Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cff77c4-2b36-4427-8001-d97c5380285f.roa
File:                     6cff77c4-2b36-4427-8001-d97c5380285f.roa (raw, json)
Hash identifier:          hMUjfoZqwyqZITryBU5g5tmzko8xOlDBdYBW+RcAcig=
Subject key identifier:   D7:9B:5D:0C:37:EB:03:46:1E:EC:CA:42:CD:84:B7:CF:63:96:50:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59A188AA914FC73598DC90ACB07170C37C86BB2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cff77c4-2b36-4427-8001-d97c5380285f.roa
Signing time:             Sun 19 Oct 2025 03:12:14 +0000
ROA not before:           Sun 19 Oct 2025 03:12:14 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a1:88:aa:91:4f:c7:35:98:dc:90:ac:b0:71:70:c3:7c:86:bb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:12:14 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=188ed9f8b71e6bfe395391182a2a1ec875275dca1b2e33c651ab2b19ee14be4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:4e:ff:b6:15:77:b7:80:f2:8b:55:5d:34:
                    ad:d4:fa:49:7a:4e:dd:ba:d1:b7:e1:20:c4:87:8a:
                    ad:f2:3a:ce:98:fc:95:77:95:2d:a8:24:25:e3:2d:
                    dc:1f:d7:bf:dc:60:11:df:78:51:6a:6e:ad:6f:fa:
                    aa:af:96:85:dd:a0:a4:ac:1f:8f:01:85:95:48:a4:
                    a5:61:a4:71:a7:2d:91:85:3c:8b:7d:2e:4b:d1:64:
                    49:24:f3:3a:f5:66:e5:06:bf:2f:41:f6:6a:59:ce:
                    43:ac:0f:75:0c:f6:60:99:1c:8c:91:37:2a:cf:28:
                    5a:6d:f3:37:e1:b8:52:b4:30:8b:e2:2f:05:77:13:
                    0e:25:3f:5b:e6:b1:49:ae:8c:82:dd:83:73:31:f0:
                    6a:9e:59:44:e1:a0:f0:7d:b4:a2:d5:51:19:66:2a:
                    db:e4:45:96:c5:54:42:c5:ed:e6:84:d7:fe:09:1c:
                    24:38:81:ed:32:d5:08:11:82:ad:14:2f:0a:a0:a4:
                    6d:40:3f:a6:0f:24:8c:0d:fc:ff:8c:4c:80:b7:5e:
                    09:46:68:c7:46:17:e5:14:ac:52:4b:51:54:c0:60:
                    c7:0f:10:46:12:aa:bf:1d:39:99:67:c1:fe:3e:db:
                    e8:75:20:ca:99:4a:c9:4a:30:4d:7e:a4:59:b8:cb:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:5D:0C:37:EB:03:46:1E:EC:CA:42:CD:84:B7:CF:63:96:50:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6cff77c4-2b36-4427-8001-d97c5380285f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:d9:1c:0f:96:42:86:df:46:ec:0f:17:5f:63:32:2d:65:
         f7:02:ad:fd:dd:7a:b0:e1:6a:42:e1:d9:b3:93:9f:ff:82:74:
         44:fb:18:23:a6:07:23:43:46:b6:50:3e:de:0c:de:7a:12:62:
         72:51:20:d9:24:77:58:e1:34:1f:5b:e1:a0:6c:09:9b:50:a1:
         78:f5:76:29:db:12:18:7d:f1:5d:66:81:99:fd:55:1f:17:9b:
         be:e3:e2:3f:91:11:8a:1e:bb:74:64:34:19:44:46:3c:13:ec:
         4c:9d:2e:58:84:d8:63:8b:fc:b7:63:47:3d:0a:eb:a8:ff:ad:
         24:6a:55:fe:ff:6c:e7:ed:28:d9:51:91:b7:00:6e:39:da:51:
         44:5d:b4:fc:9f:ad:65:11:6b:c2:c7:43:1e:86:3a:bf:49:3d:
         49:c7:1f:3c:1e:c3:9a:d1:c6:66:c5:99:03:e8:0c:61:7c:91:
         4c:34:30:a0:36:c6:a2:7e:aa:b6:42:3b:f8:90:39:22:7c:e2:
         ee:ed:51:e5:22:99:e4:ac:89:a3:12:be:91:55:be:91:0d:a4:
         50:6f:a4:07:42:da:8e:5c:50:5e:02:c0:71:19:5a:1e:df:3c:
         6a:a1:c5:63:79:51:65:4f:68:78:e1:5e:bc:68:a4:b0:da:f8:
         ae:68:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----