Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ae1b9d-d78b-4e4e-af6d-d2e67e22c076.roa
File:                     d3ae1b9d-d78b-4e4e-af6d-d2e67e22c076.roa (raw, json)
Hash identifier:          M4yy+Ibrv2WpxXkyXzhfBW0/Mfj4sxtcwYqipEGq584=
Subject key identifier:   93:5E:B6:F8:DA:57:59:BC:7B:3F:EE:6F:1E:57:4A:CA:81:97:90:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10C99E7F48E4AA91770920A73B2794389F7865E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ae1b9d-d78b-4e4e-af6d-d2e67e22c076.roa
Signing time:             Mon 20 Oct 2025 01:11:07 +0000
ROA not before:           Mon 20 Oct 2025 01:11:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c9:9e:7f:48:e4:aa:91:77:09:20:a7:3b:27:94:38:9f:78:65:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:11:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ddb4cb4d915ee108671a4511c10f16881a8fd41d3df9e959bf881bc3b14214eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:30:70:e8:7f:ca:79:aa:c2:bb:01:38:8d:
                    d0:ef:dd:17:ca:83:88:5d:1d:f1:4c:dd:d4:d3:42:
                    96:b4:79:dc:d2:a8:a5:45:f6:2d:93:27:c8:cb:88:
                    89:c9:3a:3d:e3:a7:91:71:1c:ee:08:5c:8c:b6:af:
                    72:93:02:8e:f4:bf:26:96:74:b8:f8:39:db:0b:99:
                    7a:89:8f:3b:98:9b:62:f5:18:c7:25:12:51:96:79:
                    73:63:bd:e8:e8:ba:97:7c:89:36:76:35:28:fd:6a:
                    93:6f:d9:80:c2:3d:21:20:a6:35:8f:3a:78:1e:17:
                    03:66:06:56:ae:dc:0b:08:81:f1:fa:ae:c8:3f:58:
                    f8:80:1c:3f:f7:bb:43:48:24:d3:a6:11:77:40:5d:
                    43:60:1d:dd:d2:29:6d:3b:98:62:e8:53:af:91:a2:
                    10:de:f2:61:99:17:06:0f:fd:ff:01:68:69:19:10:
                    3e:a6:fb:6f:f3:c8:d5:85:c1:29:a1:10:2f:19:55:
                    14:74:c6:6e:15:e0:df:c8:19:b4:96:4b:db:4e:10:
                    47:51:e7:71:ab:06:c7:6a:73:79:26:6b:a7:a1:c1:
                    a2:7a:af:6a:08:3a:6c:b3:d8:56:13:44:1d:ba:e6:
                    ae:9e:df:97:95:61:c2:54:fc:67:89:ed:04:5f:e8:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:B6:F8:DA:57:59:BC:7B:3F:EE:6F:1E:57:4A:CA:81:97:90:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ae1b9d-d78b-4e4e-af6d-d2e67e22c076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:72:89:cc:59:ac:8e:03:14:5d:ec:c0:5b:08:45:38:87:
         43:65:78:3e:fd:f0:0c:dc:60:6c:40:74:85:e5:44:b8:35:3e:
         bc:77:1f:be:e6:5e:95:9d:42:02:8c:b4:bb:9e:d3:eb:00:67:
         36:6d:47:e1:9c:30:f9:5d:55:b4:46:65:f3:33:bb:7e:0b:d3:
         bc:45:ca:84:95:5c:9f:6c:eb:04:cc:41:25:04:f3:c8:d9:78:
         be:6d:43:53:a6:d3:ce:19:15:b3:86:e0:eb:c6:c4:77:a2:af:
         be:51:0b:0d:64:2e:b1:ce:dd:c6:ce:70:e1:c2:c5:11:d7:e7:
         8d:6e:2f:74:0a:9d:f2:b1:d3:e2:17:dd:03:7a:72:4a:34:dc:
         07:4c:27:09:73:34:ca:52:1d:a2:81:81:24:21:e3:99:16:3d:
         5e:2b:40:67:f7:d6:e2:f6:ba:eb:2d:61:24:3e:69:e7:64:b3:
         a2:51:65:0d:2d:5e:7a:22:e8:34:d6:38:f2:92:ab:00:71:fc:
         d9:79:60:fa:f4:26:f6:07:2e:d0:20:3e:6c:73:08:cf:1f:01:
         bc:09:0b:49:d3:f3:fd:20:fa:a1:71:5e:a2:c8:4d:9f:30:9e:
         0a:25:ed:37:ff:ca:34:44:9c:02:ff:fa:a4:c8:0b:d0:fa:45:
         6c:fa:80:12
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEMmef0jkqpF3CSCnOyeUOJ94ZeQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDExMTA3WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZGI0Y2I0ZDkxNWVlMTA4NjcxYTQ1MTFjMTBmMTY4ODFh
OGZkNDFkM2RmOWU5NTliZjg4MWJjM2IxNDIxNGViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpzjBw6H/KearCuwE4jdDv3RfKg4hdHfFM3dTTQpa0edzS
qKVF9i2TJ8jLiInJOj3jp5FxHO4IXIy2r3KTAo70vyaWdLj4OdsLmXqJjzuYm2L1
GMclElGWeXNjvejoupd8iTZ2NSj9apNv2YDCPSEgpjWPOngeFwNmBlau3AsIgfH6
rsg/WPiAHD/3u0NIJNOmEXdAXUNgHd3SKW07mGLoU6+RohDe8mGZFwYP/f8BaGkZ
ED6m+2/zyNWFwSmhEC8ZVRR0xm4V4N/IGbSWS9tOEEdR53GrBsdqc3kma6ehwaJ6
r2oIOmyz2FYTRB265q6e35eVYcJU/GeJ7QRf6JvRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk162+NpXWbx7P+5vHldKyoGXkPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzYWUxYjlkLWQ3OGItNGU0ZS1hZjZkLWQyZTY3ZTIyYzA3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsi+owDQYJKoZIhvcNAQELBQADggEBADwQconMWayOAxRd7MBbCEU4h0Nl
eD798AzcYGxAdIXlRLg1Prx3H77mXpWdQgKMtLue0+sAZzZtR+GcMPldVbRGZfMz
u34L07xFyoSVXJ9s6wTMQSUE88jZeL5tQ1Om084ZFbOG4OvGxHeir75RCw1kLrHO
3cbOcOHCxRHX541uL3QKnfKx0+IX3QN6cko03AdMJwlzNMpSHaKBgSQh45kWPV4r
QGf31uL2uustYSQ+aedks6JRZQ0tXnoi6DTWOPKSqwBx/Nl5YPr0JvYHLtAgPmxz
CM8fAbwJC0nT8/0g+qFxXqLITZ8wngol7Tf/yjREnAL/+qTIC9D6RWz6gBI=
-----END CERTIFICATE-----