Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa0a4004-2866-446c-8669-e4f1f57768a9.roa
File:                     aa0a4004-2866-446c-8669-e4f1f57768a9.roa (raw, json)
Hash identifier:          3p2/fafXAnIMJ1eX9OSORNoPvgM7qe2J3cCvMmIC288=
Subject key identifier:   A1:EE:9E:89:70:E7:D6:85:6F:87:3E:09:DA:0B:B7:16:2A:2D:8E:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0CBE50E69C18ECA62D738559B29E3C414D3E0342
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa0a4004-2866-446c-8669-e4f1f57768a9.roa
Signing time:             Mon 20 Oct 2025 03:01:35 +0000
ROA not before:           Mon 20 Oct 2025 03:01:35 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:be:50:e6:9c:18:ec:a6:2d:73:85:59:b2:9e:3c:41:4d:3e:03:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:01:35 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4f6dfd6ac358a182daba88428e1052b40536a0067980c2d3d505ef2121ffd861, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:d3:73:96:eb:4e:9b:5d:93:93:46:97:c2:
                    28:52:cf:5a:61:8f:b9:c6:e1:a6:ea:b8:01:1b:b1:
                    72:c8:c9:cb:22:ee:dd:33:fb:05:77:d7:3a:e3:4c:
                    68:0d:4f:42:f8:17:5e:b3:1d:b6:08:28:85:3c:aa:
                    96:2f:84:e3:b6:c1:01:59:e6:7e:b9:93:cf:06:15:
                    e4:d7:2d:55:67:94:8d:97:0a:e7:4d:15:23:87:89:
                    64:59:9b:46:97:f0:02:45:9d:d4:d1:96:71:24:6d:
                    1b:21:fd:2f:aa:9c:ba:65:94:1a:bd:c4:46:b4:ec:
                    5b:d7:06:76:0a:30:fd:52:59:d4:e6:60:6e:21:1f:
                    61:39:93:62:ae:59:4f:7f:18:26:57:08:bd:6f:eb:
                    bd:24:75:a5:ff:f0:de:9e:7c:6e:64:97:80:eb:ca:
                    5a:c2:df:7c:5e:15:5c:73:3f:8e:59:d0:b3:d4:00:
                    ee:8e:0d:b1:04:e0:c0:8b:2b:31:b1:c2:61:fe:ee:
                    91:ad:8e:cd:2d:70:77:cf:10:6a:87:00:1f:d5:a6:
                    dc:9a:0f:5f:d8:36:63:61:c2:9c:f0:0e:26:fc:c6:
                    43:48:a2:f6:4c:6e:b8:82:21:1c:4c:59:ea:6c:75:
                    70:9b:54:6f:79:46:88:b7:74:58:37:12:b9:4d:03:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EE:9E:89:70:E7:D6:85:6F:87:3E:09:DA:0B:B7:16:2A:2D:8E:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa0a4004-2866-446c-8669-e4f1f57768a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d8:85:a2:b6:1c:ee:71:ce:96:93:1f:b5:c6:f6:43:25:86:07:
         e3:ce:6a:cf:f3:d0:cb:92:90:61:a9:17:a4:43:cc:34:6b:b2:
         57:4f:f9:f3:ed:ae:a1:97:e0:7f:45:3a:48:35:ff:ab:52:0c:
         a6:13:2d:76:21:83:a1:d7:e2:08:47:aa:b1:4f:8d:3a:e0:fb:
         b7:3a:ba:c1:85:d0:d1:b1:c7:c4:12:2f:67:38:ef:76:26:60:
         7a:8e:b9:21:8b:33:f4:78:ad:76:39:5d:a6:0c:cc:8e:6d:b7:
         ad:66:88:45:68:bc:df:c1:04:3e:f2:2b:81:fa:62:0b:b3:98:
         6c:cb:6f:a5:c7:68:91:01:d1:e3:c4:91:3d:e6:cc:c6:60:71:
         40:e8:9b:38:1f:d3:71:f2:e9:70:29:11:28:a9:15:99:da:07:
         05:0c:03:4e:a1:8c:b1:13:0d:35:74:80:39:80:e7:7b:6f:a8:
         86:33:78:ea:9b:84:20:76:42:9f:40:f9:e0:ad:b3:e5:c0:8b:
         c4:24:2d:4f:4a:57:db:bb:93:f4:a2:74:22:65:46:6b:2b:11:
         11:f6:33:a5:56:30:0a:ec:ac:6c:65:1a:5c:c6:81:3c:e7:d9:
         f1:d2:f6:80:2d:9d:c5:1e:cf:89:6b:66:aa:3e:bc:1f:e0:aa:
         88:32:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----