Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa887f6b-124c-4694-a561-f2554f732ff5.roa
File:                     fa887f6b-124c-4694-a561-f2554f732ff5.roa (raw, json)
Hash identifier:          Pkgyt7tVsLLCN6kVHyXhjupVbZvl0YTMFdtN8OxCgpU=
Subject key identifier:   B6:0D:44:0A:FE:CA:79:2E:1F:63:AA:13:8D:76:E4:8E:C5:3F:FF:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6633CEAB58B64469203CD411A085135B7B7F7014
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa887f6b-124c-4694-a561-f2554f732ff5.roa
Signing time:             Mon 20 Oct 2025 05:10:48 +0000
ROA not before:           Mon 20 Oct 2025 05:10:48 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:33:ce:ab:58:b6:44:69:20:3c:d4:11:a0:85:13:5b:7b:7f:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:10:48 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=252cb761d40e80c91c08a5bcf57e187c2338986087244693bd9467e271be8ada, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:58:ef:09:61:a2:ac:af:e0:03:ab:dd:f3:
                    e7:69:b3:5e:38:8f:e3:7f:22:02:04:be:06:ae:39:
                    0c:99:72:db:35:b1:40:0a:52:a1:14:19:13:67:ab:
                    72:63:df:17:19:c0:22:04:1f:93:db:89:0b:f9:5d:
                    5e:a5:73:cf:da:e2:0b:bd:0b:7e:dd:62:e8:b9:cd:
                    b0:9f:91:4c:4e:db:c4:cc:a6:71:b5:bf:3d:6f:06:
                    e1:06:fe:1e:bf:28:65:7d:6d:31:ec:18:15:96:59:
                    36:b7:25:fc:fa:6b:44:cc:ce:42:d7:37:36:3a:40:
                    d0:b1:0c:33:73:f8:09:29:e1:e6:0e:02:11:38:e2:
                    13:20:ac:0d:3e:a3:e3:51:0b:38:1d:1a:0b:6b:5b:
                    b8:89:f6:9e:e1:ba:c5:19:8c:36:21:7c:fd:8c:9b:
                    1d:ce:4a:17:36:4c:86:98:09:c5:83:13:c6:5d:13:
                    46:74:29:7c:1c:71:2d:66:5a:d9:35:68:98:47:7e:
                    bb:8b:11:79:59:7e:93:56:f7:cd:e0:ef:ec:e0:db:
                    ec:ed:70:24:32:d0:7c:e6:86:42:d0:4c:88:70:3b:
                    14:6f:98:86:ac:93:00:6d:3a:f3:f5:0f:d5:01:28:
                    36:9c:45:4c:29:b7:b1:20:5a:df:ac:8e:56:08:b4:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:44:0A:FE:CA:79:2E:1F:63:AA:13:8D:76:E4:8E:C5:3F:FF:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa887f6b-124c-4694-a561-f2554f732ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:86:76:1b:c2:6c:29:be:8d:a7:36:a5:55:50:55:43:3d:
         90:0b:07:9f:4e:25:5e:a2:6a:fd:aa:36:58:7d:86:97:b1:82:
         61:d4:a7:ce:b6:14:70:18:cf:f4:e4:1a:dc:28:c3:9c:e4:20:
         fc:14:ca:f4:1b:6d:d7:d1:34:71:50:c4:bb:e3:00:32:d0:f7:
         c4:9e:99:f6:f1:7e:88:83:a6:91:35:36:e8:dd:bf:4e:c8:05:
         12:5d:db:5c:ef:0f:66:d2:33:52:ac:81:da:e7:9b:4c:1c:fb:
         0a:57:64:ce:dc:ea:55:63:e8:57:68:2a:3f:31:91:37:14:e1:
         97:75:f6:4d:02:15:12:76:b4:01:99:e6:fa:98:f3:f5:7d:26:
         e4:a9:e6:70:18:b9:d5:af:4e:4f:d5:a2:45:15:38:79:21:9e:
         32:11:3c:35:97:ef:19:8d:5c:73:11:a3:73:7b:29:1f:a1:3d:
         71:17:c2:fe:92:f0:a1:80:10:3e:4c:03:dc:9b:1b:5d:5f:9b:
         29:cf:5c:53:a5:4a:36:9a:86:33:48:77:64:87:85:23:70:3f:
         3e:4d:c1:34:42:6b:40:a0:6c:6c:01:1f:01:ac:95:f4:53:13:
         14:c4:f8:6b:a3:2d:c6:22:f3:b4:ae:87:bc:94:0c:b4:68:6b:
         6e:91:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----