Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768424b5-0dec-44b5-9161-b41d967066f2.roa
File:                     768424b5-0dec-44b5-9161-b41d967066f2.roa (raw, json)
Hash identifier:          uZdPK6I1IyOe7UbUTMVT8x05OVabUOsnZYduvEu90+U=
Subject key identifier:   20:05:5C:9A:16:79:48:40:5E:A6:87:5E:5E:62:BC:9D:EA:4B:08:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A08FA2D39D5778D7CD039632DD19ABB8787907C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768424b5-0dec-44b5-9161-b41d967066f2.roa
Signing time:             Sun 19 Oct 2025 03:00:06 +0000
ROA not before:           Sun 19 Oct 2025 03:00:06 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:fa:2d:39:d5:77:8d:7c:d0:39:63:2d:d1:9a:bb:87:87:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:00:06 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=d35cb2d0a2e0c0773f044f69ea2e5b82f7a59dac83f1e53d4860ac2d55dec26b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:0d:18:5e:bf:44:49:e9:6a:3d:eb:8c:0d:
                    c9:ef:ab:ad:84:c1:59:04:6b:78:8b:8a:3b:b4:3a:
                    a5:30:c7:8d:5c:b9:7b:b2:03:ab:66:ab:36:c0:4a:
                    26:3c:62:77:65:da:35:f6:3d:3c:7d:4a:2b:a6:1b:
                    f8:39:77:de:c7:7a:61:2b:86:e4:3d:59:2d:5b:75:
                    e6:57:45:4a:df:21:7f:1e:01:b2:c3:a6:c6:02:70:
                    39:7c:9c:a0:58:a8:04:c3:cf:9a:4f:b3:48:9c:78:
                    f7:03:63:dc:35:34:8d:c3:f8:f7:e1:78:64:39:ca:
                    af:a2:ef:b7:f1:6c:ef:35:2e:27:01:56:93:41:8c:
                    23:bf:83:ef:b3:b0:69:9f:ec:e0:60:8b:56:cc:70:
                    1a:9e:87:51:1f:2e:59:16:6e:86:37:b8:75:2d:25:
                    05:c3:a7:09:8c:b3:95:ac:e1:76:ee:31:3b:8c:98:
                    8c:2f:c9:10:1d:01:36:0d:8e:37:5e:52:18:24:da:
                    88:b8:a9:02:2c:ae:cf:7a:c4:fa:90:5d:87:4f:4d:
                    3d:fd:75:e4:9f:03:5b:8e:c1:e6:48:79:ea:71:69:
                    a9:2d:2e:b4:d9:b0:69:60:3b:38:79:20:06:03:66:
                    76:4e:6b:ef:cd:fe:24:e7:f4:3d:5e:89:e4:b9:1c:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:05:5C:9A:16:79:48:40:5E:A6:87:5E:5E:62:BC:9D:EA:4B:08:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768424b5-0dec-44b5-9161-b41d967066f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:49:7d:34:74:09:48:85:39:f4:3a:ff:dc:4f:d7:9b:a4:52:
         44:c1:fc:dc:14:0e:4f:42:7d:9e:0b:78:d8:11:4d:8f:31:5d:
         0d:a1:b2:72:0d:1d:23:f8:44:8b:f2:bc:39:8a:17:a6:b3:f0:
         19:74:b6:2c:ab:8d:25:4e:53:7f:ac:89:13:d7:88:32:bd:dc:
         82:f1:27:18:b2:9a:5f:73:f2:21:db:d9:b0:23:ac:80:a7:d5:
         7d:16:ec:38:0e:31:71:2d:a4:08:ae:4a:4a:70:02:4c:37:fd:
         81:89:1e:9e:cf:64:f3:1f:b0:8c:81:c2:76:51:5f:67:45:67:
         50:64:fd:fb:5f:c2:52:dd:16:41:ad:ea:f7:a4:0a:be:93:12:
         43:08:60:a0:a9:39:28:17:f7:e3:c4:f6:60:0d:11:23:56:48:
         4a:34:4c:85:f9:e9:7e:8f:62:6b:2e:71:fe:4d:87:be:d0:d7:
         8c:58:c4:88:0d:94:e9:3e:3f:db:6a:52:17:21:16:19:0b:60:
         dd:e3:69:8c:7e:49:06:62:b8:f1:1d:bd:78:6a:5f:d1:3a:74:
         ae:fb:32:f5:61:2d:75:54:8b:1b:7d:cd:48:15:ec:38:b7:a5:
         88:3d:2e:9f:eb:e6:5f:4c:50:14:dc:a2:cb:2f:7c:0c:78:8b:
         70:61:cd:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGgj6LTnVd4180DljLdGau4eHkHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMwMDA2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzVjYjJkMGEyZTBjMDc3M2YwNDRmNjllYTJlNWI4MmY3
YTU5ZGFjODNmMWU1M2Q0ODYwYWMyZDU1ZGVjMjZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkAQ0YXr9ESelqPeuMDcnvq62EwVkEa3iLiju0OqUwx41c
uXuyA6tmqzbASiY8Yndl2jX2PTx9SiumG/g5d97HemErhuQ9WS1bdeZXRUrfIX8e
AbLDpsYCcDl8nKBYqATDz5pPs0icePcDY9w1NI3D+PfheGQ5yq+i77fxbO81LicB
VpNBjCO/g++zsGmf7OBgi1bMcBqeh1EfLlkWboY3uHUtJQXDpwmMs5Ws4XbuMTuM
mIwvyRAdATYNjjdeUhgk2oi4qQIsrs96xPqQXYdPTT39deSfA1uOweZIeepxaakt
LrTZsGlgOzh5IAYDZnZOa+/N/iTn9D1eieS5HP+XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIAVcmhZ5SEBepodeXmK8nepLCGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc2ODQyNGI1LTBkZWMtNDRiNS05MTYxLWI0MWQ5NjcwNjZmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsil4wDQYJKoZIhvcNAQELBQADggEBAM5JfTR0CUiFOfQ6/9xP15ukUkTB
/NwUDk9CfZ4LeNgRTY8xXQ2hsnINHSP4RIvyvDmKF6az8Bl0tiyrjSVOU3+siRPX
iDK93ILxJxiyml9z8iHb2bAjrICn1X0W7DgOMXEtpAiuSkpwAkw3/YGJHp7PZPMf
sIyBwnZRX2dFZ1Bk/ftfwlLdFkGt6vekCr6TEkMIYKCpOSgX9+PE9mANESNWSEo0
TIX56X6PYmsucf5Nh77Q14xYxIgNlOk+P9tqUhchFhkLYN3jaYx+SQZiuPEdvXhq
X9E6dK77MvVhLXVUixt9zUgV7Di3pYg9Lp/r5l9MUBTcossvfAx4i3BhzU0=
-----END CERTIFICATE-----