Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb69215c-2a93-4518-b63d-e5249567b3e4.roa
File:                     cb69215c-2a93-4518-b63d-e5249567b3e4.roa (raw, json)
Hash identifier:          uHTQMRG1jYOs8EqQCw3P3URIKuL85zAA2vsQnuOVfVA=
Subject key identifier:   72:E2:8F:95:E4:9E:74:13:DE:B9:79:E2:F7:DB:02:4A:96:C9:A3:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C960B248BD6FE5685F61B13C00DCD7B23293906
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb69215c-2a93-4518-b63d-e5249567b3e4.roa
Signing time:             Sun 19 Oct 2025 01:10:04 +0000
ROA not before:           Sun 19 Oct 2025 01:10:04 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:96:0b:24:8b:d6:fe:56:85:f6:1b:13:c0:0d:cd:7b:23:29:39:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:10:04 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=91a95f76431d7693f089965e41d47656794e72f3073daaa258df5b7b5f8dfac1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:0f:17:f7:d8:fa:b8:6b:b5:80:d5:85:fe:
                    bd:93:7f:15:d8:26:ba:16:3c:dd:65:78:fe:05:dd:
                    6c:df:61:8b:44:8f:ed:9a:1e:cd:a7:6e:f5:70:15:
                    17:25:d0:e9:b1:5b:c1:a2:db:ea:83:d0:73:8e:76:
                    b9:66:80:9a:19:dd:2c:95:2d:27:65:f8:cd:ee:eb:
                    d8:d2:02:c0:48:f2:28:0e:65:8c:a6:38:69:af:73:
                    a1:66:54:4b:28:9c:be:27:82:56:5a:5a:c6:e9:53:
                    49:cc:43:f8:99:cc:12:34:7c:d5:c9:20:3c:0b:d8:
                    64:46:cd:39:04:ae:2e:ab:93:9d:80:62:0c:ea:02:
                    32:7a:ad:02:c7:17:d7:a4:0c:a7:52:49:d6:b0:58:
                    42:ae:b5:b8:71:a0:0d:d3:84:13:3b:a5:5e:08:76:
                    ef:45:09:6f:86:5e:2b:21:03:6c:82:01:a0:54:db:
                    e6:8a:db:40:67:fa:e0:f0:98:7e:e7:3a:13:4f:f3:
                    bd:64:21:d2:99:41:f6:bc:9c:72:c7:56:0d:f4:59:
                    f2:a4:eb:78:e4:0a:ce:7a:f2:b1:2a:9b:ca:4d:14:
                    f7:a7:d2:35:af:c6:be:30:c0:a0:7b:bc:74:87:da:
                    22:62:90:7b:4d:d1:90:8b:46:7f:bb:aa:1d:e3:33:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E2:8F:95:E4:9E:74:13:DE:B9:79:E2:F7:DB:02:4A:96:C9:A3:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb69215c-2a93-4518-b63d-e5249567b3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:a3:c8:9a:fc:53:c6:90:11:7d:f3:77:e9:7d:36:47:9c:02:
         2a:90:78:e4:54:67:a2:85:dc:bc:a7:41:bc:b6:22:86:cc:b9:
         a1:c0:af:e1:27:1b:a2:d2:18:22:24:ac:ef:4f:d7:c1:62:d4:
         c7:e5:6c:90:d1:e6:6e:43:4b:14:9a:d5:b0:57:fd:fc:fd:7b:
         94:04:4b:76:de:a9:7c:22:62:ce:3e:1f:bd:1d:03:06:e0:8f:
         f8:01:0a:c9:76:32:4f:2d:f2:44:ee:03:36:3b:30:d6:36:74:
         d5:f0:6a:6f:b2:dd:8d:0b:35:e7:87:6c:3b:73:f3:72:20:27:
         fc:7c:54:a1:0f:7b:91:6e:49:6f:ef:b9:03:d6:8c:16:c9:c7:
         2f:00:8e:68:4b:03:86:22:1b:f1:34:93:68:7f:0e:dd:7c:7f:
         87:15:f9:50:8a:8a:3c:84:ef:47:27:b1:4a:b5:56:83:db:6d:
         4e:fb:70:68:ff:f1:6f:65:cb:59:35:b9:23:97:d8:cf:85:d0:
         d1:c8:7c:5a:ba:76:13:fd:c0:e2:0f:86:46:b9:bd:20:9f:c0:
         00:52:f3:d3:60:f3:4d:c5:fc:f8:24:aa:0b:fa:06:62:e1:8f:
         1f:8d:d3:7f:fa:bc:bb:0e:0d:15:12:21:84:c5:73:11:5a:cb:
         59:94:15:3c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULJYLJIvW/laF9hsTwA3NeyMpOQYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDExMDA0WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MWE5NWY3NjQzMWQ3NjkzZjA4OTk2NWU0MWQ0NzY1Njc5
NGU3MmYzMDczZGFhYTI1OGRmNWI3YjVmOGRmYWMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7Rw8X99j6uGu1gNWF/r2TfxXYJroWPN1leP4F3WzfYYtE
j+2aHs2nbvVwFRcl0OmxW8Gi2+qD0HOOdrlmgJoZ3SyVLSdl+M3u69jSAsBI8igO
ZYymOGmvc6FmVEsonL4nglZaWsbpU0nMQ/iZzBI0fNXJIDwL2GRGzTkEri6rk52A
YgzqAjJ6rQLHF9ekDKdSSdawWEKutbhxoA3ThBM7pV4Idu9FCW+GXishA2yCAaBU
2+aK20Bn+uDwmH7nOhNP871kIdKZQfa8nHLHVg30WfKk63jkCs568rEqm8pNFPen
0jWvxr4wwKB7vHSH2iJikHtN0ZCLRn+7qh3jM3dnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcuKPleSedBPeuXni99sCSpbJo+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiNjkyMTVjLTJhOTMtNDUxOC1iNjNkLWU1MjQ5NTY3YjNlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsihcwDQYJKoZIhvcNAQELBQADggEBANijyJr8U8aQEX3zd+l9NkecAiqQ
eORUZ6KF3LynQby2IobMuaHAr+EnG6LSGCIkrO9P18Fi1MflbJDR5m5DSxSa1bBX
/fz9e5QES3beqXwiYs4+H70dAwbgj/gBCsl2Mk8t8kTuAzY7MNY2dNXwam+y3Y0L
NeeHbDtz83IgJ/x8VKEPe5FuSW/vuQPWjBbJxy8AjmhLA4YiG/E0k2h/Dt18f4cV
+VCKijyE70cnsUq1VoPbbU77cGj/8W9ly1k1uSOX2M+F0NHIfFq6dhP9wOIPhka5
vSCfwABS89Ng803F/Pgkqgv6BmLhjx+N03/6vLsODRUSIYTFcxFay1mUFTw=
-----END CERTIFICATE-----