cd4ecbd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:7c:61:dc:3d:f2:c9:35:56:f4:ce:55:e4:ea:65:97:da:c5:
         09:fc:51:04:0e:fb:7c:04:7a:13:88:9f:3c:3b:f9:48:37:bb:
         8e:82:1a:97:9b:a9:75:6c:ca:eb:70:34:9f:94:5e:ee:52:3d:
         83:f5:01:23:dd:e4:5e:fe:51:b5:38:4d:a6:13:da:43:69:57:
         4d:35:6e:ad:90:de:bd:78:1f:94:45:f1:dc:97:c5:ba:5a:bc:
         b8:4b:7b:d4:3a:b1:3b:0d:76:9e:26:db:fb:f6:8e:21:d7:c2:
         2b:fb:b1:96:b5:c5:4d:6d:8a:e9:c1:13:85:1b:b7:c1:e4:a2:
         c1:e3:c3:d3:b5:58:11:4c:64:35:88:62:c4:99:97:87:c1:e8:
         f8:29:81:89:f0:08:85:c6:71:20:28:f7:00:ba:3b:30:86:af:
         b2:da:06:38:02:51:17:07:18:3a:64:05:36:46:51:c6:53:b0:
         67:42:6f:de:aa:a9:cf:df:f3:16:e8:2b:fa:cf:8b:d0:8e:e3:
         31:d0:2f:45:10:c3:87:96:cc:c2:c5:d5:e9:ca:70:3c:6b:63:
         f2:2a:38:c3:b4:d1:39:f4:fe:56:09:31:f1:35:55:3c:87:d9:
         a1:2c:38:47:b6:56:38:50:7d:9a:03:57:de:09:2c:10:ef:fd:
         e1:c2:75:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHmhoViuwg/KQYdNI+S46JZWeNi8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDA0MDEyWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYThmY2JjYTliNzYxYWM3NjljODJjMGZkNWQ4YzI3Mjlj
MWJiMmRjNmJjNWNlZTY2ZGYwNDEyZjZhNDkwM2UyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwPQ2poBr/bte1QoO3YwTjlOahr9EnLU+wGY3aZMA0P0Ym
2udHFuD69FfwFZUtkmBFg3qHGTXekzvz0eRWt0Z50wxRg7H8YdWGWpvx3zNHbmUr
RxGYHgMr9l//p0eVTI8hdpTJY66xDFsBtadDqSMPVJhAMIEd5XPxeS1M4oZ3mYvO
BNvla5jsQJad63QtlxguuZJhsu2gXWElrPBdeUxVWPr05IIkX6GZtFBpevT3UmKy
5CCYhxfMfgFNv0pgIWLunpT8kS7dJFG5tro1iTBn38G+/J33G2UCc70UYeIWWWDN
yzSP2xhGWAbcYSJUOhMUqHMRGgReFdwVhqb8HAiHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOKC7P8Anii6wAU9Go3GJYRoBdYAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNlOTliOGRmLWU2ZGItNDRmNi04YmQ0LWZhNGNkNGVjYmQ1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnx0wDQYJKoZIhvcNAQELBQADggEBANh8Ydw98sk1VvTOVeTqZZfaxQn8
UQQO+3wEehOInzw7+Ug3u46CGpebqXVsyutwNJ+UXu5SPYP1ASPd5F7+UbU4TaYT
2kNpV001bq2Q3r14H5RF8dyXxbpavLhLe9Q6sTsNdp4m2/v2jiHXwiv7sZa1xU1t
iunBE4Ubt8HkosHjw9O1WBFMZDWIYsSZl4fB6PgpgYnwCIXGcSAo9wC6OzCGr7La
BjgCURcHGDpkBTZGUcZTsGdCb96qqc/f8xboK/rPi9CO4zHQL0UQw4eWzMLF1enK
cDxrY/IqOMO00Tn0/lYJMfE1VTyH2aEsOEe2VjhQfZoDV94JLBDv/eHCddM=
-----END CERTIFICATE-----