Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c29f50-e559-4037-8e36-e46a7b1d6699.roa
File:                     75c29f50-e559-4037-8e36-e46a7b1d6699.roa (raw, json)
Hash identifier:          FPDRjao2wWSYBSp3LKgLBp3SClYkr3PJbhCk3QPrj4I=
Subject key identifier:   86:E5:19:CA:09:B4:E6:EF:3F:13:EE:DD:C0:9E:BB:AA:D5:36:00:E0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49670614FC9CCFA5AD9F42AE2BB33C05E54608DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c29f50-e559-4037-8e36-e46a7b1d6699.roa
Signing time:             Mon 20 Oct 2025 04:50:05 +0000
ROA not before:           Mon 20 Oct 2025 04:50:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:67:06:14:fc:9c:cf:a5:ad:9f:42:ae:2b:b3:3c:05:e5:46:08:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:50:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=216491bae39e2ae6273935dc1a4c2ef7a61508033c58c6dba43fda5426388f55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:09:7c:7d:45:a7:03:15:a9:14:cc:bc:01:
                    d6:f9:d2:bc:16:ac:4e:8c:84:05:b5:bf:86:2b:cb:
                    be:fb:45:74:b7:31:93:d6:3c:2f:2a:a5:80:70:0d:
                    b0:42:a7:f9:ee:91:b8:c7:cd:4c:2d:4c:28:9f:b7:
                    a8:a2:71:19:d6:ca:c5:7e:6b:20:86:b3:15:b4:71:
                    d9:44:d2:ae:1e:c7:30:97:fe:16:25:25:62:9a:b1:
                    99:ee:c4:5f:60:e3:b6:c6:73:89:cc:cc:8b:81:40:
                    a5:1f:bf:dc:dc:34:b8:23:97:0c:e6:ef:5a:3b:a9:
                    9f:d2:98:7a:5a:57:68:4b:d2:7e:7e:34:a5:4c:6e:
                    32:8b:65:b3:7c:85:e6:5d:fb:88:de:73:98:57:75:
                    c9:a0:ad:b8:b2:53:74:85:56:70:c5:a1:39:d7:77:
                    85:4d:ca:0e:7d:2d:8d:2d:fe:36:a2:cb:a2:bb:bc:
                    23:d4:84:05:bc:3d:3d:24:c9:bf:96:cb:c2:c0:23:
                    8a:fd:8b:05:09:d1:a1:e5:b1:84:26:42:66:f0:20:
                    95:33:7d:f3:94:a2:57:4c:25:22:30:4e:43:b8:13:
                    5f:d1:5c:ca:fc:ba:63:33:df:cc:d5:0d:4f:9c:81:
                    bf:31:64:49:b7:70:65:66:a0:a1:c5:f6:69:2f:f3:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:19:CA:09:B4:E6:EF:3F:13:EE:DD:C0:9E:BB:AA:D5:36:00:E0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75c29f50-e559-4037-8e36-e46a7b1d6699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:63:ae:20:6a:90:4d:f3:eb:13:80:f8:62:09:6c:2b:e6:5f:
         c4:dc:81:59:c0:cb:e4:d3:41:ac:9c:a7:8d:a3:dd:5f:50:25:
         d9:c4:32:0d:b7:d1:e6:23:ef:8e:b0:8e:f0:b0:cc:63:a6:2d:
         0c:a6:04:e7:b8:df:ac:84:30:03:64:18:c5:e2:60:81:73:2e:
         6b:31:b8:dc:20:9d:68:98:b9:10:6c:23:02:28:14:6a:6f:21:
         19:6f:1a:50:f1:3c:35:e9:36:1a:40:6d:34:ed:0a:49:f8:f9:
         06:50:5a:3b:ef:a3:94:2a:5c:74:33:4b:66:2b:3a:76:5e:04:
         3b:85:b1:ce:67:9c:70:70:18:2d:da:a6:46:a0:19:6c:1d:66:
         af:97:ab:fe:29:82:4b:c8:1c:97:1a:ee:a5:62:b3:78:32:12:
         21:7b:a5:c3:b7:fa:99:5b:24:02:a8:81:c8:8b:24:75:46:22:
         35:ef:f1:81:40:98:63:af:3f:2a:35:3a:8c:81:0f:f9:87:ef:
         c3:92:b3:55:15:ad:fc:7a:51:be:d1:ee:34:6a:a9:37:4a:3b:
         23:ab:0a:71:d2:80:3e:0d:1d:cc:13:bb:e9:d8:26:ec:08:2e:
         6d:99:1b:f6:f7:ba:bd:a7:4d:17:67:52:5e:05:11:4b:62:95:
         6b:7c:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----