Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd2396fd-b39c-4372-a227-9006b9d4195b.roa
File:                     fd2396fd-b39c-4372-a227-9006b9d4195b.roa (raw, json)
Hash identifier:          +2byG8eNDvIMPb4C58leHmA/siM9eH3KpTvTvOePRVk=
Subject key identifier:   A1:69:DC:60:73:30:4A:F9:BF:34:55:A4:C3:E2:97:99:34:C0:4E:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46A32368C716F2C770417544F546FC595488E195
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd2396fd-b39c-4372-a227-9006b9d4195b.roa
Signing time:             Mon 20 Oct 2025 06:20:59 +0000
ROA not before:           Mon 20 Oct 2025 06:20:59 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:23:68:c7:16:f2:c7:70:41:75:44:f5:46:fc:59:54:88:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:20:59 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=de968189f7e2ce798d8ec649a54090f6344a259db143cf9d78689081b83dabd4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:6e:29:7e:91:b7:12:a3:49:73:10:9a:19:
                    51:73:3a:cf:e8:4f:9b:92:70:fa:a3:9a:c2:c5:7e:
                    53:87:cc:31:b8:2d:3c:00:ef:37:b9:b3:1c:f0:b2:
                    23:e8:c8:3f:8c:f1:e1:a1:5d:ca:d5:f4:a5:89:43:
                    37:d6:a4:99:07:67:4d:91:fa:d8:26:f2:46:af:9b:
                    95:9f:77:1f:67:ee:8a:94:17:88:5f:8c:f7:dc:c2:
                    b6:e5:96:f0:5d:13:eb:f4:2d:df:b7:69:7c:ac:d2:
                    73:56:f5:ae:c0:16:3f:b0:46:b3:da:6a:6d:75:09:
                    4d:98:d5:3b:a9:ef:02:82:fa:89:6a:51:9e:65:a6:
                    9b:29:8d:73:d0:67:60:90:0e:3a:52:4e:29:a8:4e:
                    bb:e8:d1:e5:84:46:91:c6:ac:e4:17:bd:57:00:12:
                    54:db:59:e6:8a:ca:2b:f9:0c:6a:78:d4:a2:0d:61:
                    39:d9:f9:b2:a8:a6:f8:55:92:fb:5a:62:b4:f6:e1:
                    62:71:ab:76:18:61:1c:32:81:c1:32:c3:c4:f0:73:
                    a2:4b:9c:53:e1:4b:4b:e2:b7:22:07:d3:65:06:f4:
                    12:73:ea:46:56:04:17:0b:5c:3d:51:7f:e0:6e:6a:
                    7f:0d:bd:21:98:b1:e6:9d:b9:66:d3:5b:fe:02:85:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:DC:60:73:30:4A:F9:BF:34:55:A4:C3:E2:97:99:34:C0:4E:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd2396fd-b39c-4372-a227-9006b9d4195b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:3f:94:36:3d:60:57:86:80:9b:3c:80:43:31:68:74:27:
         4b:5e:89:4a:44:d7:2e:6f:ac:3b:c7:19:56:a1:1c:0c:7c:11:
         ea:30:19:a3:c3:9b:65:85:a0:5d:54:91:80:ae:e2:98:0f:23:
         62:51:0f:ee:a8:e4:ee:0d:de:9f:da:bc:fe:a8:0d:c7:7a:ed:
         0a:f1:0b:de:53:20:0b:71:18:d0:4b:f5:ec:2b:f1:5f:90:73:
         04:48:22:6c:6b:28:50:22:a5:5d:48:19:b7:bb:2c:3e:7e:0f:
         82:82:ee:e1:f5:f2:1a:93:c6:23:93:64:9b:3b:89:17:78:b1:
         58:43:23:68:71:97:97:4c:67:c8:9a:c4:cd:b8:c0:c9:66:a1:
         ff:ab:35:78:0b:65:cc:8d:d3:f9:2e:f4:14:35:f5:7d:45:b3:
         92:57:19:88:4c:58:9e:d2:e8:2f:f8:39:4e:0f:40:e1:34:dc:
         5f:80:ed:9a:6c:44:81:bb:8c:18:65:aa:3b:05:7f:58:1f:d9:
         b3:d9:b9:61:94:e5:1a:0d:05:53:b5:a4:c2:fe:a6:a3:91:20:
         82:86:49:55:21:b6:14:75:cd:aa:c0:28:30:5e:38:c8:6b:de:
         1e:b5:2f:d3:5a:9e:5d:fe:70:d1:d7:28:b9:b8:68:4f:fc:2c:
         49:74:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----