Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433e9de6-1d7d-41b8-94bb-bd40aa8f3914.roa
File:                     433e9de6-1d7d-41b8-94bb-bd40aa8f3914.roa (raw, json)
Hash identifier:          qz2yAEuIJyG5fzanpT/iK1tz+uzyWqUwPtBfleG5Y/s=
Subject key identifier:   0F:7F:DE:75:77:D2:A6:58:1B:AE:76:CE:B3:17:22:A0:EF:EF:52:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       377F2D8ABC8A0203F04389CC4053B53C5597C2BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433e9de6-1d7d-41b8-94bb-bd40aa8f3914.roa
Signing time:             Mon 20 Oct 2025 03:42:25 +0000
ROA not before:           Mon 20 Oct 2025 03:42:25 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7f:2d:8a:bc:8a:02:03:f0:43:89:cc:40:53:b5:3c:55:97:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:42:25 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9834cdbe6df894250ae8e0ac2200ac54fb4edf2adf73c7a7cc9e6041548ad94e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:54:c0:5d:7b:ce:b2:09:76:8d:31:01:a6:
                    58:84:d3:c0:bb:4c:ab:c3:b2:9c:f6:ca:c2:3c:79:
                    c7:06:31:97:6b:ce:27:f6:51:70:35:cf:df:d9:a3:
                    d7:90:35:d6:d7:16:0a:76:d8:8b:c3:ec:56:c9:cf:
                    87:81:71:68:c3:79:52:dd:74:fd:83:f9:91:61:c9:
                    23:a4:e5:33:8b:10:e5:f2:dd:c0:84:73:2d:44:af:
                    1f:77:0c:33:44:36:fa:1b:db:56:33:5c:db:bc:7e:
                    bb:db:f0:59:d6:98:81:80:f9:47:88:a2:5c:c4:8b:
                    a0:6e:c7:a3:c9:1c:7e:14:fa:39:03:47:11:eb:4e:
                    f4:42:03:45:73:f8:87:3d:fb:87:d6:b2:67:f1:1f:
                    91:dd:0e:5d:89:1a:bb:5f:ba:d1:14:89:01:61:71:
                    bc:a8:38:4c:1c:94:0c:7b:77:b3:63:d5:3f:c5:34:
                    9a:39:5d:58:35:7f:84:31:99:e0:f5:df:66:d3:07:
                    eb:e0:65:36:ba:33:a3:16:e9:76:44:22:68:27:07:
                    df:26:c4:ce:d8:c8:fd:76:5d:f0:25:0f:ed:a1:ae:
                    db:49:4d:1d:c7:0c:d5:6f:e8:ca:65:2d:f0:2d:d1:
                    cb:2b:1b:94:6a:14:8a:bb:0f:47:78:26:8d:8e:72:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7F:DE:75:77:D2:A6:58:1B:AE:76:CE:B3:17:22:A0:EF:EF:52:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/433e9de6-1d7d-41b8-94bb-bd40aa8f3914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:da:12:98:d1:7a:89:14:10:53:82:30:47:a1:f9:cd:48:
         c1:05:53:7c:c0:5f:3e:5d:4f:c6:6b:99:ec:42:0b:41:7d:db:
         b0:7c:cd:00:97:0a:4f:a2:4a:e6:2f:c1:16:4d:e1:bf:13:16:
         db:9a:e7:a9:d9:77:c1:56:90:1d:a6:fd:76:79:5e:32:65:fe:
         74:60:88:b8:42:eb:23:f0:82:94:8c:12:08:f4:c9:43:ce:73:
         8e:14:31:36:96:14:a4:11:41:36:8f:7b:d9:a1:41:88:67:09:
         7f:8a:86:29:a9:4e:9d:52:e4:c8:d6:c9:f7:a3:a0:58:e2:ed:
         11:f9:e2:d2:a2:6c:b2:2a:f9:b1:c0:cb:67:bf:c0:38:77:e5:
         f5:3e:93:6c:8e:92:63:1b:07:06:34:74:76:93:f3:dd:ce:86:
         e7:dc:50:30:3f:3e:36:02:57:ae:5d:92:8d:be:b9:aa:a3:8e:
         1a:7e:7e:e3:31:9f:3a:51:cf:56:1b:ef:0a:80:15:c6:62:60:
         9d:2e:6f:0d:98:3c:b8:bb:ab:36:eb:af:c9:93:cf:3e:e9:1b:
         96:f9:44:39:23:ba:8f:df:a2:7e:92:6c:75:5b:38:14:b2:88:
         46:ac:63:18:21:6d:b5:ab:14:89:99:ca:47:9d:e9:bd:e7:da:
         2a:00:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----