Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa
File:                     65567a94-d95d-47b7-8408-7d05fa62f0ba.roa (raw, json)
Hash identifier:          sHB4GKuqQuoEloGK8vXUNXzNhtd7SsGL3BNh3OOdwUY=
Subject key identifier:   7B:E9:77:67:58:91:4A:F4:FD:81:19:09:DB:E5:8A:CB:34:78:B2:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E32F4F8909DDC1F8C0EEC49585ECFF63D0CAE25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa
Signing time:             Fri 17 Oct 2025 00:39:58 +0000
ROA not before:           Fri 17 Oct 2025 00:39:58 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.137.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:32:f4:f8:90:9d:dc:1f:8c:0e:ec:49:58:5e:cf:f6:3d:0c:ae:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:39:58 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f1e380ee8a28d6368dc07c94827d9e1d05314e80ab069ce961f44267b35f5637, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:a3:32:81:52:79:e9:60:70:62:4f:f5:51:
                    ae:17:03:35:a4:87:dc:e3:3e:78:07:66:9a:95:02:
                    2c:15:49:04:8d:b3:65:77:b2:cb:36:40:0e:fa:ba:
                    80:f8:38:81:03:1d:6c:5e:1c:0b:61:f9:8f:82:6d:
                    2d:16:fc:a8:c1:9c:f0:80:aa:87:e1:de:3a:79:b7:
                    0c:ea:31:75:02:ab:2f:df:66:32:55:3b:9d:9c:6b:
                    68:5c:17:a5:c7:ee:22:17:29:25:39:51:06:51:3a:
                    dc:af:84:7a:43:1f:f9:c9:e7:7c:1e:d5:bb:0a:24:
                    db:af:2e:a9:5a:25:bc:84:95:51:f7:35:c3:05:67:
                    ee:0e:1c:46:23:b6:26:aa:3f:43:d3:49:3b:ab:f6:
                    e7:4e:23:1f:00:58:40:0f:e1:d0:28:62:b2:74:80:
                    d1:53:e8:45:8f:7e:8e:5c:b7:d5:cb:1e:23:9d:f6:
                    96:15:ae:81:66:ee:b8:93:60:50:9e:d5:45:33:14:
                    63:19:74:cd:36:ff:ce:11:2b:3f:3b:a5:53:5b:f5:
                    2b:fb:a6:be:33:dc:1e:37:53:b4:d3:af:ea:0e:e0:
                    f0:d4:11:0e:00:d5:82:3e:8c:03:f2:a3:53:d9:72:
                    68:1d:ad:fc:16:f7:f9:25:bc:d7:15:8d:31:f1:cf:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:77:67:58:91:4A:F4:FD:81:19:09:DB:E5:8A:CB:34:78:B2:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65567a94-d95d-47b7-8408-7d05fa62f0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:b6:64:e9:37:a3:bf:1f:f3:67:54:40:a6:42:f4:55:41:1d:
         20:c8:df:27:f0:29:2f:73:49:55:d0:48:48:4d:d3:bb:a8:4e:
         dc:7b:27:02:63:6d:86:dd:19:0d:7e:61:32:64:01:98:4c:be:
         65:fb:ce:37:f6:9f:fc:bd:a2:4e:3c:16:60:4b:c0:30:e4:47:
         31:1b:60:cb:36:db:da:e0:51:4b:82:e8:8d:c5:1f:cf:9a:74:
         73:a1:e2:12:9a:33:20:0f:20:39:93:f2:94:a4:79:6f:d0:07:
         80:6b:b8:a2:5d:ec:99:21:f1:47:e1:1b:49:66:04:da:fa:12:
         2d:41:c8:97:80:7c:fb:fb:6f:56:4b:ad:00:cf:12:86:f0:af:
         f1:d4:67:5c:8c:d7:41:2f:cb:92:b5:e2:64:f0:9f:81:d8:fc:
         c9:00:f2:8c:cc:7a:b3:45:b9:67:ca:b5:3b:5b:36:ba:21:65:
         8d:e1:91:24:b6:e2:9d:88:69:9f:b4:92:98:7d:05:80:74:26:
         50:74:c7:f5:de:9b:e8:bf:c3:80:23:da:75:62:76:8a:e4:96:
         a6:41:a0:ea:b4:8b:94:45:7f:77:3e:84:87:ee:ea:17:8b:88:
         0d:63:6c:3d:10:dc:3a:a1:d2:3b:e2:4d:ee:39:75:a1:c9:6e:
         97:b5:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----