Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48827e50-cfd1-4f6d-82cc-72ad46eba903.roa
File:                     48827e50-cfd1-4f6d-82cc-72ad46eba903.roa (raw, json)
Hash identifier:          n+q3EGD1bb3HK6H9CzEfiy66i22GZSQztpth5DKnQJw=
Subject key identifier:   8B:60:2C:D1:28:A2:13:F1:5F:03:72:DA:48:BF:BE:48:CD:61:12:B6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F6B6A2BA6CDED443EDE1269E295619A4780F147
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48827e50-cfd1-4f6d-82cc-72ad46eba903.roa
Signing time:             Mon 20 Oct 2025 04:00:07 +0000
ROA not before:           Mon 20 Oct 2025 04:00:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6b:6a:2b:a6:cd:ed:44:3e:de:12:69:e2:95:61:9a:47:80:f1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:00:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9774b7716d01c02ac6c309482880d64ca9813073a2020f9912691fe80d26a88d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:53:56:53:d5:bc:c3:f8:de:a7:4b:23:15:
                    b2:a1:19:f0:75:88:06:ae:01:05:f1:3e:2a:aa:d1:
                    24:a6:96:00:72:9a:37:cd:38:a9:e6:30:5b:9a:5f:
                    1c:3c:95:9f:38:b6:13:4a:59:2a:00:3f:35:6f:f8:
                    56:7c:a8:3c:88:54:1d:56:91:08:b8:56:fa:62:16:
                    b9:54:07:04:42:c5:f3:61:45:41:48:00:fd:87:c0:
                    fa:c9:06:d0:76:7d:33:ed:92:02:28:f3:ee:45:89:
                    83:b8:85:86:e5:71:43:07:c3:cf:c9:b2:ea:a1:e7:
                    bd:f3:c6:71:ef:a2:e9:8f:a2:1a:c0:d2:67:94:3b:
                    90:e8:2f:4a:37:a9:12:22:7f:44:20:95:f5:e8:2a:
                    d6:76:c6:dc:d9:84:a2:54:a0:ea:61:14:bb:bf:ea:
                    2e:a6:9f:36:29:a1:ab:0e:13:2d:2d:0e:6f:d8:ab:
                    c2:51:94:9f:df:4f:fb:6d:86:07:e2:0b:14:1b:23:
                    9c:2c:54:d4:ea:41:40:3a:eb:19:6f:6c:d7:d1:8f:
                    8f:fc:0e:2e:88:d5:5c:41:72:3b:8b:b2:a3:f8:90:
                    f9:8f:f4:dd:0b:12:ae:a0:e2:10:4e:8f:e1:bd:64:
                    8e:32:a9:38:94:d1:b7:64:38:ec:75:22:af:88:dd:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:2C:D1:28:A2:13:F1:5F:03:72:DA:48:BF:BE:48:CD:61:12:B6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48827e50-cfd1-4f6d-82cc-72ad46eba903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:44:29:09:78:10:11:0d:1c:77:78:ea:9f:ac:f7:09:86:
         16:3e:7e:dd:e7:e8:4b:0e:22:9e:54:3f:e1:9b:d4:5a:9b:b1:
         94:37:c7:ec:16:66:1f:a6:d6:ff:ff:c1:da:5a:9e:43:97:44:
         c4:80:5d:5d:83:01:5b:94:cd:a5:a9:81:4a:cd:f6:46:c1:08:
         2b:43:db:90:92:07:67:d3:7f:55:ab:7b:74:7a:a4:90:31:cf:
         83:80:5c:06:16:e1:a6:12:30:c6:8d:a3:46:45:21:d5:e5:e3:
         8c:81:6a:1a:4c:65:ac:4b:f2:c7:08:e0:37:91:bf:f5:f9:18:
         f4:7e:4c:38:7e:f7:6a:c4:8e:79:16:05:ce:dc:bb:31:f2:bf:
         dc:1f:da:f4:4c:10:ab:d3:51:8a:95:67:f6:f0:da:30:04:94:
         35:bc:d2:4b:5c:d8:6d:12:3a:95:6f:ba:be:b8:48:bc:c3:23:
         e5:2b:40:8c:56:0b:b5:5c:7a:09:6b:d3:8c:cc:b1:2f:db:d3:
         ab:3d:0e:35:51:89:db:18:8d:6d:0e:59:77:58:02:0f:ef:8a:
         de:23:9b:87:84:69:17:96:dc:f4:62:4b:ed:17:b1:9b:79:bc:
         6d:c3:14:6c:ac:54:06:f9:a9:20:17:84:30:e0:cb:7b:52:9b:
         f6:6e:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----