Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7ee1d4-3be7-41d3-96bb-138fefe433ce.roa
File:                     4a7ee1d4-3be7-41d3-96bb-138fefe433ce.roa (raw, json)
Hash identifier:          85CygZCZ7SUzgi4BOapPl74CDQbgvOjWrmqhSVdOwjU=
Subject key identifier:   E9:88:C0:B1:B9:81:F4:05:31:A4:CA:19:D6:48:95:16:AA:FE:2C:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       621F33EBCC30E98C1E73A894EBC73EB66AF00CA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7ee1d4-3be7-41d3-96bb-138fefe433ce.roa
Signing time:             Mon 20 Oct 2025 01:20:46 +0000
ROA not before:           Mon 20 Oct 2025 01:20:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1f:33:eb:cc:30:e9:8c:1e:73:a8:94:eb:c7:3e:b6:6a:f0:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:20:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=74ffb6015db079527aeda01b23eb319f3d79b7fbf06e4086ca5cfa4ac22a374e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:ba:fb:bf:c2:c4:35:d1:f6:9d:b8:bc:6a:
                    26:5d:36:96:ff:37:70:f0:6e:69:dc:da:92:65:2e:
                    90:6f:b6:e3:ef:21:50:53:b6:fa:a2:a7:fe:71:9c:
                    39:bb:03:33:01:54:a3:00:b0:9d:d8:34:ae:de:c6:
                    72:aa:14:bd:2b:9c:ce:19:07:02:7a:69:63:99:c9:
                    57:b8:44:0b:28:09:b6:dc:b5:dc:5a:81:3a:ec:c2:
                    09:6f:f8:fd:95:66:19:c8:e6:dc:67:8c:11:18:ac:
                    62:7f:8c:4b:50:72:c7:0c:dd:13:7e:44:d2:e6:f5:
                    b7:9a:a0:1d:8d:eb:5a:3e:98:30:55:c3:75:ae:16:
                    ec:0f:8f:90:08:cb:99:5f:8d:d6:c9:74:e5:46:8e:
                    dc:91:66:fe:28:83:8d:ba:10:29:25:1c:b3:26:70:
                    7c:de:ed:04:bd:c0:ba:bd:69:16:40:b2:96:76:4a:
                    9f:55:69:32:c5:8f:3b:c7:c6:ed:80:4d:5d:f7:51:
                    0e:81:9d:ab:d6:bb:61:ee:94:5f:e1:63:d5:bf:1b:
                    ec:65:66:bc:f1:12:96:05:7c:ac:c9:44:27:0e:b1:
                    91:ed:37:40:66:b6:4f:f5:e7:ab:fe:f9:9e:cf:db:
                    12:ce:87:53:32:3b:11:1a:8d:ab:65:f0:2f:d2:8d:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:88:C0:B1:B9:81:F4:05:31:A4:CA:19:D6:48:95:16:AA:FE:2C:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7ee1d4-3be7-41d3-96bb-138fefe433ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:ff:fe:77:5d:6b:0b:56:df:2e:11:d0:f0:cf:28:9a:25:
         1b:44:40:58:c9:e6:e1:05:57:2f:ff:db:2d:b3:34:f4:6a:cb:
         53:3d:50:3a:05:13:91:3e:05:fc:54:5d:28:3c:0a:43:46:9c:
         07:06:21:52:dc:8a:e4:31:d1:c7:21:16:88:74:37:18:fc:cc:
         49:59:f5:dd:09:29:b5:90:61:91:ca:b2:b3:83:d4:8d:0d:63:
         ec:b2:7f:e5:58:e1:de:43:35:00:75:07:fa:48:c4:73:80:c2:
         04:a1:b1:1b:c7:a1:92:79:4a:49:38:e6:98:e7:d5:91:08:79:
         57:c6:d0:c2:1c:62:b9:93:58:e0:43:47:c6:5a:89:21:a8:3a:
         79:40:93:f6:ed:98:43:70:bc:db:5a:ed:0b:0b:ea:f6:68:3d:
         df:9e:91:9f:d2:5f:0a:8a:cf:5c:f9:18:37:93:b2:df:8c:4a:
         12:6c:a6:80:27:9b:61:da:86:9c:db:86:54:81:e4:e4:35:ff:
         86:60:24:07:c9:d6:d2:ee:a4:c5:d3:b5:af:f9:1a:a8:ed:5d:
         a8:69:17:09:ac:c3:73:b0:d4:d6:95:a4:70:77:fc:fd:95:1d:
         36:24:66:b2:5f:bf:a5:04:b9:9a:4a:d8:e4:11:f3:9b:e9:75:
         c3:84:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----