Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b44dfab0-35df-4ce1-a39c-1a591082564a.roa
File:                     b44dfab0-35df-4ce1-a39c-1a591082564a.roa (raw, json)
Hash identifier:          QtWjfcSXBsnF5lyudAUWHpMGA/5q8JI/e89nY75jzV4=
Subject key identifier:   39:A3:94:75:87:2B:42:E7:CB:C0:CD:44:B5:EF:E9:6B:4C:59:F5:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28D1A02C460BB6BF5C25C6C27C65B0125374C01E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b44dfab0-35df-4ce1-a39c-1a591082564a.roa
Signing time:             Mon 20 Oct 2025 03:52:06 +0000
ROA not before:           Mon 20 Oct 2025 03:52:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d1:a0:2c:46:0b:b6:bf:5c:25:c6:c2:7c:65:b0:12:53:74:c0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:52:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9e20bb102db797e19fdec50fa97cfe1524033c38dca59c88ca4466741125483c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:b9:0e:1e:bd:f4:4d:c7:78:53:e5:b3:01:
                    31:e2:9a:94:09:1a:d9:fd:40:46:49:d6:02:a6:18:
                    ad:9d:fc:ae:9d:cf:8c:b2:e6:d4:64:74:93:27:ef:
                    45:4d:d0:6b:26:b6:84:ba:fc:7b:80:de:8a:05:9d:
                    71:d4:86:c6:c4:7b:c2:7b:60:e5:5f:65:fe:28:e5:
                    88:92:a6:ca:ab:91:fd:b9:fd:3c:cb:74:56:ee:80:
                    5d:9a:e0:52:f1:9e:e8:c4:91:b3:ba:ef:22:2e:92:
                    54:15:c7:b8:48:b7:92:21:c1:b8:d6:90:30:f7:8d:
                    42:38:22:38:4e:45:da:14:09:69:c1:b2:a6:dc:ba:
                    7a:fd:b8:54:04:5a:1b:d0:73:28:f8:1c:95:31:29:
                    9f:ec:61:aa:fe:4b:13:b8:a0:f9:3a:80:71:0f:e6:
                    31:68:f2:3d:78:2b:9c:eb:b7:54:67:3c:b8:0d:75:
                    e2:a7:e3:a1:ae:15:6c:ae:f9:4e:43:75:97:c9:4d:
                    27:ca:29:58:5f:6a:1b:24:e9:2c:fa:91:6d:41:53:
                    05:b2:fb:13:76:e3:20:98:4d:34:8e:ea:6b:78:d3:
                    6c:9f:52:af:43:13:d1:0f:86:ae:e3:12:27:ff:6c:
                    cf:8b:a6:62:b1:a8:78:de:c4:c9:0a:71:4e:9a:c4:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A3:94:75:87:2B:42:E7:CB:C0:CD:44:B5:EF:E9:6B:4C:59:F5:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b44dfab0-35df-4ce1-a39c-1a591082564a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:77:55:f3:4e:82:1c:dd:33:fc:58:74:00:dd:8a:aa:c4:
         ac:ca:b0:d7:d3:53:79:b9:62:3e:cc:64:5b:b2:6f:95:8c:de:
         57:19:5c:d7:1c:e5:5f:d8:d1:9d:67:9b:7f:1f:fa:55:93:c8:
         45:f5:43:32:fc:2b:0b:31:9c:d1:7e:c8:40:31:19:b7:a1:89:
         1d:b8:b1:d3:72:ae:2c:17:28:ac:13:df:4e:14:00:ca:82:4d:
         d7:47:3f:2e:8e:52:80:19:db:dd:89:b5:07:10:fb:4b:76:09:
         67:8a:eb:ab:76:21:aa:76:eb:89:43:cb:2e:59:41:2e:ac:3b:
         74:e2:2d:51:67:21:bc:95:9f:e2:fd:23:8b:85:9c:9d:7e:2b:
         35:16:7c:61:11:25:c6:dd:02:4a:6d:80:11:a3:f5:55:82:53:
         a2:08:7b:3a:33:cf:c1:1a:c5:e6:08:6d:a8:36:aa:1b:54:3a:
         11:b9:bb:64:01:0c:07:2d:63:26:f7:44:f9:5e:0f:61:79:57:
         fe:db:66:c3:ef:1a:8e:75:ed:65:55:77:2c:ac:0a:5e:8e:ad:
         a5:56:09:77:39:00:04:e0:7a:ef:e0:ef:47:38:a2:8e:87:e4:
         51:43:a1:4b:32:cd:4e:6a:c8:7f:02:e6:e7:1b:c9:b0:32:07:
         57:3d:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----