Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b816ba-0e73-4fef-99ec-f01a5beee838.roa
File:                     61b816ba-0e73-4fef-99ec-f01a5beee838.roa (raw, json)
Hash identifier:          W56lxByqQbiS/PGj60TnC61Gp25sEv45zFAtrmMOiuY=
Subject key identifier:   9D:22:FE:68:2F:18:63:07:F3:F2:33:BA:89:FF:70:C0:65:13:EF:AB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       766F96EC92D60E90EDBD5E0917A45C39BF9CE559
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b816ba-0e73-4fef-99ec-f01a5beee838.roa
Signing time:             Mon 20 Oct 2025 05:01:43 +0000
ROA not before:           Mon 20 Oct 2025 05:01:43 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6f:96:ec:92:d6:0e:90:ed:bd:5e:09:17:a4:5c:39:bf:9c:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:01:43 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2f303017195ae6dde60ba888139fd56941502098bcd2839b48229cfa1868780d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:fa:9a:d5:78:9e:52:0e:6a:7b:11:9c:09:
                    58:2b:24:6d:d8:0b:12:bf:ce:0c:dd:50:d9:9d:84:
                    1c:27:8d:2c:3c:dd:5b:37:ca:22:e8:4f:70:99:e7:
                    ef:ba:91:7d:9c:54:66:fb:3f:2e:42:81:36:ad:87:
                    d3:86:f6:e6:79:18:f0:5b:6f:de:2f:5f:bd:98:33:
                    15:d6:d1:1d:6c:df:b0:e8:33:9f:15:f5:f5:1e:23:
                    cc:a3:51:33:ba:9a:21:a0:ca:76:02:a6:9e:d0:05:
                    73:80:04:a3:b7:9c:bc:d1:a0:96:2f:4a:54:58:0c:
                    21:6d:3f:96:f1:f2:75:9e:75:bc:b5:52:71:fb:2d:
                    8b:58:57:63:77:6f:19:f5:8d:85:32:39:3c:6e:e6:
                    f9:31:d1:66:ed:4b:87:a6:0e:dd:c2:83:66:1a:66:
                    25:aa:fd:be:d9:b9:fd:50:de:41:93:b3:ab:74:78:
                    69:fc:8d:e6:59:1a:82:1d:b0:41:cc:87:c7:c1:32:
                    58:ca:79:3e:8d:f3:21:96:98:60:13:ef:7e:55:81:
                    98:93:26:48:cd:ce:df:98:0e:20:0a:4d:99:c6:72:
                    70:b7:a2:fd:47:72:00:bb:b3:67:65:de:b2:04:ce:
                    c6:fb:da:0d:da:ed:cc:4d:db:40:e1:23:a3:7c:e8:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:FE:68:2F:18:63:07:F3:F2:33:BA:89:FF:70:C0:65:13:EF:AB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61b816ba-0e73-4fef-99ec-f01a5beee838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:37:1e:e7:87:72:47:fe:b8:75:59:3c:25:95:4d:4e:90:
         47:02:c2:91:7a:3a:4e:cf:9e:74:bc:ec:fe:1b:5f:71:01:29:
         29:49:5d:52:ef:44:68:39:07:4f:5c:ec:71:e7:de:3c:99:d8:
         74:8f:4c:9a:61:b8:f1:b9:31:89:c3:bc:3d:6c:5d:e5:65:e8:
         cb:8f:c6:6c:d7:1b:41:4e:a2:40:d6:fe:ad:e6:13:f7:63:a0:
         30:c6:fe:94:40:36:b9:f5:0c:e4:77:ce:15:6f:a8:83:92:cd:
         94:b9:94:d4:df:15:89:81:d0:17:dd:1f:76:ed:32:b7:55:a0:
         b6:05:74:7f:99:45:67:02:97:0e:0e:e5:d1:a1:99:4e:37:e3:
         0d:bb:01:35:82:15:13:44:bb:5a:bc:a1:6a:52:16:c4:38:db:
         f3:c6:0c:43:e7:04:e2:a5:85:43:96:36:56:4d:39:c7:6c:8a:
         f9:ac:bc:bb:1c:ee:4c:25:04:d6:39:83:0f:cd:da:d8:4e:b0:
         cd:c7:8c:ed:7f:84:0b:65:8b:a8:da:ee:85:da:d8:62:56:e4:
         9f:99:24:1a:39:01:16:c4:37:35:87:63:ef:02:fd:dd:b3:e9:
         b4:f5:31:7b:f6:ac:4f:af:12:c3:08:07:86:b2:78:c3:0a:8c:
         c2:d1:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----