Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70361fe0-d764-4d19-9bca-a8d97e919ec0.roa
File:                     70361fe0-d764-4d19-9bca-a8d97e919ec0.roa (raw, json)
Hash identifier:          t5xvyhWa+P8c7V46zBN2QpxlXK7Q45DNY581kbrsuMA=
Subject key identifier:   32:60:04:9B:AC:4F:EF:16:68:7A:EB:9F:92:E2:3D:71:B6:A8:EE:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       139E1AB311DF64073587FA63D188A853475B0793
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70361fe0-d764-4d19-9bca-a8d97e919ec0.roa
Signing time:             Mon 20 Oct 2025 02:51:02 +0000
ROA not before:           Mon 20 Oct 2025 02:51:02 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9e:1a:b3:11:df:64:07:35:87:fa:63:d1:88:a8:53:47:5b:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:51:02 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2e0dc7152cc0479f27143f0b950a070861974aabb29a89887fa927a194fcfb5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:55:d9:0c:2a:18:ca:c0:01:3b:58:02:b4:
                    95:fa:b9:41:46:a0:a1:24:9e:19:ad:f2:a8:b1:a1:
                    88:c0:4f:46:4f:f2:9e:7c:d2:e6:95:85:56:b9:ef:
                    10:ff:5e:6c:59:a0:ee:e2:6d:1d:39:ab:33:b5:b6:
                    8b:8e:67:c0:7e:14:8d:ab:87:0c:96:c0:f3:c5:f6:
                    b0:0a:c8:6d:54:5b:15:aa:21:e7:39:55:0a:d5:fd:
                    dc:05:12:c7:bf:0a:6a:13:84:59:1e:37:17:d5:3c:
                    3c:75:19:6d:c8:ce:58:2e:81:6e:f1:a9:da:a7:4d:
                    a9:5f:28:f5:38:90:31:b7:f1:62:e6:82:f0:64:1f:
                    1b:31:ea:c1:d8:59:df:80:c0:c7:fe:82:ca:6c:dd:
                    33:6b:58:ea:6f:3b:ee:c9:ba:80:10:c9:92:f7:fa:
                    5b:ff:f5:c9:88:01:e0:a1:99:97:fa:5a:18:96:c0:
                    cf:b9:80:b6:b9:60:d7:31:65:16:f1:47:40:b0:0c:
                    41:d1:9a:71:e6:fa:d5:b5:c4:50:dc:65:49:60:3f:
                    d0:f0:5c:04:bc:c3:c1:7c:7f:08:40:db:70:b2:9a:
                    79:ba:7b:5d:f9:1e:b6:05:55:20:9d:c3:2f:fa:29:
                    bc:69:b5:92:f1:c5:6e:44:56:96:8f:6f:ca:63:7a:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:04:9B:AC:4F:EF:16:68:7A:EB:9F:92:E2:3D:71:B6:A8:EE:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70361fe0-d764-4d19-9bca-a8d97e919ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:90:7c:ec:89:e5:da:e4:ca:f9:2a:32:40:61:1f:06:82:
         1f:3a:6b:92:47:8b:f9:07:bf:c5:d0:1d:f9:c1:b7:a8:9d:db:
         f3:c3:35:39:1b:d2:9b:03:06:e9:2a:15:8f:d3:47:a5:f2:26:
         c3:24:e2:2a:98:58:b8:6b:33:0c:d8:e2:14:da:d0:d2:d0:1a:
         f5:6f:d5:f9:3b:75:8c:f2:cf:5e:6a:73:1d:6c:5a:96:ab:c0:
         52:84:4f:fb:25:c6:c1:41:48:20:3d:6c:9c:87:b3:0a:bc:1d:
         4a:1c:ae:24:5c:46:a9:57:0b:6c:e0:53:95:f9:c6:fd:be:fd:
         99:76:ac:d9:a4:b3:b9:7c:1b:ed:9b:b8:12:07:62:74:49:19:
         31:d3:88:ea:85:30:ca:2d:c5:21:ea:fa:4b:fa:ad:da:a4:5a:
         fa:0d:36:dc:2b:29:68:a5:3d:bc:16:e0:ed:5b:a9:62:db:96:
         75:b3:6c:d5:2b:b8:f5:3c:b6:19:88:50:fd:14:36:ea:34:be:
         a3:da:a0:97:05:42:49:ca:a0:da:fb:78:ab:c6:0d:84:98:eb:
         b4:f6:84:0f:8a:45:b3:c4:85:13:88:f3:7d:d3:0f:8b:04:e1:
         27:a1:6a:20:64:b8:41:f7:82:fe:63:fc:ca:a4:49:7a:24:e7:
         db:a6:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----