Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9987431c-bfb7-47a5-b5fc-d7a5de4e0212.roa
File:                     9987431c-bfb7-47a5-b5fc-d7a5de4e0212.roa (raw, json)
Hash identifier:          ExDU+YQKrpARUchDx4FSEtJb9cWhwESTFk3x4qFInh8=
Subject key identifier:   9A:BB:30:6B:DB:AF:A9:C0:AD:1A:97:7C:4A:41:E1:EA:1B:9A:6D:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CDD2323C8430BF6F311CA1E766181C975822D43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9987431c-bfb7-47a5-b5fc-d7a5de4e0212.roa
Signing time:             Mon 20 Oct 2025 06:01:00 +0000
ROA not before:           Mon 20 Oct 2025 06:01:00 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.168.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dd:23:23:c8:43:0b:f6:f3:11:ca:1e:76:61:81:c9:75:82:2d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:01:00 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0491d05bd0af04b16063398143e1844af22682e091ace1c55b9bbaa87ec8659d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:bd:70:2a:65:22:9b:49:7b:5d:6f:42:be:
                    1f:c6:df:08:6e:0a:7d:8f:cd:7f:30:6c:c1:82:f8:
                    fa:8e:53:59:12:02:88:14:6d:ae:05:30:73:5d:5d:
                    57:71:54:be:0b:39:4e:47:69:a6:a5:a1:69:29:ad:
                    77:b1:b2:43:bd:10:13:18:57:07:0a:3c:ab:7a:33:
                    30:d6:d4:71:e2:43:af:88:95:af:94:3a:47:af:ce:
                    96:f8:48:90:0b:82:5c:24:b7:e2:bb:ed:14:ef:c2:
                    7e:98:07:1d:4e:56:33:38:50:9d:ec:53:ab:29:a2:
                    2e:1d:8b:55:16:ca:d8:c4:1d:cd:8d:27:b9:e5:51:
                    2e:00:c0:24:19:3b:8c:f6:ef:7b:1e:a3:78:82:6e:
                    f2:97:57:8f:50:a7:c5:47:4c:95:77:8b:4a:74:2c:
                    fb:71:e4:45:04:d5:4f:b0:fc:e6:1c:71:3e:e6:56:
                    46:29:54:fc:12:23:ae:38:5f:08:9a:bb:68:14:4d:
                    34:49:fe:03:53:4d:35:a3:c5:af:68:ff:6d:d3:bd:
                    bd:7f:d4:9a:bd:dc:30:2f:85:69:81:4a:fe:8c:27:
                    fc:cf:90:ad:d4:eb:b3:e2:f7:8c:20:51:45:39:c4:
                    37:75:9b:02:0e:a5:56:07:9e:9b:50:45:a5:16:10:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BB:30:6B:DB:AF:A9:C0:AD:1A:97:7C:4A:41:E1:EA:1B:9A:6D:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9987431c-bfb7-47a5-b5fc-d7a5de4e0212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:2a:68:e1:8d:89:18:31:11:e9:13:fa:f2:ab:6a:10:e1:
         35:94:5d:01:53:9d:dd:a6:f8:e4:0a:e2:74:0a:71:bb:7b:1e:
         ae:67:86:e9:82:34:42:3d:30:fc:92:da:91:76:7f:75:e5:d8:
         4e:18:44:09:46:3b:43:28:a3:ad:57:e4:39:74:ae:e3:77:57:
         64:1b:29:96:8e:fa:f9:08:7b:4f:24:f2:fc:ea:a9:ae:e5:d7:
         7d:61:a7:99:d6:71:50:b6:cc:8e:b5:3c:f3:28:87:14:88:87:
         fd:70:8c:68:a5:1a:8a:ac:70:95:de:43:7c:7c:57:91:ab:ce:
         60:ee:0c:70:fc:3b:33:b5:0c:62:42:73:66:d4:5f:ab:58:a7:
         bf:2c:97:48:bd:ba:7c:8a:99:d0:2c:e7:89:72:41:8c:18:85:
         9e:8b:b7:49:16:56:f5:2a:9d:2a:6e:35:76:16:5d:bc:c7:2c:
         fd:4a:3e:88:43:a4:17:76:83:bc:3e:94:29:02:dd:36:36:da:
         e3:dd:e3:64:3f:2b:ed:8f:38:3d:45:8e:70:57:0e:3b:9f:d6:
         71:f0:2c:1d:66:03:73:bd:91:87:a3:5e:bb:36:93:4c:5e:cf:
         d5:81:a0:f2:32:15:f3:3c:1b:6f:6b:9e:00:c0:04:32:61:a4:
         8b:f2:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----