Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b3722c3-9729-4abd-a37d-4d5f4bfd7859.roa
File:                     6b3722c3-9729-4abd-a37d-4d5f4bfd7859.roa (raw, json)
Hash identifier:          pXluJnDh+kRcq+lhEPmPT/Nc/ALlq86Rd0l/pqy8tHc=
Subject key identifier:   37:AC:01:43:86:CA:98:73:07:59:0E:8A:29:23:E4:1B:AA:C0:FE:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1829F6AEC07471571F1BE7E0A98F9C3754404962
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b3722c3-9729-4abd-a37d-4d5f4bfd7859.roa
Signing time:             Mon 20 Oct 2025 05:41:39 +0000
ROA not before:           Mon 20 Oct 2025 05:41:39 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:29:f6:ae:c0:74:71:57:1f:1b:e7:e0:a9:8f:9c:37:54:40:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:41:39 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=326325f26119b69a2a5d3410464359682337f9889b5c75b6c4aaeb5b780a7063, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:a6:ad:36:f2:1f:a1:78:6f:b2:09:43:29:
                    91:86:ab:1f:bc:3e:02:76:d1:74:01:76:6b:66:dc:
                    e5:a6:05:d1:f9:52:ba:b5:e0:9b:3c:20:c6:5d:91:
                    e4:89:55:60:e3:f6:eb:66:24:57:1a:06:e2:36:63:
                    fe:05:07:15:d2:97:87:e8:cf:1d:0a:6d:28:be:3c:
                    38:f3:17:5b:2d:61:29:19:f0:78:84:2b:09:c2:52:
                    5b:17:92:57:37:9e:46:5c:96:aa:9c:16:c9:5a:e0:
                    20:fd:30:91:cb:ce:9c:1c:ac:e9:28:54:2a:77:f9:
                    83:be:b0:6e:3a:14:63:c9:7f:89:a3:21:d0:60:8a:
                    00:af:d0:c8:1b:ff:b2:e7:29:45:67:30:85:0d:31:
                    ba:c4:01:0c:83:4b:6e:63:24:db:cb:f0:29:b5:6f:
                    13:e0:91:20:8a:dc:b9:c3:e2:00:2f:f3:eb:12:49:
                    16:5b:65:66:de:65:77:81:64:3c:2f:e2:a8:1a:de:
                    50:56:b1:f6:bc:95:97:b5:f4:17:ed:5b:3f:da:9e:
                    55:72:3b:2c:49:10:b1:0a:e6:56:b9:fc:aa:2d:5c:
                    b6:1b:da:e5:2c:58:07:8d:ca:fb:19:28:6d:5e:3b:
                    d8:68:dd:c1:94:fc:47:00:3f:d5:7d:23:42:57:ca:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:01:43:86:CA:98:73:07:59:0E:8A:29:23:E4:1B:AA:C0:FE:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b3722c3-9729-4abd-a37d-4d5f4bfd7859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:12:fd:60:a6:5a:77:fb:83:0a:ae:f7:74:cf:5d:77:24:
         ef:2f:0b:de:d3:d1:db:a1:87:61:e3:6a:83:92:62:f7:30:d9:
         42:d8:52:dc:01:ae:2e:3d:dc:b4:ec:1e:fe:8d:69:03:2c:08:
         ea:c4:d7:11:ef:86:21:1d:6a:db:2b:4c:87:b3:80:5a:6e:73:
         47:a4:4d:71:05:e4:21:d8:80:bb:f0:42:c7:4a:05:0b:80:8f:
         d3:f3:b7:8e:85:5e:5d:94:9a:69:48:04:b2:4a:43:b7:b4:30:
         6e:35:d4:58:9f:67:72:66:b6:6a:f2:7d:48:37:a3:00:3e:7b:
         91:26:e4:45:74:64:08:6d:f0:81:16:92:4f:c3:61:42:6c:ee:
         26:fe:9c:5c:7a:2f:b4:d6:79:6c:ee:fd:63:d2:5a:70:4d:c9:
         7e:dc:01:3a:1d:5b:b3:b4:b4:98:9f:52:e8:fa:0b:eb:e9:44:
         ec:26:ca:66:ff:1c:55:8e:65:fd:d9:b2:8b:86:cb:47:52:86:
         3f:5a:17:fd:47:90:a9:a5:70:89:7d:23:6d:b6:d8:67:94:bd:
         ed:19:28:5e:3e:5c:84:c8:1d:11:97:be:bf:2c:44:d5:72:cf:
         d0:b9:5c:9b:b7:d8:8b:30:5a:66:80:c6:5b:b4:ce:bb:d9:2d:
         bc:51:90:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGCn2rsB0cVcfG+fgqY+cN1RASWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDU0MTM5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjYzMjVmMjYxMTliNjlhMmE1ZDM0MTA0NjQzNTk2ODIz
MzdmOTg4OWI1Yzc1YjZjNGFhZWI1Yjc4MGE3MDYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5wqatNvIfoXhvsglDKZGGqx+8PgJ20XQBdmtm3OWmBdH5
Urq14Js8IMZdkeSJVWDj9utmJFcaBuI2Y/4FBxXSl4fozx0KbSi+PDjzF1stYSkZ
8HiEKwnCUlsXklc3nkZclqqcFsla4CD9MJHLzpwcrOkoVCp3+YO+sG46FGPJf4mj
IdBgigCv0Mgb/7LnKUVnMIUNMbrEAQyDS25jJNvL8Cm1bxPgkSCK3LnD4gAv8+sS
SRZbZWbeZXeBZDwv4qga3lBWsfa8lZe19BftWz/anlVyOyxJELEK5la5/KotXLYb
2uUsWAeNyvsZKG1eO9ho3cGU/EcAP9V9I0JXyuSpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUN6wBQ4bKmHMHWQ6KKSPkG6rA/pYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZiMzcyMmMzLTk3MjktNGFiZC1hMzdkLTRkNWY0YmZkNzg1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsnwYwDQYJKoZIhvcNAQELBQADggEBAEwgEv1gplp3+4MKrvd0z113JO8v
C97T0duhh2HjaoOSYvcw2ULYUtwBri493LTsHv6NaQMsCOrE1xHvhiEdatsrTIez
gFpuc0ekTXEF5CHYgLvwQsdKBQuAj9Pzt46FXl2UmmlIBLJKQ7e0MG411FifZ3Jm
tmryfUg3owA+e5Em5EV0ZAht8IEWkk/DYUJs7ib+nFx6L7TWeWzu/WPSWnBNyX7c
ATodW7O0tJifUuj6C+vpROwmymb/HFWOZf3ZsouGy0dShj9aF/1HkKmlcIl9I222
2GeUve0ZKF4+XITIHRGXvr8sRNVyz9C5XJu32IswWmaAxlu0zrvZLbxRkD4=
-----END CERTIFICATE-----