Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa8fdc34-d7e9-40f2-a53e-2163c82c44cc.roa
File:                     fa8fdc34-d7e9-40f2-a53e-2163c82c44cc.roa (raw, json)
Hash identifier:          jasdZUhxQd+rd0djdS8R7CpSAF4Jx6cxrN0hNC/mIY0=
Subject key identifier:   A3:C5:86:9C:CB:0F:AA:C9:81:81:59:DB:6E:F0:38:DD:BB:4E:81:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31CDD4770A1A72AF41D21D7B338F8EB6331B1C13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa8fdc34-d7e9-40f2-a53e-2163c82c44cc.roa
Signing time:             Mon 20 Oct 2025 02:50:08 +0000
ROA not before:           Mon 20 Oct 2025 02:50:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:d4:77:0a:1a:72:af:41:d2:1d:7b:33:8f:8e:b6:33:1b:1c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:50:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=58c37ca8305884e9f15ab2248586d58b251fa99a5611fe1a94acb894f8aaa6b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:83:0e:5b:23:cd:f9:8a:82:84:3e:66:3b:
                    78:30:3b:c0:b4:0d:a1:42:65:e8:d6:15:58:61:ba:
                    1e:b7:99:a6:c3:92:52:f1:64:69:09:19:15:5e:9a:
                    57:0c:a9:af:15:34:d3:2b:62:bd:17:5d:74:82:a0:
                    80:86:4c:bf:33:0a:49:c1:09:7b:ee:9d:48:33:c4:
                    0c:6a:85:2f:1a:70:87:ef:f6:03:3c:8d:bc:c6:31:
                    12:41:ee:50:b5:0d:a1:fb:11:8f:0f:64:21:85:8b:
                    3d:7f:1b:02:bb:11:bd:3f:eb:74:91:a1:b2:45:3d:
                    e7:28:07:4d:51:7d:76:e4:65:25:ac:47:e0:ea:23:
                    bd:61:c3:11:98:01:9a:37:b4:4b:67:c1:26:db:d9:
                    95:c0:e8:3d:d9:e3:2a:df:c2:8a:8f:0e:03:1b:6f:
                    55:16:f5:53:fe:6d:24:66:9b:8a:f7:2a:1e:70:f3:
                    c9:5b:90:a1:7d:29:fb:ef:c7:a2:ed:ae:37:9e:de:
                    f6:33:bc:f4:b5:79:bd:28:62:bd:0d:af:f1:02:39:
                    88:d0:21:d3:d5:ca:74:cc:ed:70:94:fc:15:f5:0f:
                    46:6c:a8:d0:d7:8b:41:f0:03:48:c5:6a:0a:bb:e5:
                    aa:d2:f3:fb:47:cb:33:cd:4e:98:16:d0:94:6a:c2:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:86:9C:CB:0F:AA:C9:81:81:59:DB:6E:F0:38:DD:BB:4E:81:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa8fdc34-d7e9-40f2-a53e-2163c82c44cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:33:3e:74:86:b6:7a:08:f1:14:bb:cb:79:c8:9a:6d:68:
         32:62:b4:df:ed:cb:cf:13:60:3d:b7:bf:83:21:51:3e:c4:15:
         ab:f8:ab:5c:a6:d7:0d:96:5b:09:68:91:d9:c2:a3:ba:45:95:
         93:2b:6f:52:2b:8c:47:85:c5:11:90:ec:62:a6:95:40:7b:6c:
         5a:db:7d:16:15:f6:1a:ea:d3:ac:8a:db:11:8d:e0:2d:fb:5c:
         05:23:7a:7e:95:34:04:bf:cf:0b:77:5d:fc:6a:50:5e:7e:c4:
         dd:77:34:95:14:79:b0:cf:a8:6a:91:85:86:32:4a:96:26:57:
         82:c5:bb:97:f0:04:04:4e:b8:a4:0a:c9:d4:3c:26:4c:51:c5:
         4e:35:60:82:5c:0d:ae:8f:e4:4d:41:6a:95:c6:2f:4e:d3:04:
         6e:c7:32:c8:15:88:45:06:06:56:fa:f2:a0:a6:1c:d2:01:ad:
         31:64:55:0d:09:0e:d4:60:3a:41:3b:55:17:c1:cb:d4:47:7e:
         bd:c6:fb:05:d6:b8:85:ea:9e:00:09:d1:a9:63:6b:dd:b5:32:
         fe:28:e0:35:7f:fd:bc:16:1f:7d:fa:62:11:6d:e5:de:38:1b:
         8c:00:7f:28:0e:bb:48:11:b3:db:b5:be:70:f3:ec:ad:67:43:
         79:34:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----