Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dbb2d4-9db3-41a0-9662-fe88b7d2fafe.roa
File:                     e2dbb2d4-9db3-41a0-9662-fe88b7d2fafe.roa (raw, json)
Hash identifier:          GP2FG538di8kHy94JH97NE5rpaeAnSJItGxwomxMVAo=
Subject key identifier:   30:5A:08:44:ED:AB:C0:7B:E9:CE:35:47:C5:CD:57:00:00:69:C9:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D7BC0E228A06F7101A81C8EB423D4E80B7E069C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dbb2d4-9db3-41a0-9662-fe88b7d2fafe.roa
Signing time:             Mon 20 Oct 2025 06:31:33 +0000
ROA not before:           Mon 20 Oct 2025 06:31:33 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7b:c0:e2:28:a0:6f:71:01:a8:1c:8e:b4:23:d4:e8:0b:7e:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:31:33 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c372923f880115e7db3016e91cb525471b6e6ddd16c6b390fbf7cbcf9ada4c3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:fc:b7:0d:66:17:72:1a:bb:35:8d:98:d8:
                    e5:3b:ab:0d:ed:23:12:df:02:9a:be:15:0a:bc:82:
                    e2:41:45:57:7e:29:ae:ef:74:ce:6b:95:30:10:1f:
                    7b:a0:34:19:c4:84:1e:97:a0:62:55:67:ad:b4:8e:
                    47:10:d5:16:8b:41:04:0d:04:bb:18:ed:2e:df:0f:
                    b5:1e:44:b4:eb:98:f6:5e:02:c2:85:da:2f:86:77:
                    80:6c:67:4e:3d:09:68:23:49:b3:5a:a1:26:52:0c:
                    4e:4a:41:96:a7:aa:fe:a2:9b:42:5c:fe:86:1e:a1:
                    39:d1:f5:4e:72:c4:fb:30:a0:53:dd:3e:44:d0:23:
                    a5:0f:fa:75:d9:07:7e:db:27:14:74:65:e1:5b:fb:
                    26:74:63:f1:7e:fd:21:b8:90:d8:82:57:e4:15:94:
                    7e:6b:fa:8f:07:84:1e:09:54:34:70:b6:82:5f:ef:
                    d6:ca:ab:af:1b:dd:f7:0a:b0:76:70:98:2b:16:3a:
                    e6:c6:58:c8:6d:00:54:2a:86:d2:d0:0c:2a:29:82:
                    43:4f:39:3a:6d:8c:89:62:67:10:58:a3:b6:92:59:
                    24:d4:eb:61:d7:2e:3f:35:a4:d6:3e:3e:c5:b0:a8:
                    64:c1:ee:7f:f8:f0:ca:69:dd:1b:64:cf:ff:12:83:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:08:44:ED:AB:C0:7B:E9:CE:35:47:C5:CD:57:00:00:69:C9:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dbb2d4-9db3-41a0-9662-fe88b7d2fafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:fa:3d:af:77:75:e3:0a:59:fc:22:0e:2c:3b:34:0b:13:
         25:fd:b9:b3:ef:ac:99:d5:19:45:1e:86:84:c9:95:76:dd:67:
         df:ff:9c:ea:0b:05:d3:ca:59:c3:a9:e6:a5:15:d4:78:de:23:
         7b:c1:66:33:54:23:26:03:cc:7e:1d:42:c4:69:38:e1:81:c2:
         21:4f:d6:40:fb:14:20:40:54:4c:8f:6b:c7:f1:b1:87:0f:e8:
         bc:05:0f:68:4b:24:c1:f5:9f:2d:56:81:7a:17:ad:a0:d0:a5:
         63:e4:1b:69:10:0b:65:f0:4f:27:03:03:ed:0d:08:de:87:3f:
         ff:06:5f:b7:35:0f:37:b9:3f:e2:48:91:2b:dd:9d:c0:76:dd:
         7b:92:a6:02:4b:c2:8f:51:a9:9c:35:9d:72:83:87:72:0c:12:
         b1:69:c8:37:de:c3:80:6e:54:80:ca:4a:d3:e3:c9:04:15:d4:
         d8:8d:50:e2:98:0e:7a:30:0e:cc:84:8a:04:ae:cb:21:bf:d9:
         b4:5c:8f:e1:30:81:2e:05:a8:61:bf:26:43:77:18:e0:e4:30:
         77:be:6a:98:be:19:2c:f1:47:a9:d8:d7:56:9b:8c:b2:9e:b1:
         12:dc:70:ac:a1:b9:16:64:58:6a:88:a3:62:b0:43:05:09:b2:
         f9:c1:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----