Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd182824-2d2e-4574-a732-6db8a6a4a02e.roa
File:                     bd182824-2d2e-4574-a732-6db8a6a4a02e.roa (raw, json)
Hash identifier:          v+h2ZMSHit0nJFLSK/I4/0KnJFzdDWcZwI+2yY2Ay2g=
Subject key identifier:   81:5A:38:20:29:60:8C:51:F1:44:36:48:8E:E3:A4:76:79:FD:0A:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D21F0F8B7BEC209F0F376441A65F3678F3E6C16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd182824-2d2e-4574-a732-6db8a6a4a02e.roa
Signing time:             Mon 20 Oct 2025 02:22:12 +0000
ROA not before:           Mon 20 Oct 2025 02:22:12 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:21:f0:f8:b7:be:c2:09:f0:f3:76:44:1a:65:f3:67:8f:3e:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:22:12 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=1082e8e3bb9c7aacc74001e5b62e0336250bb75aaf627259a56e25b8a4782dcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:5f:0b:b2:13:56:a6:13:85:d9:34:ec:7a:
                    69:30:fc:8a:b6:06:10:72:39:75:6a:58:a5:98:de:
                    be:c8:67:e5:7c:05:fb:23:4e:be:15:5e:6e:6b:31:
                    26:df:92:a3:48:32:cb:d1:ab:5c:3b:7d:74:1d:fb:
                    4c:44:b3:74:6f:f2:cb:7a:e8:9d:18:92:b7:50:b6:
                    42:85:51:ff:53:ea:e6:14:43:97:70:fd:81:22:12:
                    2e:82:21:de:8b:3c:bb:0b:56:6e:6d:46:10:9e:6c:
                    dc:2b:57:05:d6:53:d0:51:1e:11:a5:d4:a6:ae:01:
                    d2:af:f9:ed:3a:75:e2:51:97:9e:aa:3b:73:06:bf:
                    4b:aa:e1:f5:f9:9a:f1:25:6b:9e:f3:2d:e5:e1:5b:
                    ac:fd:ff:80:a1:e0:d2:7a:09:ad:9b:15:c2:9d:52:
                    73:77:7f:a1:7e:9d:ef:2b:31:90:d7:df:34:2b:fa:
                    9c:0b:36:77:34:22:f9:f8:25:4d:2f:a5:49:cb:cb:
                    12:df:cc:d6:f6:9b:be:08:f6:95:b8:45:3a:ef:32:
                    83:85:97:22:83:b1:7d:c3:3d:e8:c1:b1:d5:2f:47:
                    f8:f2:2a:e5:1b:95:5f:31:f0:0a:33:8f:34:d2:0e:
                    26:cc:f5:6a:54:bc:e6:46:d4:bf:f6:dc:53:7f:50:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5A:38:20:29:60:8C:51:F1:44:36:48:8E:E3:A4:76:79:FD:0A:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd182824-2d2e-4574-a732-6db8a6a4a02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:f6:d5:76:0f:77:fc:23:d0:e8:c0:be:1b:7d:b7:15:07:
         d1:0c:09:64:9e:61:f8:ab:3f:b4:fa:20:cc:d0:65:fb:94:21:
         69:71:ad:c0:31:39:0b:bb:64:d7:b8:72:04:f0:5f:f8:a1:1b:
         e0:68:a1:d0:e8:92:ae:40:5b:32:2f:a0:9c:d1:dc:42:23:63:
         2d:ac:8f:0b:9c:ae:70:8e:22:f7:9d:8f:c8:bb:e6:7c:33:cf:
         f5:ad:b8:b9:dc:d7:a8:91:c8:2f:94:2b:d4:b4:4e:02:cb:00:
         9a:a9:a7:7a:fd:90:86:2f:68:93:a9:45:29:0a:4c:a3:5e:85:
         aa:ff:cf:2e:ea:e0:15:b6:cd:11:bd:f3:57:7b:4e:94:7a:07:
         96:e4:f7:0b:8b:16:f4:a1:aa:9b:9e:87:91:0f:ba:66:77:c6:
         31:d8:e9:33:a4:90:57:81:97:ea:5b:b5:2d:02:18:7b:ab:9c:
         37:89:7e:72:47:43:f9:be:d1:bc:b5:6e:1b:a7:4f:f9:01:cc:
         80:b8:1d:f3:2e:15:bf:c4:9a:37:bb:36:28:29:93:ea:87:c9:
         c1:47:83:76:0d:3a:36:4c:5d:89:3d:f3:91:d5:d2:03:f0:56:
         e2:05:cc:cd:6d:5b:a5:85:10:1b:86:c1:75:84:0d:27:b2:dc:
         1b:20:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----