Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c2d9ff0-1703-4294-a079-83f85dccd8d6.roa
File:                     8c2d9ff0-1703-4294-a079-83f85dccd8d6.roa (raw, json)
Hash identifier:          Qw+eEnMwFt8iXvaW6p30SNi0eJVuXHdBGUq4vtoGuMY=
Subject key identifier:   0F:6F:6D:8B:7F:5E:CA:E1:B8:C3:3E:0E:2C:76:78:38:47:F6:1F:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       410BDEF6B2C94C11728C7654E3C7B1ED54D144EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c2d9ff0-1703-4294-a079-83f85dccd8d6.roa
Signing time:             Mon 20 Oct 2025 02:02:07 +0000
ROA not before:           Mon 20 Oct 2025 02:02:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:de:f6:b2:c9:4c:11:72:8c:76:54:e3:c7:b1:ed:54:d1:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:02:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9c292e4a8b333d13fae7d73700720b7551397b2b35b56ecb8557d63e91a8989f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:e3:2e:5b:ec:75:d4:17:4d:e3:57:c9:fb:
                    d3:92:36:0e:e9:ba:96:52:6e:04:61:86:1c:31:c9:
                    be:40:69:a1:72:cf:40:7b:49:38:2f:af:7c:d1:6f:
                    36:10:67:38:0b:87:62:ee:34:6d:f1:4c:35:a6:79:
                    36:9b:ce:22:21:00:24:f0:10:67:dd:70:34:e4:1f:
                    4e:fd:33:d3:e8:29:d1:8d:76:e5:b5:60:5d:5f:ba:
                    09:a7:d9:fe:d1:c2:47:c8:7d:fc:f1:0b:1b:08:07:
                    7e:d2:91:dd:46:71:78:94:83:a9:7c:4e:17:ba:ef:
                    5e:34:f4:63:81:b8:0d:22:6c:83:08:fa:7c:a8:9e:
                    57:5e:cd:2d:a4:55:05:8e:f2:4b:21:8b:e9:f8:c8:
                    17:e2:4e:d9:8b:86:e5:fa:49:5c:41:30:45:3d:59:
                    f5:6c:09:f7:26:35:76:87:05:2b:63:34:b4:66:cc:
                    97:32:b6:bc:00:d6:57:30:3f:63:75:2e:b3:32:4b:
                    7f:51:1b:0a:86:6c:ac:d2:41:55:fd:97:36:0c:d5:
                    3c:c1:5c:6c:27:8a:38:82:ae:79:d1:93:2e:b4:c4:
                    75:16:de:11:20:b5:d4:5a:44:e0:03:0f:a9:c6:33:
                    38:76:cb:35:51:de:4b:f4:e0:13:2c:2b:e8:f8:c2:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:6D:8B:7F:5E:CA:E1:B8:C3:3E:0E:2C:76:78:38:47:F6:1F:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c2d9ff0-1703-4294-a079-83f85dccd8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:48:e0:4b:20:c2:cf:30:2f:36:de:f1:15:e7:d8:fa:db:
         2d:d4:44:18:d2:31:98:94:af:ba:97:30:26:fd:c6:8d:1c:46:
         a4:9c:30:14:4b:88:b2:93:1d:dd:5c:bb:32:9c:43:90:79:4f:
         84:05:72:f1:48:8a:8a:d7:d7:af:29:1d:ed:03:c3:5c:74:e5:
         ec:74:a6:9c:50:c6:f8:15:c8:88:20:f8:82:18:37:e2:72:ae:
         a9:27:a1:02:70:c4:14:30:b4:e4:63:98:a7:db:11:a2:97:a7:
         da:6d:96:cf:95:02:f0:ef:d6:72:8e:2e:09:fc:3d:e1:a4:ef:
         15:2c:d1:61:d9:24:b9:20:01:55:6d:fa:ff:48:bc:e2:a3:f9:
         01:1f:0a:3e:5b:c8:e8:e8:e9:c9:c6:95:62:a7:8b:c3:1a:5f:
         ec:09:66:b7:32:64:de:23:02:b6:2e:ed:6b:39:33:08:ca:dd:
         c8:d9:13:f6:9d:9b:c2:c8:6b:cd:43:e8:0a:de:36:a7:18:d0:
         88:86:62:35:4e:29:5e:70:d2:38:3e:a0:1e:e6:15:71:94:a8:
         a3:5d:ca:69:b0:b1:de:98:c3:e5:de:e9:78:95:6b:9b:2a:a5:
         17:cf:f7:f3:35:f8:cb:bd:b3:ad:61:0d:f3:c5:13:7a:91:05:
         d3:f1:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----