Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948fe08f-ed1a-4591-8cd2-b09eb246cd33.roa
File:                     948fe08f-ed1a-4591-8cd2-b09eb246cd33.roa (raw, json)
Hash identifier:          6PsOAn6kUsf7/IGYT3e+/vsCv5dIlCFXzwjZze61/fI=
Subject key identifier:   E8:2B:47:BD:A7:26:69:03:DA:6C:F5:23:2F:E4:4F:2A:B2:7F:F8:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       732C28802ECFB274081467158B68F29FF0A30825
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948fe08f-ed1a-4591-8cd2-b09eb246cd33.roa
Signing time:             Mon 20 Oct 2025 04:11:46 +0000
ROA not before:           Mon 20 Oct 2025 04:11:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:28:80:2e:cf:b2:74:08:14:67:15:8b:68:f2:9f:f0:a3:08:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:11:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=65f50339b57c861ba57f3810091a8fdc383a21f7c5966763cbe55c8db4f00f6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:9c:ac:64:36:f9:0b:41:71:95:17:04:e5:
                    77:65:a7:21:af:7b:34:b1:97:79:32:71:0a:09:bd:
                    56:09:56:62:1a:3c:92:be:3c:09:db:32:42:ec:59:
                    90:88:e6:a5:ea:95:e1:1c:8c:6d:b0:4c:31:48:e7:
                    bd:06:68:19:2f:07:6f:fc:95:02:d2:e7:93:0e:26:
                    1d:58:b5:70:13:45:95:97:47:10:2a:dd:f6:c7:db:
                    36:bd:19:9b:b9:d9:02:68:8a:bd:4e:c8:00:34:ea:
                    70:3b:d4:df:37:14:40:e3:71:e0:6f:c7:b3:93:5d:
                    b8:68:b2:e7:51:c5:1d:77:26:d6:85:3a:ca:6f:89:
                    66:b1:56:19:68:b4:f5:77:6d:b2:8d:85:49:55:ed:
                    87:e1:31:eb:1c:3e:d4:eb:4d:86:a6:38:2e:f9:83:
                    98:b9:7c:71:57:8b:71:fb:b3:e8:10:82:d9:6a:dd:
                    95:d2:6d:14:3b:c6:eb:71:22:2a:68:88:5e:da:1e:
                    ed:aa:41:b7:1b:49:37:f3:bb:4e:08:29:ef:7d:92:
                    f1:f1:2a:b9:7c:22:62:64:85:dd:3a:0c:07:75:e6:
                    29:d2:21:29:a9:1e:bf:52:4c:4d:df:73:e9:f1:ab:
                    9b:f9:55:37:57:81:06:4c:63:e3:78:8d:75:43:d8:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2B:47:BD:A7:26:69:03:DA:6C:F5:23:2F:E4:4F:2A:B2:7F:F8:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948fe08f-ed1a-4591-8cd2-b09eb246cd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:c0:7e:3b:f3:6f:da:bf:d3:b9:52:21:87:3a:a7:89:c0:
         bb:5d:47:5d:f9:22:8f:60:69:cb:2b:b8:4b:19:61:d8:13:bc:
         52:6f:04:6e:9a:61:46:bd:0e:d4:1b:c6:c0:56:1e:a5:81:b0:
         f8:d5:08:95:c7:f9:fd:31:21:77:ac:06:44:2a:b5:d2:18:77:
         ce:c6:8e:c8:f4:eb:73:4e:ff:d0:f5:2c:12:0a:66:e5:ce:75:
         c4:46:50:2c:66:70:bf:05:61:0e:6f:ca:05:4f:49:75:1b:7b:
         8b:45:c4:71:d2:a7:08:fc:0b:d2:36:d2:43:62:65:91:8f:e0:
         fb:65:f1:32:4b:d4:12:16:33:9b:9b:9d:24:94:67:b5:97:bd:
         d8:bb:20:f3:b0:4e:cf:76:ac:3a:a9:e8:73:85:b7:bc:09:80:
         04:3d:a1:fb:48:d1:d5:57:8e:e7:81:20:13:94:f3:5f:8d:5f:
         55:66:2b:bc:48:3a:64:98:c8:51:00:e2:67:86:41:4a:03:b0:
         8c:00:cd:a2:f5:36:a6:fb:a6:b8:07:14:09:bb:cf:8b:77:75:
         75:da:66:4d:c5:d2:53:d7:d3:40:63:2c:0c:7e:c4:5f:d1:80:
         9a:2d:c2:98:d9:8b:d8:fe:c9:5f:2d:60:46:c1:65:ea:14:46:
         89:c8:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----