Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935cf1a8-362f-48de-9d08-291124712ff7.roa
File:                     935cf1a8-362f-48de-9d08-291124712ff7.roa (raw, json)
Hash identifier:          I2oJYDbBkJD0xpNUTckO/KlUYl+Rfod9XPxsNZswjkE=
Subject key identifier:   B2:A6:37:A3:E2:6D:6E:C6:1A:13:C0:43:37:40:C1:B4:37:FF:10:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EE41366A63E7DDC6CD226AE8BBA0153216C8971
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935cf1a8-362f-48de-9d08-291124712ff7.roa
Signing time:             Mon 20 Oct 2025 00:31:50 +0000
ROA not before:           Mon 20 Oct 2025 00:31:50 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:13:66:a6:3e:7d:dc:6c:d2:26:ae:8b:ba:01:53:21:6c:89:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:31:50 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=6d20c7723780e04f22162e079a7499f7a9edb5fa9291e708f85ef4a5dd62a2d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:bc:8a:95:9c:6b:a1:b4:14:67:ea:48:71:
                    5a:62:d8:1e:c0:01:f5:5a:26:27:85:9a:cf:e1:3e:
                    91:f6:be:27:84:21:82:94:01:87:ca:76:45:a9:fa:
                    01:25:7c:f0:e8:c0:80:13:35:73:4b:d3:97:9b:fa:
                    37:f2:fc:5b:6d:1a:95:f6:dd:a0:2e:33:e3:e8:7f:
                    3e:d9:07:d5:a8:22:8d:65:ee:68:0a:ef:9f:5f:72:
                    ae:27:5d:50:5c:de:ac:b2:92:a5:a6:bc:56:53:22:
                    5b:1b:8e:50:79:63:6c:00:4a:15:c0:86:13:66:83:
                    87:36:14:e5:2e:8a:5a:ef:ce:fa:1f:ac:5d:e9:c7:
                    b5:54:3b:cb:47:df:66:b3:d9:68:9f:21:8e:06:41:
                    2e:8c:28:1f:2e:da:5a:3f:08:8e:fd:6b:3f:00:25:
                    b3:96:cf:2d:64:30:28:52:2b:1d:a0:98:32:1a:a8:
                    5e:c7:14:c4:84:43:df:5b:de:c5:6e:bf:b6:5f:57:
                    cb:81:92:fe:25:c7:23:70:5a:27:09:23:7c:61:78:
                    4d:27:d1:af:7d:20:44:3c:1a:16:b7:0c:b4:00:ae:
                    0c:19:1d:1b:dd:a4:9f:48:30:d6:79:66:a1:2c:60:
                    04:11:b7:e4:21:96:7a:7e:da:a5:05:6d:66:a3:4d:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:37:A3:E2:6D:6E:C6:1A:13:C0:43:37:40:C1:B4:37:FF:10:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935cf1a8-362f-48de-9d08-291124712ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:76:06:cf:ba:e3:fa:f4:e6:fe:c5:d5:32:44:25:08:1b:2f:
         57:4d:a3:f9:ad:c8:fe:6c:0d:b5:ff:52:5e:07:45:0a:45:8c:
         6d:86:5c:a8:2d:7e:44:e5:32:b9:13:8f:63:85:cf:26:36:37:
         08:28:07:ea:8b:ad:e8:16:c1:40:58:48:8c:be:7a:04:dd:69:
         d7:c7:79:2a:de:67:b0:1a:fa:35:05:55:e7:ba:b1:1a:3d:b2:
         3d:93:62:97:5b:03:0c:43:3b:1a:01:06:88:c5:03:8e:ad:cc:
         c8:82:48:b6:fc:78:27:2c:6d:56:e1:73:e9:2a:b2:69:de:25:
         56:1a:57:c4:3b:93:10:19:27:fd:ba:79:c3:30:6e:e3:87:0f:
         8c:0f:f6:27:1c:db:71:8c:84:e5:2f:9b:2b:a1:b4:15:bd:d6:
         1f:8c:e4:a5:9a:50:23:bb:76:6e:6b:74:dc:24:75:77:91:00:
         a6:f1:5f:dd:83:80:7c:fe:f6:7f:c6:36:5c:0d:0c:0d:70:9d:
         c2:32:b3:f4:b7:c2:23:a9:9f:68:61:c6:23:47:9f:cb:2c:8d:
         8b:ad:28:d8:7d:66:f5:5b:43:1b:20:29:e7:18:b1:c0:aa:c9:
         e8:aa:51:57:53:9b:50:d0:59:47:6c:f7:64:e9:be:4d:aa:00:
         24:b3:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----