Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7080048b-d716-4c70-a7f0-09c4e186d83e.roa
File:                     7080048b-d716-4c70-a7f0-09c4e186d83e.roa (raw, json)
Hash identifier:          R9/f8kAMZZBBlTvzuJle6Hue/vZye5I5KiiX5f3tVh0=
Subject key identifier:   DF:92:48:A6:36:EE:1F:05:38:B5:87:9E:2D:A7:4C:B0:2A:F6:A5:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B9CFB86DBADE72883165F70D69D24751D04E827
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7080048b-d716-4c70-a7f0-09c4e186d83e.roa
Signing time:             Mon 20 Oct 2025 05:20:04 +0000
ROA not before:           Mon 20 Oct 2025 05:20:04 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9c:fb:86:db:ad:e7:28:83:16:5f:70:d6:9d:24:75:1d:04:e8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:20:04 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=6a4d4422794c544ba4f93b09120d5a17aff806c5de63f9eb65bcc4f10a782f84, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:00:b2:be:ad:99:84:89:bc:5c:58:a7:51:
                    43:1b:ee:93:4f:f4:29:d9:a1:10:c4:dd:a3:be:7d:
                    3b:46:a6:be:e2:e2:fe:07:ca:9c:72:85:75:75:55:
                    d2:9b:56:28:1c:75:e6:2f:5e:01:53:a7:bc:6f:1f:
                    37:35:cc:b1:be:96:22:50:18:75:dd:1d:26:5d:eb:
                    41:d2:40:97:7b:ae:de:51:e1:f4:a1:11:55:f7:0a:
                    27:f8:28:2c:a8:5c:11:14:7b:da:a0:cb:d8:60:5a:
                    4c:ed:35:fd:17:a3:7a:38:1a:cd:9c:58:bd:67:9a:
                    75:88:f7:d4:9b:15:fa:fd:cc:a9:2c:67:0d:b8:8d:
                    96:14:8f:48:c7:57:8c:73:91:c4:f1:9e:0a:54:28:
                    c9:de:e0:0d:25:df:02:87:ee:8a:41:6e:bd:ad:86:
                    14:c5:32:4e:be:2f:2a:52:05:2b:95:9e:66:9c:d7:
                    35:37:08:3d:24:70:3b:2c:3f:d7:dd:fc:d5:20:02:
                    72:06:35:12:33:df:f5:81:2f:b1:7a:c1:3c:74:fb:
                    0c:4c:e8:5a:89:7d:9f:2d:45:c0:a1:9b:19:0a:33:
                    3e:51:91:37:f1:b1:7d:b7:ab:db:83:1b:2d:28:a3:
                    96:64:c3:c8:5e:98:da:cb:59:67:51:0d:9f:d3:88:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:48:A6:36:EE:1F:05:38:B5:87:9E:2D:A7:4C:B0:2A:F6:A5:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7080048b-d716-4c70-a7f0-09c4e186d83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:02:54:2b:54:d0:52:bd:b9:75:88:11:a3:6f:4d:f4:98:e9:
         4b:2f:81:c5:aa:f5:15:78:d2:70:d3:d4:03:90:16:47:17:50:
         9e:51:a3:91:5e:09:a0:73:5b:fd:7a:e2:74:32:99:c4:de:e6:
         b3:90:6d:5f:0f:93:e9:5c:5c:b9:76:d1:57:ab:31:d7:30:9a:
         0f:f0:aa:88:40:41:69:a2:90:25:cf:cd:19:33:60:f1:f6:70:
         60:34:2e:53:7a:df:c8:bc:a2:b0:43:ca:b7:51:c4:41:5c:3f:
         8e:52:c4:e7:f4:b1:75:31:eb:71:46:ac:7c:4a:6e:27:8a:42:
         bc:5d:14:08:bf:c0:8e:29:a5:ab:7b:7d:91:84:8c:8a:2c:a1:
         e7:f6:d8:7a:93:c2:66:72:e5:d4:11:bb:4e:41:fa:0a:6a:4b:
         94:6a:ab:27:d2:8f:28:a1:bc:33:f3:da:69:d7:fe:74:6f:f9:
         6f:01:b9:bc:4d:b9:d4:7c:39:27:6d:2f:8b:51:c4:3c:8c:80:
         36:4c:61:48:ed:dd:1a:9e:75:97:2a:4d:68:ad:98:c6:9a:92:
         ae:28:7d:14:1d:3f:4b:bc:dd:e0:bc:ac:57:f2:0e:b5:74:8d:
         ea:93:36:be:75:80:3d:76:64:65:d0:a9:0b:c2:d4:62:dc:ee:
         47:11:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----