Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57fef58-1808-4ef2-aa66-bc891ac41f1c.roa
File:                     f57fef58-1808-4ef2-aa66-bc891ac41f1c.roa (raw, json)
Hash identifier:          qxFzN4XKnzg5PcalfJhR/5L1QCgO9dvPWguWHUuIrow=
Subject key identifier:   BC:40:FF:9C:7D:34:A4:62:A1:D6:62:94:8A:49:97:F4:0F:9F:53:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A287D0C1D33824C32A2EDAB4CF470A99E3C563A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57fef58-1808-4ef2-aa66-bc891ac41f1c.roa
Signing time:             Mon 20 Oct 2025 02:00:09 +0000
ROA not before:           Mon 20 Oct 2025 02:00:09 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:28:7d:0c:1d:33:82:4c:32:a2:ed:ab:4c:f4:70:a9:9e:3c:56:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:00:09 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=555f9359edf4ca553cc876f20dcc8929d84f57ddcfeec9094b412f33d4c88893, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:50:31:49:9d:8e:6d:84:8a:2a:6f:21:3b:
                    bc:33:ca:0c:e8:1e:26:fa:43:10:de:79:8f:90:5d:
                    55:c5:d5:3b:57:e3:65:8d:5b:ff:8e:58:49:2d:a3:
                    ef:a0:06:4f:2d:82:bf:2f:31:a6:df:20:43:fd:9f:
                    a2:f8:f7:56:d0:94:cc:e2:0a:4c:09:b3:68:9e:8e:
                    d6:ff:0d:93:1b:4a:72:90:48:02:b2:bd:c7:7f:9e:
                    7f:d3:71:3e:67:ae:e4:b7:10:95:7c:c2:a9:59:a3:
                    0c:d7:a0:cb:ae:11:5e:e9:ff:f2:bc:77:39:21:26:
                    aa:33:e5:1f:ac:90:45:d4:96:7a:dc:de:01:ef:08:
                    04:3e:bc:8a:2b:60:1f:e1:0e:52:76:88:22:2a:b3:
                    99:51:eb:f6:16:fb:b0:ae:d1:ca:7a:d2:ad:f1:08:
                    d3:ed:04:97:8c:c6:16:34:ff:86:df:67:51:19:97:
                    01:eb:fc:e0:f9:bf:ec:a4:62:76:f3:f2:79:b0:7d:
                    1f:cd:8a:2e:de:f8:30:0e:18:a3:0a:13:0c:be:e2:
                    e7:fe:28:3c:13:09:90:d3:a6:ff:9f:0f:ad:a3:3d:
                    f5:47:02:e9:b4:6b:c6:98:ff:74:59:80:ac:55:e4:
                    35:15:94:0c:dd:81:e1:7c:65:00:0d:c8:56:e6:5e:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:FF:9C:7D:34:A4:62:A1:D6:62:94:8A:49:97:F4:0F:9F:53:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f57fef58-1808-4ef2-aa66-bc891ac41f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:95:82:d0:86:bd:af:8a:1c:47:dc:c3:4c:6c:ca:ce:1f:a3:
         83:55:61:e8:8e:3a:60:8b:96:70:a5:76:c7:36:09:15:bc:c8:
         c3:c2:75:67:0e:40:67:81:64:78:31:95:ce:e3:63:2c:cc:f7:
         d5:b9:a1:68:e1:10:9d:c4:f7:a8:dc:cf:d5:50:42:8b:44:de:
         e2:fa:ee:ed:4f:ba:87:46:fd:1f:69:80:15:2c:ee:45:11:a5:
         23:3c:3d:6b:40:f5:21:6c:ee:46:46:a7:5e:d2:cb:93:93:d7:
         ec:c3:d6:a1:4e:cc:0e:e6:5c:c8:09:04:d2:e3:f7:07:97:58:
         d0:e4:08:e2:a7:26:3b:99:f6:4e:71:97:d8:ae:fd:59:8c:76:
         f5:04:e2:c3:77:b8:78:33:66:5e:33:52:f1:14:94:d4:db:14:
         62:53:e0:b4:a4:1a:a2:93:1e:dd:8b:01:b5:49:25:13:e2:cc:
         77:2b:a6:d9:6f:87:f2:1a:b1:31:5f:f4:fa:ae:a5:33:26:ae:
         52:5f:c5:3d:fb:6f:a4:12:de:1c:60:0f:16:1c:6c:8c:e9:46:
         89:e5:0a:39:f5:31:ff:5d:62:15:a8:e5:23:bc:8c:56:c1:9a:
         6e:1f:57:10:ce:2e:78:c9:43:55:f9:7c:f0:de:f3:5c:cf:a5:
         fe:b7:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----