Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff86c1c-2223-41e4-8bcc-3434e6fb8bca.roa
File:                     8ff86c1c-2223-41e4-8bcc-3434e6fb8bca.roa (raw, json)
Hash identifier:          VHSBZNZgC1VrMBpV6atrFNNpPrWtnWiNYodDmzIMDXs=
Subject key identifier:   35:6F:B5:D5:89:66:39:E4:3B:F3:8B:92:AD:6B:0A:D5:6A:E8:D5:5E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       56A72DA46336CE763EDDC25FD90AC24F7264D4EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff86c1c-2223-41e4-8bcc-3434e6fb8bca.roa
Signing time:             Mon 20 Oct 2025 02:31:43 +0000
ROA not before:           Mon 20 Oct 2025 02:31:43 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a7:2d:a4:63:36:ce:76:3e:dd:c2:5f:d9:0a:c2:4f:72:64:d4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:31:43 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=710257e84a9dd1358e12b0c67d82f5792d1dd4ab0157f6edb4f4fef7c4af1d35, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:05:03:30:38:f3:25:8a:f1:e0:14:c9:0b:
                    d0:77:5c:1f:36:d8:64:ed:1b:72:b5:0b:94:58:d8:
                    9c:e8:11:30:7a:9f:dc:ba:cb:a6:9c:6c:8d:68:6a:
                    79:af:bb:48:20:97:b6:5d:bc:5e:ac:4e:7b:8f:03:
                    d1:03:74:d8:2c:da:47:cf:2b:11:01:f6:2f:a2:4a:
                    8e:de:8f:7a:60:86:4f:59:53:66:6a:81:60:5c:d0:
                    72:0d:1b:3b:ea:b5:c1:11:26:d3:4d:fb:0e:99:cc:
                    a4:30:90:1c:33:e1:96:36:fe:3b:ef:04:f6:9c:4a:
                    df:9e:6e:90:5d:5a:ae:06:30:7a:fb:42:9c:be:30:
                    95:ba:79:c0:fe:4e:e2:2e:17:06:2c:d3:19:88:89:
                    0f:1d:0e:b5:9e:7f:b9:b8:79:fe:cc:2f:5c:b3:8d:
                    ca:78:e5:9a:85:af:ba:88:8b:1d:58:6a:b6:e7:02:
                    48:41:9b:b6:2c:6a:1f:10:2d:bb:9f:04:e6:b9:70:
                    b9:a1:20:bd:39:75:bc:4f:b9:c9:21:a0:20:f8:f9:
                    d9:2e:6b:53:1c:94:7b:23:f2:c6:e0:b2:20:45:61:
                    11:fd:3d:ae:3b:4f:6d:3c:8b:72:9b:d7:e4:93:8f:
                    55:0b:64:e8:f5:65:70:e2:31:bd:45:14:80:f2:d1:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:B5:D5:89:66:39:E4:3B:F3:8B:92:AD:6B:0A:D5:6A:E8:D5:5E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff86c1c-2223-41e4-8bcc-3434e6fb8bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:a8:04:37:99:6c:ca:5d:f8:d2:79:06:62:48:d4:2c:d6:
         d4:ce:1a:0e:35:d7:1f:26:a6:f3:47:5d:d0:28:bd:4e:d3:cf:
         1e:d5:60:6c:f2:2d:9b:bd:61:a7:70:73:ef:c5:e6:a3:fb:fd:
         04:6e:fc:26:a9:db:75:df:6b:36:19:27:0c:19:9d:a9:3d:ad:
         57:98:93:83:25:7a:bc:f4:aa:b0:67:86:10:52:b9:5f:4d:57:
         3c:08:52:87:38:c5:0b:9b:d1:bf:57:f1:5c:e5:73:84:54:fe:
         15:b6:d0:a1:ea:4c:2e:61:13:bf:0b:3b:c3:3a:9c:f0:04:69:
         a1:9a:3f:50:fc:df:a7:d2:f6:ad:44:94:67:e7:92:d7:cc:fd:
         4b:7a:88:49:5f:d6:95:d5:a9:8a:cd:0e:3b:3b:c7:cf:a1:76:
         57:58:10:ae:f2:78:a0:8c:a2:f2:e2:64:76:20:a7:b9:f2:0e:
         5d:aa:b9:f2:bb:5b:73:98:df:7a:62:ea:c2:de:a3:41:42:07:
         1a:c9:67:ec:7b:ae:9d:04:bf:09:d4:1f:0a:3f:b9:43:f7:08:
         05:cb:c8:71:c1:37:29:12:0e:34:06:74:0f:61:0e:34:2b:e0:
         72:a2:f0:9d:74:2c:04:a3:b0:97:f1:32:d4:28:7d:71:2b:3f:
         eb:91:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----