Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa
File:                     60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa (raw, json)
Hash identifier:          8aO0UGXx7ZTO0RMWpQ2zFI5z2y2LKf8FMApTnFZ2Nxk=
Subject key identifier:   C3:8B:DA:94:D0:AD:43:47:4E:58:C4:2C:93:F5:AE:D1:D6:56:7A:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F0F01A4C34C4F187D85407A2DF358CFE0571EFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa
Signing time:             Sat 18 Oct 2025 01:21:22 +0000
ROA not before:           Sat 18 Oct 2025 01:21:22 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:01:a4:c3:4c:4f:18:7d:85:40:7a:2d:f3:58:cf:e0:57:1e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 01:21:22 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=0f14c7eb0d29101de9ae15ff52f5483c2fd8259d2b77384626ef46038f12c138, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9b:00:88:6e:02:f8:57:9a:bd:3b:97:8d:c2:
                    1e:c0:17:15:e4:f3:18:5f:55:d1:a4:02:fd:6a:f0:
                    09:9f:85:80:af:88:5f:89:35:02:ed:9e:82:c9:da:
                    ea:52:9e:29:14:2b:9a:1a:35:80:e1:48:66:8f:d4:
                    32:2f:32:05:39:17:63:6c:a1:78:ef:7b:88:05:b7:
                    fa:a7:6f:0c:a5:85:f5:ca:76:d8:0a:05:19:f5:23:
                    24:11:66:b4:1a:7f:43:d7:e1:77:26:d3:81:5c:5e:
                    07:68:78:ff:76:66:d1:e2:33:a5:1b:5f:f9:8c:b2:
                    e1:a3:da:d5:ef:e4:b0:e7:95:3b:2d:28:94:45:d5:
                    6b:19:f6:62:d9:80:41:7b:f2:e4:2d:e1:7b:57:ae:
                    ab:62:fd:07:bb:ba:83:c4:ef:ce:32:d2:5d:8f:c2:
                    8a:cc:a8:73:37:c2:23:d0:ae:62:31:05:df:ee:50:
                    f4:9c:6d:93:a5:63:14:72:70:d5:47:7c:15:f6:81:
                    f0:e6:22:de:87:f7:27:18:cc:57:85:cb:22:6d:a4:
                    7e:f5:f0:61:0c:bd:e6:2f:2b:fa:dc:da:22:e5:d9:
                    c1:df:dc:d8:bf:59:99:79:e5:be:8f:c7:1b:80:4a:
                    12:10:1a:be:93:e4:c6:43:cd:f6:f7:5c:b8:01:b4:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:DA:94:D0:AD:43:47:4E:58:C4:2C:93:F5:AE:D1:D6:56:7A:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60d271b6-3ddb-49a6-b8e0-650dcdf5b49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:74:8a:30:81:48:ba:78:5e:1e:d6:e8:7b:19:7d:25:f1:
         71:f6:c8:2d:9c:8a:bd:8c:25:b8:8a:b2:78:63:5c:9b:a6:44:
         70:e4:df:b2:60:61:b8:2e:9c:f3:d5:e1:a3:5c:f1:64:71:b7:
         b3:3d:9d:27:b6:b4:ac:5b:4f:c6:29:45:86:d8:55:38:c3:29:
         b1:be:94:f5:c8:b9:ef:1c:1f:71:68:64:92:71:37:55:cd:ae:
         7b:20:9f:b4:35:0f:f7:34:87:a6:2a:43:fa:9b:21:03:f7:e3:
         20:68:65:a3:19:4e:b4:cd:dc:a7:d7:01:a3:59:62:6d:27:36:
         5b:85:54:40:a8:53:81:7d:b5:d8:98:5a:cd:d0:bb:cc:92:bc:
         b4:05:af:8a:23:90:52:25:eb:55:5f:de:c0:c4:ef:c0:13:08:
         47:09:b7:60:66:3d:34:f2:0f:3e:f4:1b:79:e8:2f:0f:82:7b:
         d9:7f:49:63:6c:18:98:a1:b4:68:3f:6b:c2:a2:ef:5f:af:71:
         b9:53:ce:e3:fe:a0:e4:f4:c7:9b:7f:7e:cd:7a:f3:68:6f:0e:
         f2:f4:60:4f:96:8c:7d:e6:5a:bb:b4:66:84:32:3d:a6:e2:9c:
         87:cb:99:a5:28:f6:13:26:c6:74:27:01:39:48:bb:64:3e:71:
         bc:b1:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----