Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f849bb65-73b2-4aa0-be17-d8d2bbfaa36e.roa
File:                     f849bb65-73b2-4aa0-be17-d8d2bbfaa36e.roa (raw, json)
Hash identifier:          aumWX5YcZtZtswtxLehoPsuzWcGQN65vEtjgaMStH18=
Subject key identifier:   8D:E1:52:CB:79:25:FB:20:B9:15:D2:AF:B7:73:59:5B:62:67:ED:4F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58711804B42BC083FE1E4591B3303402BEC6C136
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f849bb65-73b2-4aa0-be17-d8d2bbfaa36e.roa
Signing time:             Mon 20 Oct 2025 02:00:09 +0000
ROA not before:           Mon 20 Oct 2025 02:00:09 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:18:04:b4:2b:c0:83:fe:1e:45:91:b3:30:34:02:be:c6:c1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:00:09 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=3d1b17eaca4c72f4ca768cd137a086bb7486b7793e1f9594692707e1aed407c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:9d:0d:bc:d5:03:bd:ca:5a:24:5e:71:f1:
                    fb:51:e2:41:cd:c2:09:ec:d9:7b:7e:f5:3e:b6:4b:
                    92:f9:69:85:cf:ef:fb:87:86:af:fc:0c:fc:52:4c:
                    9b:4c:c4:d5:ef:b8:81:ef:98:5b:d1:b7:99:af:e7:
                    50:88:08:0b:ed:b5:4f:bf:9e:ac:4c:2d:5d:55:cb:
                    c4:ec:12:18:7f:e0:2c:37:56:4f:4c:ef:94:a7:68:
                    ad:9a:3d:ea:65:3c:d8:25:71:b0:9e:a1:89:cc:3b:
                    e6:dd:6a:7f:f8:bb:b0:6e:6b:dc:7a:06:c9:a7:27:
                    e2:23:65:d8:3a:d3:3a:53:d0:2d:ea:cc:f3:6b:b9:
                    ee:6d:ee:02:c5:ff:e3:8f:cc:f3:b0:c7:e2:04:d7:
                    16:8a:03:4b:00:04:d9:98:35:1f:2a:a5:1d:9c:f6:
                    d5:17:6b:5e:17:d0:6e:cf:04:67:37:35:42:d7:d3:
                    4f:29:bb:f7:05:8d:e0:e9:3f:5e:dc:d9:b6:76:bb:
                    2b:c2:1d:91:44:7d:3a:ab:c9:3e:d1:3e:2a:3e:7c:
                    ac:1d:53:ba:3c:24:74:90:61:de:45:f7:9e:0a:d5:
                    89:f7:03:36:c5:e1:60:f5:4d:7c:46:85:ba:0f:7e:
                    f8:f2:8c:b3:78:f1:70:a6:5e:1e:23:5f:a8:56:83:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:52:CB:79:25:FB:20:B9:15:D2:AF:B7:73:59:5B:62:67:ED:4F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f849bb65-73b2-4aa0-be17-d8d2bbfaa36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ba:c7:37:cb:88:a5:42:4f:2d:fb:b6:a1:bb:29:db:c4:22:
         ca:4c:b8:f8:41:04:c0:e6:b8:a3:07:32:a1:80:4a:82:dc:db:
         70:96:40:aa:10:b4:36:eb:c0:4e:fc:95:8a:03:e8:c4:88:69:
         ca:38:99:1a:02:59:b5:d6:30:eb:a3:fc:76:f8:4b:3a:ab:f9:
         da:42:85:bf:bd:61:ee:c7:1c:c9:4f:68:42:e1:45:7e:cd:1a:
         9d:8d:10:47:a8:29:ae:21:24:56:f6:97:7c:b6:63:b4:6e:21:
         01:ef:f8:61:a4:b2:b8:5c:0f:27:f5:b2:98:7a:d2:d5:ce:11:
         2d:d7:ff:9e:54:c3:54:24:89:9f:69:67:b8:00:71:2f:6e:97:
         ae:94:ad:c0:5d:3c:51:0c:62:7e:16:93:5b:42:4a:4a:6a:a8:
         38:e5:4c:4b:3f:cd:61:e5:28:ac:a6:1e:b2:56:f5:fd:f1:a7:
         ff:63:15:38:68:c4:0c:0e:b9:f2:fc:9e:d2:14:bf:a4:09:27:
         1c:1a:28:3c:07:c7:c0:47:45:49:0e:ed:15:56:25:71:49:13:
         02:35:7d:5b:b2:66:30:a0:6e:66:04:ac:6e:9e:16:ee:e4:3c:
         51:c4:70:42:04:6d:2b:83:be:10:d6:b1:c5:68:c7:f2:6c:8b:
         17:32:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----