Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6553712a-8ba4-46ce-82ec-a66dc7b54614.roa
File:                     6553712a-8ba4-46ce-82ec-a66dc7b54614.roa (raw, json)
Hash identifier:          GRhwnn7TdzEk7iu0ZgRpRSauRkSlA8iPVK3qImI+YkY=
Subject key identifier:   48:CE:B7:F3:70:AD:58:CC:A7:C7:93:9D:EA:81:3E:C4:06:73:81:11
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7109B73E615BA46261DEB634E85025614C003E97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6553712a-8ba4-46ce-82ec-a66dc7b54614.roa
Signing time:             Mon 20 Oct 2025 06:20:05 +0000
ROA not before:           Mon 20 Oct 2025 06:20:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:09:b7:3e:61:5b:a4:62:61:de:b6:34:e8:50:25:61:4c:00:3e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:20:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9e1b374e4db43db0653ba46434f3cbec91542eb597414e006b8653847e0345fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:c6:39:b6:df:86:01:d9:c8:91:bf:5a:d4:
                    bd:ab:79:c9:ba:5e:af:09:ed:d6:d1:a9:4e:f0:91:
                    56:06:4e:61:c0:06:c8:4d:45:1b:30:be:34:ef:f9:
                    15:ee:59:0e:fc:fa:70:d1:bb:b6:b8:bf:f6:d2:65:
                    42:5b:cc:8b:e0:75:38:78:c5:9e:d4:fa:71:7d:61:
                    80:41:f2:9c:e3:bc:8a:5f:13:0d:b6:7b:8c:2e:7f:
                    d6:91:b1:63:9e:34:19:98:84:b4:56:3b:a4:18:ab:
                    37:eb:c8:d1:d1:f8:01:66:0e:4a:66:e7:c7:3d:6e:
                    ce:63:80:42:dc:11:11:e1:46:4e:1b:6f:32:75:b8:
                    06:34:af:a5:e2:86:bc:fa:dc:84:bb:70:1e:9c:ad:
                    05:d4:89:d5:21:86:77:7a:03:e5:e2:d0:83:37:65:
                    92:d7:68:47:34:70:fb:81:71:7f:b6:2b:c5:64:98:
                    42:54:8e:9b:62:3a:34:65:30:de:93:ff:52:d7:71:
                    d9:bc:61:46:b0:a7:24:72:44:9d:78:14:bf:dc:56:
                    a4:a3:fa:ad:b2:86:3b:4d:fe:78:02:e0:54:44:a3:
                    34:3b:f9:73:91:a0:c5:ca:c7:95:34:96:93:48:a5:
                    f5:85:c5:62:e1:13:00:03:a4:22:ac:b2:ca:ba:63:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:B7:F3:70:AD:58:CC:A7:C7:93:9D:EA:81:3E:C4:06:73:81:11
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6553712a-8ba4-46ce-82ec-a66dc7b54614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:54:f2:46:b6:7b:41:cf:8c:1e:f6:f4:f8:7b:3c:a8:c1:
         17:e7:dc:ae:b9:3e:cb:07:05:cd:ab:b9:1d:3f:7e:29:b3:9e:
         d3:4b:15:be:d2:65:98:11:ab:fc:c9:e3:21:6e:00:f9:72:e0:
         ec:54:35:53:b8:0a:75:75:6a:6f:4f:ce:66:3c:6e:12:f1:a4:
         d7:63:12:f4:69:ab:b2:61:c3:f9:4f:0d:03:c9:a0:d7:f2:9f:
         57:29:fc:f0:de:cd:d2:12:3b:01:a0:4c:86:ab:53:4c:bd:90:
         3a:5a:e6:a2:55:fb:8a:6e:36:2a:11:97:bd:36:39:f4:ff:c0:
         56:f7:62:fc:74:fa:fd:1b:8e:f3:7c:b7:3f:e7:b4:9c:ae:0c:
         8f:d8:a5:92:8b:3a:9c:ee:4c:58:7b:a6:48:17:a0:f8:fe:41:
         55:75:78:16:f3:07:a9:79:93:f9:55:b5:e3:b3:60:52:ec:29:
         eb:25:e5:34:f8:86:bd:09:ea:5f:5e:f2:d9:b1:ca:c8:6a:f1:
         76:c8:ab:c0:e7:68:34:39:b8:10:16:1e:18:0d:2c:a4:50:56:
         56:47:2b:1a:a3:d5:68:fa:db:98:23:25:38:6a:76:93:8d:34:
         91:07:5a:97:d7:42:ae:6b:26:e4:d2:03:eb:c7:eb:be:9a:44:
         f3:9d:a4:cb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcQm3PmFbpGJh3rY06FAlYUwAPpcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYyMDA1WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTFiMzc0ZTRkYjQzZGIwNjUzYmE0NjQzNGYzY2JlYzkx
NTQyZWI1OTc0MTRlMDA2Yjg2NTM4NDdlMDM0NWZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXDcY5tt+GAdnIkb9a1L2recm6Xq8J7dbRqU7wkVYGTmHA
BshNRRswvjTv+RXuWQ78+nDRu7a4v/bSZUJbzIvgdTh4xZ7U+nF9YYBB8pzjvIpf
Ew22e4wuf9aRsWOeNBmYhLRWO6QYqzfryNHR+AFmDkpm58c9bs5jgELcERHhRk4b
bzJ1uAY0r6Xihrz63IS7cB6crQXUidUhhnd6A+Xi0IM3ZZLXaEc0cPuBcX+2K8Vk
mEJUjptiOjRlMN6T/1LXcdm8YUawpyRyRJ14FL/cVqSj+q2yhjtN/ngC4FREozQ7
+XORoMXKx5U0lpNIpfWFxWLhEwADpCKsssq6Y9xjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSM6383CtWMynx5Od6oE+xAZzgREwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY1NTM3MTJhLThiYTQtNDZjZS04MmVjLWE2NmRjN2I1NDYxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARsioAwDQYJKoZIhvcNAQELBQADggEBAC2oVPJGtntBz4we9vT4ezyowRfn
3K65PssHBc2ruR0/fimzntNLFb7SZZgRq/zJ4yFuAPly4OxUNVO4CnV1am9PzmY8
bhLxpNdjEvRpq7Jhw/lPDQPJoNfyn1cp/PDezdISOwGgTIarU0y9kDpa5qJV+4pu
NioRl702OfT/wFb3Yvx0+v0bjvN8tz/ntJyuDI/YpZKLOpzuTFh7pkgXoPj+QVV1
eBbzB6l5k/lVteOzYFLsKesl5TT4hr0J6l9e8tmxyshq8XbIq8DnaDQ5uBAWHhgN
LKRQVlZHKxqj1Wj625gjJThqdpONNJEHWpfXQq5rJuTSA+vH676aRPOdpMs=
-----END CERTIFICATE-----