Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2436ef-34cd-42f2-b8ae-ad7ee1d7ef5b.roa
File:                     8e2436ef-34cd-42f2-b8ae-ad7ee1d7ef5b.roa (raw, json)
Hash identifier:          EpTfcHmCGP9DKzfVFX8iQi/oI4VbhZqMcpkUnatIcgg=
Subject key identifier:   54:16:4A:FA:D4:DC:40:CA:FC:A8:8F:9E:CD:8B:B1:88:68:E1:8F:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       207DD72F20D7FD96ACF9EEAD70ADA4AF166BB401
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2436ef-34cd-42f2-b8ae-ad7ee1d7ef5b.roa
Signing time:             Sun 19 Oct 2025 03:11:38 +0000
ROA not before:           Sun 19 Oct 2025 03:11:38 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7d:d7:2f:20:d7:fd:96:ac:f9:ee:ad:70:ad:a4:af:16:6b:b4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:11:38 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=a984739fe9da45a0b3a47577fc2533a88f51a37b1dbac31ea32edb78308bb2e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:3b:36:b3:73:05:fd:43:08:a4:2e:aa:0a:
                    6d:af:d7:66:1f:98:fc:6a:ca:6b:a6:23:37:e9:10:
                    25:07:b1:70:f2:75:ff:d2:08:3d:dd:ca:11:b1:59:
                    21:d0:5b:88:53:f7:26:93:1e:19:64:0b:b8:48:98:
                    70:b7:bd:e4:a9:df:31:97:67:2e:27:d8:76:69:d3:
                    48:e7:91:8c:4b:23:b2:7d:77:fa:ec:30:92:85:3c:
                    7a:9a:fa:3c:b2:42:af:08:dd:f4:5f:ca:03:05:a0:
                    49:e4:9a:79:87:0c:5e:53:f3:28:41:7a:73:9d:4d:
                    18:41:65:37:c9:69:d1:83:cd:11:3d:8f:2c:66:a5:
                    b2:f4:7b:84:06:4a:8b:81:26:2b:e1:22:e3:ad:97:
                    cc:02:58:22:1e:dc:c2:13:51:00:b1:e9:41:d8:2f:
                    90:41:1b:d7:e3:e2:1c:85:50:4e:1b:e0:7d:1f:d4:
                    2b:12:b5:d2:23:d0:7f:70:2d:07:32:c9:86:db:86:
                    6b:8e:49:0d:bf:15:19:5d:9b:93:c0:4b:68:14:a7:
                    56:7e:b7:d7:4c:d1:f3:cb:ff:0e:9c:4c:0b:70:96:
                    d7:55:2c:a1:0e:59:77:d5:c1:03:8b:87:7c:97:06:
                    bf:be:61:b6:a6:53:0d:fd:06:f3:80:56:8d:59:8e:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:16:4A:FA:D4:DC:40:CA:FC:A8:8F:9E:CD:8B:B1:88:68:E1:8F:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e2436ef-34cd-42f2-b8ae-ad7ee1d7ef5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:ad:fb:71:7b:2d:b4:2d:7b:f6:87:0a:e9:b9:87:22:af:
         2b:6b:ed:3e:2a:b7:4f:42:12:2a:3d:bb:8e:fb:32:7b:db:8c:
         e9:ea:fd:f3:95:26:22:34:26:55:3f:42:46:7a:76:bb:eb:d4:
         2d:83:dc:fc:b1:be:31:50:a3:dd:ff:43:9b:32:9b:e8:f1:08:
         18:54:d2:b9:79:f3:48:f7:53:5a:5d:fa:83:6e:bd:81:c5:00:
         07:fa:ba:31:d1:bd:ee:d0:d6:64:20:23:83:17:89:e8:c5:77:
         1b:a4:7f:bf:ad:bd:51:95:02:c5:15:d6:0e:66:35:db:23:68:
         dc:26:58:fe:84:cb:1e:a7:61:3f:89:55:0f:23:19:91:3e:60:
         64:d9:14:ec:f7:af:48:9a:81:00:59:57:2e:f4:48:3c:70:16:
         b3:70:24:ec:27:e8:9a:1d:ec:a6:84:12:f6:1e:07:35:b3:2b:
         df:75:2f:f1:6d:0b:84:26:0f:f9:24:56:d3:f7:9a:98:40:83:
         fa:63:cf:3b:ee:04:3b:b2:4d:f5:58:3e:68:25:03:76:13:1f:
         37:fd:47:f5:e7:35:9e:9b:7d:b6:f7:93:a6:aa:4b:8d:97:3e:
         6f:7c:75:9e:9f:cd:e5:72:88:09:27:59:1f:6a:24:d8:89:95:
         f3:26:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----