Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4494c170-7cfe-4c9a-b3c1-5f0286fe074e.roa
File:                     4494c170-7cfe-4c9a-b3c1-5f0286fe074e.roa (raw, json)
Hash identifier:          FvCwvfmQwSybfDa24a7TMqaJdp1qafkpp965aCl60nA=
Subject key identifier:   24:D7:FF:92:6B:19:81:CC:EB:3A:17:18:02:E5:FB:27:FA:92:DB:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42E61A5B4E9640489211DD881FE6787427EAE38A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4494c170-7cfe-4c9a-b3c1-5f0286fe074e.roa
Signing time:             Mon 20 Oct 2025 03:00:51 +0000
ROA not before:           Mon 20 Oct 2025 03:00:51 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e6:1a:5b:4e:96:40:48:92:11:dd:88:1f:e6:78:74:27:ea:e3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:00:51 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=818b8f97a99d05bd0890dde5ae2e108bec5098e5925460ef3e965902de6309d8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:2f:5b:6f:fc:03:53:a5:69:e1:0c:1f:16:
                    6d:3b:04:2d:5a:f4:7d:5b:92:dc:7d:dd:5b:74:f3:
                    fa:4b:81:50:ec:a3:9e:85:86:77:86:49:87:09:50:
                    ab:1c:51:9f:85:a9:b1:3e:0e:76:25:86:b1:72:4f:
                    5d:b4:03:8d:dc:6e:35:42:af:a7:6b:ff:26:a1:95:
                    d4:58:e3:eb:0d:61:3c:a9:8e:10:1e:84:10:4f:e9:
                    41:12:45:ad:91:d0:5d:1b:f1:ba:ca:d7:8d:68:81:
                    72:87:71:fe:37:d4:9e:9f:ef:51:30:11:53:73:a3:
                    47:78:d3:46:f4:83:d7:da:77:c0:7f:12:07:2f:0b:
                    dc:81:43:9f:9f:20:98:af:37:18:e1:2e:a9:ec:11:
                    bb:2f:2a:ca:36:ae:9e:91:a4:fe:ad:98:ea:18:78:
                    57:83:e4:a6:78:9f:c6:c3:b3:1c:b9:55:09:0b:3f:
                    0c:ca:5e:d5:b7:cc:1c:18:59:45:75:8a:77:a8:de:
                    b0:0c:b1:28:78:bd:a0:89:48:f0:3c:da:01:7f:2d:
                    f5:de:88:28:0f:db:89:47:6c:32:e8:e1:11:6b:92:
                    a9:e4:98:1d:92:f5:0a:d9:b6:bf:25:d7:91:f5:56:
                    be:ec:f9:52:8a:65:af:8b:ec:8b:8e:a7:87:b3:48:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:FF:92:6B:19:81:CC:EB:3A:17:18:02:E5:FB:27:FA:92:DB:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4494c170-7cfe-4c9a-b3c1-5f0286fe074e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:af:3b:c1:b9:df:e0:93:b5:99:2e:da:93:0b:f7:9e:fa:
         97:a0:e7:42:c7:3a:c6:ac:69:82:89:6d:60:b0:9a:d5:88:a6:
         ac:bb:3c:1e:60:72:ff:b9:71:a6:a5:24:1d:61:21:6f:6e:8b:
         72:28:c0:b1:cf:a5:d8:4e:86:5f:43:f2:a0:8a:cd:c2:2e:5e:
         05:c0:f8:b9:ac:cf:92:bc:32:31:00:47:5d:ac:36:cb:61:f1:
         dd:14:e3:e4:47:a2:9e:b8:29:35:32:c1:da:f1:9f:36:f5:61:
         e8:16:13:09:a7:24:27:66:06:28:d0:9f:7e:7f:b1:b4:5b:4d:
         39:9d:83:61:9d:ca:03:4c:96:f0:e1:7a:f1:97:2e:6b:ae:25:
         19:d0:b6:66:60:b3:97:28:c7:98:af:b6:a2:93:d7:94:ca:2e:
         64:ff:23:d8:cd:fb:66:96:c7:1a:70:20:a3:68:bf:77:c1:77:
         05:7b:40:7b:dd:eb:eb:ff:8c:64:32:0f:29:ed:05:66:18:26:
         2f:70:97:c0:49:29:d1:8c:43:5b:99:60:a7:d8:de:0d:63:af:
         9c:98:fd:63:a8:e2:f5:06:69:02:8e:ed:fa:4e:54:90:5e:cd:
         04:98:22:26:e2:cd:8f:8c:d6:f5:7b:13:4f:eb:bf:a3:f3:d2:
         d9:22:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----