Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da1a59a5-b695-4509-8910-03979a6943c3.roa
File:                     da1a59a5-b695-4509-8910-03979a6943c3.roa (raw, json)
Hash identifier:          RQcqQzlshTJ0sx70xaM1PC5o/Qalw8jEUbR4zCQRO68=
Subject key identifier:   31:F1:27:AF:17:56:BC:C3:EC:18:99:CA:83:62:EF:78:13:02:8C:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       135575AE2B3B22958808A6883B80515750C2DEE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da1a59a5-b695-4509-8910-03979a6943c3.roa
Signing time:             Mon 20 Oct 2025 03:22:19 +0000
ROA not before:           Mon 20 Oct 2025 03:22:19 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:55:75:ae:2b:3b:22:95:88:08:a6:88:3b:80:51:57:50:c2:de:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:22:19 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2e50766c84b46cf539d5d77d58d13f2e8e16762d6aa1d24dcddcb4d2dacb14ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:7c:09:18:97:79:d4:33:4a:f4:ac:08:d1:
                    c9:a0:89:d7:06:4b:8d:c9:07:6b:de:b9:f1:5f:f8:
                    c5:54:10:8b:60:ba:f8:4c:ab:9c:88:02:e6:40:85:
                    1b:9d:dc:a6:a8:15:85:2c:d4:a9:e6:22:7b:98:50:
                    5f:b3:46:20:92:f2:9c:60:0b:dd:49:29:d1:2b:b0:
                    c8:d9:f9:81:9c:d8:a2:6b:18:ba:e2:40:8d:ed:4a:
                    64:2f:32:ef:63:16:21:7c:1a:5f:41:a3:73:7e:8e:
                    dd:09:61:2d:b8:42:41:98:69:71:d6:58:a1:27:5b:
                    74:f1:39:83:91:70:9e:00:d0:5e:01:a4:16:aa:2f:
                    6a:b3:26:11:d8:bd:e0:e9:bb:b8:50:a2:b4:ab:80:
                    34:90:8d:98:91:38:79:5d:07:b9:ef:3a:d5:7c:91:
                    90:d5:57:21:67:b8:4c:7a:b2:d6:54:1c:12:66:54:
                    c2:ce:9d:8f:f6:a5:45:ed:15:ea:9d:3d:ae:4d:6b:
                    f1:6f:2d:c5:a1:4f:46:ea:2b:08:74:46:05:ab:8d:
                    26:b0:ef:85:ea:73:ee:b0:23:6b:dc:fb:e2:ba:59:
                    3d:b9:8c:f1:b4:11:98:c9:37:ab:af:00:83:83:57:
                    81:e9:67:02:37:08:47:74:dd:81:6b:42:03:8d:3f:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:27:AF:17:56:BC:C3:EC:18:99:CA:83:62:EF:78:13:02:8C:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da1a59a5-b695-4509-8910-03979a6943c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:e4:2f:96:77:3b:0b:97:94:d9:87:d9:57:a9:9b:59:3d:
         69:2b:15:e6:f7:b3:c8:b7:e9:34:c8:e9:1b:83:9b:57:19:70:
         ce:3a:4a:81:04:54:ba:68:d8:ce:df:1f:72:19:94:a4:11:65:
         17:7b:ea:8f:36:51:49:55:01:2f:be:72:3a:8d:5b:a2:21:50:
         94:03:a5:36:ea:c1:1b:a9:25:25:ca:5f:7b:7a:77:ff:a3:de:
         26:f5:36:08:cc:62:d6:5f:e0:00:47:47:de:88:b2:a0:06:97:
         c4:27:7c:6b:eb:e7:c5:ec:3b:17:84:0d:8f:a4:08:36:ca:e3:
         c8:a9:22:92:66:6b:46:1b:42:d9:35:20:b5:47:79:5c:2b:05:
         05:64:27:5e:55:bc:ff:3c:bb:17:18:b2:fa:d1:11:78:5a:6c:
         1d:cc:b7:02:7b:1a:0c:1c:33:3e:84:8b:73:8c:67:61:b7:2e:
         0a:ce:92:6d:3d:a0:03:67:06:27:17:8b:55:c6:34:3b:b9:88:
         61:1a:1e:c0:ac:89:2a:b0:99:83:a0:82:0e:33:73:00:e8:83:
         3b:86:08:05:36:e0:77:24:49:28:20:99:26:97:82:b2:68:6e:
         c8:04:69:ef:b2:f2:2f:21:06:d1:7c:08:27:94:24:10:41:3f:
         94:fb:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----