Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb7d55a6-f96e-4e4c-b7ea-c576d74592d9.roa
File:                     eb7d55a6-f96e-4e4c-b7ea-c576d74592d9.roa (raw, json)
Hash identifier:          fBOKhQxvFnzf8hM57zJJcQ3D/8T03ey1GFCAYvnLK70=
Subject key identifier:   34:EF:26:79:F0:AD:0A:B6:E9:D2:DC:DD:D4:81:FD:E0:1C:F9:3B:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       721881D07968A2B8623CCFBFD8552C66D4C76390
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb7d55a6-f96e-4e4c-b7ea-c576d74592d9.roa
Signing time:             Mon 20 Oct 2025 01:51:48 +0000
ROA not before:           Mon 20 Oct 2025 01:51:48 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:81:d0:79:68:a2:b8:62:3c:cf:bf:d8:55:2c:66:d4:c7:63:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:51:48 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a0d801c9064b0b9a3cf1d2acb3823c3f59c4a3f3e0fbb122e65c8f4b4e5aa443, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:8c:f5:45:f9:b5:48:76:e0:8d:0c:14:41:
                    86:dc:93:2f:85:4b:9a:9c:55:8c:cf:af:08:f9:3b:
                    20:d6:5e:69:8f:c5:0c:d6:35:26:c6:a6:d8:5b:33:
                    24:1f:a7:6b:cd:0b:a2:6f:d6:5f:be:16:f4:81:10:
                    c5:17:37:b6:db:63:c8:f6:8a:fb:01:52:1e:e5:5a:
                    fa:cd:4b:94:b7:db:96:96:86:6b:1d:37:a3:f6:ec:
                    46:0d:ee:0d:46:53:2e:e4:fd:78:d3:4b:18:dc:8f:
                    ea:ae:75:22:97:ad:96:ff:23:bd:fb:86:ad:55:ca:
                    63:7f:1f:7b:32:a8:66:08:c2:54:0c:89:a8:63:72:
                    56:ca:84:3f:36:46:09:5f:1c:aa:25:ff:bb:ec:60:
                    6d:a2:0f:3f:9a:bd:c5:72:9d:4d:cd:a4:34:26:96:
                    bd:1d:28:eb:a7:89:b3:b6:a9:31:28:30:76:01:19:
                    37:69:ff:51:64:d3:5f:c9:d2:d2:ea:da:33:fd:9d:
                    36:7a:0e:01:e5:90:e3:05:d9:91:33:58:45:86:56:
                    78:df:df:4a:bb:d5:e9:70:99:33:7b:03:19:43:29:
                    09:fa:5d:a7:79:d2:95:7a:7e:70:5e:c2:9e:a9:50:
                    25:70:16:d4:10:3b:7c:5b:ef:19:1d:b2:22:1c:2e:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EF:26:79:F0:AD:0A:B6:E9:D2:DC:DD:D4:81:FD:E0:1C:F9:3B:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb7d55a6-f96e-4e4c-b7ea-c576d74592d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:92:7d:4e:5a:c5:73:9d:40:5d:d4:34:bb:bb:81:e6:9b:a8:
         5a:78:20:ea:c8:b8:c9:3a:87:90:58:9c:15:66:50:22:87:40:
         9b:e6:9e:31:64:46:b9:0b:80:ab:db:71:43:8e:30:39:72:8d:
         0a:3d:64:8d:a3:99:fe:ff:d7:53:2e:58:46:aa:f3:94:9d:34:
         ab:89:b0:12:01:1c:44:2f:40:eb:92:e2:df:3d:95:31:08:2a:
         e3:c0:e4:59:6c:1c:9b:da:ac:58:43:25:9c:72:40:77:ac:1e:
         03:4d:2d:24:8a:29:1c:f7:27:43:15:be:66:28:9b:c0:77:6a:
         4a:fe:39:60:51:2c:66:26:2e:2e:a4:a5:21:42:25:a5:cc:fd:
         d7:a6:14:68:e4:3c:00:a4:e1:3e:0d:b1:6a:55:67:ec:50:7c:
         18:4e:0a:83:84:fd:8b:94:93:f0:78:27:e4:3d:f7:e2:9c:55:
         5d:f2:30:21:05:72:77:6c:a4:2d:30:c5:f0:59:42:e2:64:49:
         e0:cf:36:9e:40:34:1e:79:2a:c7:0c:17:cc:d3:ae:6d:16:d7:
         12:8c:29:f0:05:f4:6f:2e:90:2d:4d:86:c3:69:00:0b:cf:9c:
         c7:aa:4f:36:b1:3f:23:c8:42:56:63:5b:0f:44:9e:7a:65:28:
         2c:a3:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----