Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a5821d-1f38-4d99-a937-56fabc86df9b.roa
File:                     47a5821d-1f38-4d99-a937-56fabc86df9b.roa (raw, json)
Hash identifier:          6wyNBVTWQx0hCZClRfxHezw9CnPtA/pgNScfUV7l6OU=
Subject key identifier:   66:73:B7:A1:00:4C:14:3F:14:06:BB:22:17:D7:07:7E:E7:03:40:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B3E062EE8E018C4954F4B19521AF43F96AC3029
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a5821d-1f38-4d99-a937-56fabc86df9b.roa
Signing time:             Sun 19 Oct 2025 02:01:33 +0000
ROA not before:           Sun 19 Oct 2025 02:01:33 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3e:06:2e:e8:e0:18:c4:95:4f:4b:19:52:1a:f4:3f:96:ac:30:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:01:33 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=1f645b32e44b06c97ac932c6e443b1d42275541be8536825472da5bcabaf576f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:6b:31:dc:e9:71:5b:dc:83:19:ef:26:ac:
                    23:e4:1c:cf:e5:a8:8c:27:86:ee:e3:59:ba:69:3e:
                    a0:64:a4:95:9f:79:b7:5c:9f:f9:e1:66:d2:84:bf:
                    ff:ae:85:ff:9b:e6:e9:61:7d:5a:aa:ce:4e:33:05:
                    8a:b8:79:b8:25:6d:e8:13:07:ea:8e:22:25:e0:ef:
                    2f:7c:d3:ea:b8:b2:7f:ee:00:22:61:44:bf:ac:14:
                    42:e9:37:dc:14:6e:78:54:8b:1b:4c:2d:3e:aa:da:
                    ef:dd:bb:26:37:b0:50:ed:49:55:ba:7b:c8:ff:ab:
                    09:80:80:8a:8b:0a:b2:60:29:20:fa:d6:41:1c:97:
                    ea:92:1c:f0:bf:20:96:fc:47:32:ed:6c:c6:bc:8c:
                    bc:09:30:71:73:91:dd:61:f6:7d:20:89:a6:35:88:
                    1d:d0:c9:42:48:f3:44:36:a6:ac:b0:60:65:12:be:
                    aa:0c:b8:6d:a2:61:22:c1:3e:04:15:1f:5f:de:85:
                    02:c9:07:eb:c9:4b:74:2f:d4:cb:2b:c3:39:15:66:
                    03:8d:41:a2:3d:90:8d:43:4c:77:55:23:61:cf:be:
                    bc:f3:0e:4d:43:f6:5f:1a:74:16:b8:19:d0:3c:ba:
                    a8:4c:8a:8b:88:4d:6b:76:94:a5:e0:55:89:8d:7f:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:B7:A1:00:4C:14:3F:14:06:BB:22:17:D7:07:7E:E7:03:40:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47a5821d-1f38-4d99-a937-56fabc86df9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:7b:cb:21:2c:69:20:df:24:15:4f:a7:fe:d8:b1:8f:71:
         a4:3b:72:08:48:89:e8:75:51:2c:11:96:21:5e:d4:db:56:1b:
         03:ee:44:e5:64:48:29:95:7f:37:43:ba:eb:94:33:38:c8:65:
         c0:99:d8:5b:92:a5:70:c4:ad:35:a2:08:d8:1f:2d:ab:ca:8b:
         23:54:76:7f:92:2c:63:c8:8a:b6:af:ba:5f:62:dd:90:5c:81:
         e4:1f:92:cd:dd:23:fe:41:22:cf:fa:fb:e1:e0:db:18:be:4e:
         bb:2f:f0:2f:c0:4a:00:14:4a:2b:03:b0:99:a2:d1:4b:5e:e6:
         5a:34:bb:d1:d7:43:b7:f4:98:7c:8e:e5:8f:7a:f0:28:28:29:
         94:03:a1:0c:c4:81:ca:13:6e:dc:53:db:f2:c8:52:2c:d9:40:
         e4:6e:18:c6:2b:d9:54:de:b2:ba:b8:73:13:79:b0:23:12:93:
         ad:f5:67:b7:c8:ee:76:7e:67:5e:2f:59:2a:b2:36:80:9f:b5:
         13:b1:d3:cd:de:f8:49:9e:1b:c1:a1:57:ad:72:86:6f:fd:64:
         2b:b7:03:d9:49:47:a4:46:b9:4e:67:0a:29:cb:3a:59:36:51:
         3e:31:e6:ae:25:9a:d8:24:49:7d:f4:b3:2c:c5:05:dd:0c:f7:
         aa:9e:b4:e6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSz4GLujgGMSVT0sZUhr0P5asMCkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIwMTMzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjY0NWIzMmU0NGIwNmM5N2FjOTMyYzZlNDQzYjFkNDIy
NzU1NDFiZTg1MzY4MjU0NzJkYTViY2FiYWY1NzZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkA2sx3OlxW9yDGe8mrCPkHM/lqIwnhu7jWbppPqBkpJWf
ebdcn/nhZtKEv/+uhf+b5ulhfVqqzk4zBYq4ebglbegTB+qOIiXg7y980+q4sn/u
ACJhRL+sFELpN9wUbnhUixtMLT6q2u/duyY3sFDtSVW6e8j/qwmAgIqLCrJgKSD6
1kEcl+qSHPC/IJb8RzLtbMa8jLwJMHFzkd1h9n0giaY1iB3QyUJI80Q2pqywYGUS
vqoMuG2iYSLBPgQVH1/ehQLJB+vJS3Qv1MsrwzkVZgONQaI9kI1DTHdVI2HPvrzz
Dk1D9l8adBa4GdA8uqhMiouITWt2lKXgVYmNf/cNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZnO3oQBMFD8UBrsiF9cHfucDQA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ3YTU4MjFkLTFmMzgtNGQ5OS1hOTM3LTU2ZmFiYzg2ZGY5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsirgwDQYJKoZIhvcNAQELBQADggEBALF4e8shLGkg3yQVT6f+2LGPcaQ7
cghIieh1USwRliFe1NtWGwPuROVkSCmVfzdDuuuUMzjIZcCZ2FuSpXDErTWiCNgf
LavKiyNUdn+SLGPIiravul9i3ZBcgeQfks3dI/5BIs/6++Hg2xi+Trsv8C/ASgAU
SisDsJmi0Ute5lo0u9HXQ7f0mHyO5Y968CgoKZQDoQzEgcoTbtxT2/LIUizZQORu
GMYr2VTesrq4cxN5sCMSk631Z7fI7nZ+Z14vWSqyNoCftROx083e+EmeG8GhV61y
hm/9ZCu3A9lJR6RGuU5nCinLOlk2UT4x5q4lmtgkSX30syzFBd0M96qetOY=
-----END CERTIFICATE-----