Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4749ecf-aa17-443c-b782-9f8c8c447545.roa
File:                     f4749ecf-aa17-443c-b782-9f8c8c447545.roa (raw, json)
Hash identifier:          ZXQH4MTMvMVb4JteifYUBPVJSQHFob371FvBw7+zRC0=
Subject key identifier:   5B:A3:09:4D:30:1F:9B:08:AC:46:3D:BE:31:7C:B5:09:D9:14:BD:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2571A56D01B02D4A712E7708BC273A7C920B396D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4749ecf-aa17-443c-b782-9f8c8c447545.roa
Signing time:             Mon 20 Oct 2025 00:42:41 +0000
ROA not before:           Mon 20 Oct 2025 00:42:41 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:71:a5:6d:01:b0:2d:4a:71:2e:77:08:bc:27:3a:7c:92:0b:39:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:42:41 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=1d94d5d4f11f491e4ec0ae34d02f305c9cf1a0857ee6c1ad8f9b866e3082598a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:fc:19:78:a6:00:ec:d8:98:6a:6b:4d:32:
                    1c:94:ba:78:64:fe:2c:7b:ab:41:a3:54:d7:30:81:
                    ff:82:ab:13:bd:c3:a0:6c:9b:dd:a2:3a:e4:8b:b8:
                    d9:1f:8d:c7:e7:22:89:f9:18:76:2e:be:24:79:76:
                    b8:ea:d5:c9:6c:5a:d2:9b:b9:db:2c:65:bf:46:58:
                    00:63:61:5e:e0:e2:8f:28:d4:fe:bf:9f:17:01:29:
                    dc:58:c1:85:d2:a9:bc:1a:3b:17:f5:b9:a4:4b:2e:
                    f3:7a:d2:73:6c:36:de:0d:18:71:39:5f:9d:fa:20:
                    8b:76:ea:90:ea:d7:7a:07:98:97:89:3c:76:fc:4b:
                    77:23:de:08:f5:5e:42:f5:bf:70:f0:45:12:f5:98:
                    db:f6:f6:12:81:55:d7:cd:10:fd:99:0d:e3:65:f3:
                    06:a2:50:16:b8:9c:b8:ab:80:0a:00:43:b5:b4:3d:
                    94:61:7f:a5:1d:8f:07:54:65:79:9b:e0:a6:4d:b9:
                    50:0d:6b:e0:8d:30:5d:69:f4:18:45:74:d4:02:b8:
                    a6:12:f4:0c:29:da:72:5a:c2:13:09:3e:b7:10:74:
                    1a:e0:05:d1:94:ef:82:6c:a1:14:d8:0d:dc:f9:75:
                    5c:14:51:55:f3:3e:cf:b6:19:da:b8:cd:94:93:e1:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:09:4D:30:1F:9B:08:AC:46:3D:BE:31:7C:B5:09:D9:14:BD:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4749ecf-aa17-443c-b782-9f8c8c447545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:b4:9c:06:10:30:5c:7f:b0:74:16:b1:d0:89:4c:8b:5a:
         dc:f7:00:3d:6b:98:90:ad:c7:98:9e:65:c6:57:b3:f0:a6:aa:
         98:8d:11:ff:b3:0c:36:68:38:9b:db:ae:84:22:f6:5b:38:58:
         89:94:66:c3:59:b0:2c:77:02:1d:57:e5:8d:52:8c:cf:9a:7c:
         ba:91:75:b7:17:2a:a0:61:f3:55:1b:1b:f8:4f:a2:87:36:e9:
         39:fd:f5:a1:55:f2:63:a6:de:cc:50:bf:43:a5:ba:e0:0a:63:
         3a:cb:e0:94:cb:f1:00:54:e9:29:f9:91:93:83:0f:73:a6:48:
         ce:5b:ba:91:ec:c7:0e:32:26:d1:ab:99:e4:e4:ff:02:95:1d:
         36:0c:56:54:a2:42:fe:40:4b:49:9a:2f:d2:68:bd:cc:7e:9d:
         86:6a:8f:0a:c2:fa:89:11:8b:5d:4b:2f:87:e8:6f:23:22:53:
         e3:65:77:17:38:13:44:74:36:62:33:66:6c:83:d1:1d:ff:3e:
         8b:c1:d9:e0:97:b8:28:87:50:81:e4:60:09:83:02:89:e2:80:
         cc:b1:7d:a3:c1:2a:ff:4a:1f:57:94:54:ed:89:60:a1:d8:e8:
         31:34:38:30:8f:04:b4:2e:1d:34:be:73:01:3f:8b:6f:6f:84:
         6d:d1:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----