Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533990ee-0119-478f-8ffe-44be548e4a31.roa
File:                     533990ee-0119-478f-8ffe-44be548e4a31.roa (raw, json)
Hash identifier:          lsLAa+JMN1k16E7jF8+wlTeQANELdGhNj6WM1hPzqP4=
Subject key identifier:   B0:8D:04:62:B4:7D:0C:20:D1:FD:86:B9:E7:C8:71:B8:CB:49:9D:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75447F7966A07EA817C98C61BEACEFFEF509369A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533990ee-0119-478f-8ffe-44be548e4a31.roa
Signing time:             Sat 18 Oct 2025 00:40:03 +0000
ROA not before:           Sat 18 Oct 2025 00:40:03 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:44:7f:79:66:a0:7e:a8:17:c9:8c:61:be:ac:ef:fe:f5:09:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:40:03 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=722c6cc7a96727373e205fd848f304382559823f104efba29f1165fb62071f1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:f0:ce:0d:2d:f6:2f:8b:b7:24:79:f7:23:
                    3f:b2:35:91:ea:f3:8c:ad:d4:31:33:7e:1f:6d:6b:
                    e9:1f:fc:94:30:b7:b9:9d:b5:9e:71:f8:5b:29:73:
                    df:ae:a5:ac:8f:2a:b9:f5:56:77:78:89:b1:d6:97:
                    27:ef:1c:89:b4:3f:ac:1e:d0:3e:47:23:1b:a9:cd:
                    53:bf:23:cd:2e:6d:cf:66:0e:f3:54:e5:71:f9:9c:
                    bf:c8:55:06:75:af:71:3d:a2:4b:b4:f4:fd:36:d5:
                    3c:d8:67:da:a4:36:c2:ec:63:78:ee:1d:07:81:d1:
                    f4:5c:eb:91:66:02:a2:d2:2d:d9:ca:8d:7b:f3:27:
                    28:f6:35:6a:ba:3f:09:c6:3f:34:bf:77:a2:47:59:
                    d1:0f:42:8f:eb:70:66:de:92:e5:b9:43:e8:9b:eb:
                    8d:33:84:a7:fe:59:92:84:2f:aa:ae:69:22:c3:4f:
                    f3:fc:3f:a3:23:88:27:83:34:71:5e:b8:c6:0c:97:
                    7d:ff:b1:58:a4:94:9f:52:e6:e7:24:10:ed:61:69:
                    41:a3:13:fa:ff:f9:36:5b:69:14:77:67:7e:8b:c2:
                    45:4b:02:db:fa:d8:d7:26:c1:fb:a0:ea:02:5b:06:
                    7a:3c:a4:30:99:b5:cd:50:54:5f:08:14:66:37:90:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:04:62:B4:7D:0C:20:D1:FD:86:B9:E7:C8:71:B8:CB:49:9D:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533990ee-0119-478f-8ffe-44be548e4a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:35:24:4b:ca:ea:30:f1:05:a7:bc:79:a5:ab:d8:e6:e5:
         c5:d6:5f:76:73:ac:a3:7c:31:8d:12:75:e3:d3:93:16:83:b9:
         36:54:3c:bc:51:81:aa:87:27:b7:15:ee:12:65:93:cf:0a:17:
         5c:2f:b1:14:6c:8f:15:67:7d:75:15:c8:3a:5a:69:68:79:a5:
         4a:4e:08:a9:81:69:51:2f:d7:e0:a3:8d:19:53:15:97:ec:19:
         20:0f:5b:29:13:7a:81:87:e6:7c:cd:4f:30:2e:fe:f8:7f:1e:
         02:28:59:ab:24:b5:dc:81:5c:c9:c1:9c:4e:8d:2f:9c:e2:73:
         c6:ef:42:80:71:84:98:f1:bb:10:73:7e:7b:8f:45:ae:43:f2:
         03:ba:61:2e:3d:ea:d2:92:48:38:15:d5:48:f3:dd:a2:b6:4c:
         49:20:75:a6:70:63:8a:08:bc:51:84:7e:11:37:5d:db:29:78:
         05:6a:52:72:bc:0d:a8:64:30:a9:c4:94:a4:24:72:20:ca:87:
         95:42:67:b5:ad:14:41:bf:9d:68:33:47:59:e6:e4:6a:14:0d:
         9a:0a:18:13:16:82:e7:15:cf:ba:e8:cc:a2:23:37:52:5a:c3:
         eb:e9:e7:65:e7:53:f0:43:01:45:b0:6b:bb:12:5c:1c:08:62:
         e3:60:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----