Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdefff46-8f4d-4893-9732-c6901cca2662.roa
File:                     cdefff46-8f4d-4893-9732-c6901cca2662.roa (raw, json)
Hash identifier:          5NcyDOjvY8CniieJIEiw1JDdH3qnNXyYegHve3w8xVU=
Subject key identifier:   8F:85:48:2F:A5:B4:C4:C9:C4:8F:A3:AC:1A:10:5B:38:E1:78:F0:82
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1014E480FBE5934901DD5555DFD4E9D4084AE0E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdefff46-8f4d-4893-9732-c6901cca2662.roa
Signing time:             Mon 20 Oct 2025 05:21:26 +0000
ROA not before:           Mon 20 Oct 2025 05:21:26 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:14:e4:80:fb:e5:93:49:01:dd:55:55:df:d4:e9:d4:08:4a:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:21:26 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=7337ee4a151da54d18a573aa852dc056229fdf131bac3db751d318fa0f51635f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:ef:c0:9c:21:4b:1e:31:9c:02:c8:80:01:
                    24:42:55:47:62:a8:2f:4c:69:96:b1:0c:52:5b:e0:
                    c1:18:73:bf:2b:90:bc:0d:9e:d1:e0:bb:9e:5e:2a:
                    65:67:d3:05:23:a5:bb:d8:4f:a3:38:87:45:54:5e:
                    76:e7:6b:3a:ed:e6:c3:ca:3b:97:23:17:f7:41:d6:
                    6e:eb:fd:9b:65:8f:78:c6:57:a7:5f:79:f7:50:47:
                    e9:04:b7:30:4f:2b:5f:55:2e:b3:11:3e:7c:61:40:
                    36:5d:b9:ce:fa:42:a3:6e:2b:ef:ce:07:55:0e:c3:
                    8a:cc:c4:3a:d3:6d:c5:2e:83:ab:bd:ef:c1:fa:4d:
                    30:d1:58:98:2b:f6:9a:a3:c7:11:58:5d:f7:30:f8:
                    71:a8:a0:7c:19:c3:7c:a7:27:de:1c:d2:32:bf:35:
                    ee:9a:94:1f:53:c4:ba:f9:fa:47:c5:4b:90:df:e3:
                    33:6a:3d:0d:ee:cd:a0:eb:a0:8e:e4:f1:e8:80:24:
                    07:19:ab:7d:5e:7e:8e:e6:3b:9f:af:61:d5:8c:b0:
                    8b:ae:8f:db:aa:69:51:ff:db:b4:39:90:b7:cf:23:
                    8c:c4:32:cd:af:70:cc:f2:f7:d2:e4:1a:ce:df:cf:
                    be:11:fd:65:33:0c:91:7e:e3:f9:2a:9f:e1:33:69:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:85:48:2F:A5:B4:C4:C9:C4:8F:A3:AC:1A:10:5B:38:E1:78:F0:82
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdefff46-8f4d-4893-9732-c6901cca2662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:74:9e:8c:d2:7e:90:36:ef:8a:4c:4c:56:70:e4:20:e4:dc:
         ac:41:7c:5f:0f:a7:49:8d:2e:0f:ea:f7:fa:fe:3f:75:b0:ef:
         16:36:4f:8a:1f:85:5e:7c:4b:5f:32:e0:a5:15:52:80:94:fa:
         83:00:1e:89:e9:3a:24:9a:01:64:c1:6a:83:a4:56:ed:9f:97:
         72:0d:d7:f4:ee:ee:6a:39:9b:9d:4c:d8:ec:44:96:a5:5c:ec:
         aa:67:e9:be:e3:e6:be:09:a5:05:34:97:80:99:4b:e9:9d:34:
         5c:25:fb:f9:8b:a4:85:34:93:6e:af:d7:b0:c9:7a:35:09:b2:
         f0:3b:e8:d6:8b:23:86:9f:92:4c:6b:4a:40:59:21:2c:96:29:
         ed:42:d0:a6:d2:ac:9a:b2:b2:af:80:95:8d:db:30:d7:df:1f:
         14:90:6f:ce:f2:4d:a9:d2:81:e5:46:42:5e:82:39:07:f4:1f:
         80:fe:21:40:3b:80:ae:a7:df:1b:aa:b6:7b:65:f4:48:88:df:
         8c:40:84:b1:47:87:3a:da:50:20:ab:9b:4d:11:a7:75:c6:12:
         0b:11:dc:ed:7a:cf:b2:c7:77:03:01:2b:cc:c4:d6:26:d7:2d:
         bf:7e:01:8a:bd:59:19:63:a0:8b:15:e7:fa:1d:97:9b:90:1e:
         7a:cb:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----