Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0f2b4b-e872-4865-88b7-b98e8bda3e62.roa
File:                     6c0f2b4b-e872-4865-88b7-b98e8bda3e62.roa (raw, json)
Hash identifier:          yyWMpT4KbbJt+J3+++ifWhf8ZlewQZh+J2+XKexUX5o=
Subject key identifier:   33:F4:2D:52:64:EA:5B:C9:A4:8F:A3:AE:34:3B:46:B4:F9:E9:E7:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C66C7489BB838A292A71866A4777E592AAFD845
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0f2b4b-e872-4865-88b7-b98e8bda3e62.roa
Signing time:             Mon 20 Oct 2025 04:50:03 +0000
ROA not before:           Mon 20 Oct 2025 04:50:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:66:c7:48:9b:b8:38:a2:92:a7:18:66:a4:77:7e:59:2a:af:d8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:50:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8217975e53cb9b1ce3c10f91ce36416196afb4696187ffe86eab4a9890d98a1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:9d:2f:b0:4a:1f:e0:e0:ac:b7:71:d3:df:
                    75:a1:ba:f6:69:c4:e1:39:78:74:15:28:f1:50:cd:
                    2c:18:cb:4c:56:4e:3c:14:18:06:08:fd:fe:70:c0:
                    bf:e5:53:51:55:20:19:6b:0e:4c:14:d5:7e:7f:a7:
                    c4:cb:48:a5:d8:b7:f2:b4:b3:06:60:c1:74:58:b8:
                    66:10:40:32:50:db:90:9a:f4:ec:fb:de:87:95:30:
                    75:86:b8:03:d0:7b:ff:5f:4f:8a:b2:a1:40:e0:5b:
                    0e:a4:ea:e9:77:36:1c:60:b9:fa:c0:fa:51:e8:76:
                    4f:75:a3:2a:1c:d1:21:1c:19:a8:a8:ac:75:14:fd:
                    57:06:37:aa:9b:f0:d9:82:93:0c:3b:20:f6:cd:39:
                    45:c2:6b:5d:85:d6:01:26:7a:93:96:32:2d:5f:6c:
                    c6:0d:06:a9:53:c9:f1:6e:58:3f:76:a1:2b:ce:45:
                    2a:47:ca:a8:bc:e2:43:e3:a6:b5:ac:56:31:5b:7b:
                    e3:68:dc:50:b0:01:80:ac:a9:99:32:7c:cc:8b:0c:
                    5d:d8:46:1b:f3:2e:ec:df:21:3b:46:0f:8a:4e:0e:
                    8a:dc:5a:94:3b:3f:55:04:36:cd:ea:6d:16:8c:db:
                    92:78:7c:2e:7d:15:8c:c8:dc:57:47:e9:b9:37:bc:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:2D:52:64:EA:5B:C9:A4:8F:A3:AE:34:3B:46:B4:F9:E9:E7:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0f2b4b-e872-4865-88b7-b98e8bda3e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cd:06:b3:86:7b:33:19:82:3d:48:9d:8c:24:9e:66:ae:7a:79:
         70:47:87:85:c3:30:e1:5c:5a:62:30:e9:da:8f:6d:36:02:1d:
         bd:25:b4:13:ee:7c:0c:f5:33:61:b5:60:ea:49:4a:de:fb:fe:
         72:0a:8c:b8:2e:9a:52:31:6e:d8:a3:b6:de:e7:a7:5d:2e:b4:
         2f:a8:3f:76:cd:bd:13:ba:6a:93:7d:01:62:02:6e:1d:f0:0e:
         e7:46:b9:76:f0:31:40:f0:dd:e4:44:20:c4:c9:71:07:25:4f:
         97:92:25:07:8d:ab:6b:7b:7f:ec:1f:c6:7f:35:84:d1:a3:33:
         dc:08:49:fc:3c:e5:9e:da:4b:d7:20:06:46:85:9a:7d:76:5d:
         93:94:4e:cd:45:e5:e2:7b:5c:b5:e3:49:67:d1:64:c5:03:c6:
         5d:28:9a:50:f6:c4:d0:ee:5f:4d:d2:b2:7f:66:b2:ec:47:1c:
         d9:4a:4f:ec:b6:f1:f8:61:42:a0:d1:4a:d8:07:2d:fd:66:71:
         14:04:b0:da:29:8e:56:75:d0:ba:a9:71:56:70:05:3f:da:47:
         a4:64:d5:66:d1:e0:76:46:0c:29:bf:50:87:0b:cc:97:9b:23:
         56:31:3d:1e:d6:73:da:e9:e2:fd:b3:88:39:18:0d:5b:68:4d:
         2d:bf:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----