Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ef05858-b06f-4806-8add-00cbb04a341a.roa
File:                     4ef05858-b06f-4806-8add-00cbb04a341a.roa (raw, json)
Hash identifier:          pjDuV2p6HfpR2hBKoW6IXE2zudBKW0YjNqdhu0Sw5uI=
Subject key identifier:   28:B3:5F:80:F1:69:08:8D:30:4B:28:AC:CB:6D:63:A1:F8:6F:78:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       763557F08AB3C0D62DE0F435927669A00474D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ef05858-b06f-4806-8add-00cbb04a341a.roa
Signing time:             Mon 20 Oct 2025 02:22:13 +0000
ROA not before:           Mon 20 Oct 2025 02:22:13 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:35:57:f0:8a:b3:c0:d6:2d:e0:f4:35:92:76:69:a0:04:74:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:22:13 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=cbf1ac498cd3cfae931a51901b4c5d15a6aa0e416484c3638dd85f40afc3b8bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:6e:e1:5f:3d:16:52:fa:83:44:cb:68:2a:
                    72:e2:c8:46:d5:d2:e3:39:b8:47:3b:1e:eb:6d:13:
                    f4:4d:de:99:53:0f:c2:54:aa:03:ac:45:af:99:85:
                    5a:2d:05:af:2a:f1:a0:8f:14:92:c5:f7:50:31:8b:
                    71:63:27:a0:bf:db:ab:52:b9:c9:ab:79:c3:d0:0f:
                    85:7f:35:39:6c:ce:41:50:8d:65:cc:7d:88:58:02:
                    39:89:68:de:0d:e4:c4:e8:6d:46:05:b6:0c:ce:67:
                    4d:43:d3:e7:b3:8e:0e:ba:29:43:f8:72:66:3a:24:
                    6f:52:64:f6:a4:00:06:69:84:2d:06:59:1b:89:69:
                    7e:36:ea:2c:6d:30:e0:7b:5b:d2:34:2a:9f:d3:95:
                    cb:f3:bc:4a:2c:60:d7:ae:a6:e9:b1:0c:1a:2d:88:
                    25:7c:ea:ba:4f:9c:03:e3:01:25:5a:85:4a:d1:b3:
                    0a:23:78:04:fa:db:50:ed:e8:04:f0:35:9c:12:93:
                    68:9a:28:f9:dc:59:26:00:fa:ad:7c:1f:76:5c:67:
                    8e:bb:46:4f:5c:2a:e6:ac:e5:39:b3:a5:18:b1:e4:
                    f8:84:94:24:4d:d4:45:64:54:ec:b8:94:26:78:29:
                    57:26:d8:54:12:9a:22:5e:1c:e9:f6:29:0c:7d:8b:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:5F:80:F1:69:08:8D:30:4B:28:AC:CB:6D:63:A1:F8:6F:78:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ef05858-b06f-4806-8add-00cbb04a341a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:a0:ac:be:29:d2:27:6f:97:ae:a1:92:08:1d:ce:ef:de:
         58:c7:22:16:11:7b:fe:3b:5b:a1:27:8b:5d:87:57:fb:07:ef:
         9e:2f:7b:98:32:a1:68:7d:cc:b2:cf:c1:6f:8e:f5:b5:77:f2:
         7a:88:3e:84:b3:1c:1d:5b:c1:a0:98:05:c9:29:8e:d7:65:d8:
         71:16:62:26:a7:44:97:7e:bf:4e:85:f1:65:18:c3:ab:43:ea:
         76:fd:37:80:c3:97:90:2f:3b:17:22:79:0c:8d:2c:5e:a2:db:
         f7:7f:a1:08:8e:34:0d:bf:3b:18:e5:74:ce:07:97:9c:96:94:
         22:57:ba:43:29:c4:7d:19:1b:02:33:67:5d:a7:b7:81:cd:a4:
         72:9f:1e:8d:d4:71:96:7b:04:cf:81:db:9f:78:17:cb:63:76:
         60:1a:c9:28:9d:ea:a5:5e:87:51:7e:d4:aa:55:09:59:ce:e9:
         7e:38:5b:01:2e:df:03:a8:86:4f:ed:4f:da:ad:7d:ca:19:1b:
         8b:16:ec:bf:6d:7b:e5:66:65:08:0b:3f:02:a8:20:be:b0:f3:
         11:15:6a:10:0d:bc:cd:f2:d8:9a:8e:7f:33:50:a2:0a:65:f7:
         d6:07:a0:37:ea:8d:6b:d9:a2:9b:08:90:f9:a6:36:e3:0f:26:
         65:be:74:30
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITdjVX8IqzwNYt4PQ1knZpoAR00DANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMjAwMjIyMTNaFw0yNTExMjQyMzU5NTla
MHoxSTBHBgNVBAUTQGNiZjFhYzQ5OGNkM2NmYWU5MzFhNTE5MDFiNGM1ZDE1YTZh
YTBlNDE2NDg0YzM2MzhkZDg1ZjQwYWZjM2I4YmMxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4lbuFfPRZS+oNEy2gqcuLIRtXS4zm4Rzse620T9E3emVMP
wlSqA6xFr5mFWi0FryrxoI8UksX3UDGLcWMnoL/bq1K5yat5w9APhX81OWzOQVCN
Zcx9iFgCOYlo3g3kxOhtRgW2DM5nTUPT57OODropQ/hyZjokb1Jk9qQABmmELQZZ
G4lpfjbqLG0w4Htb0jQqn9OVy/O8Sixg166m6bEMGi2IJXzquk+cA+MBJVqFStGz
CiN4BPrbUO3oBPA1nBKTaJoo+dxZJgD6rXwfdlxnjrtGT1wq5qzlObOlGLHk+ISU
JE3URWRU7LiUJngpVybYVBKaIl4c6fYpDH2LFJ0CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQos1+A8WkIjTBLKKzLbWOh+G94vjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvNGVmMDU4NTgtYjA2Zi00ODA2LThhZGQtMDBjYmIwNGEzNDFhLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBWyfwDANBgkqhkiG9w0BAQsFAAOCAQEArQKgrL4p0idvl66hkggdzu/eWMci
FhF7/jtboSeLXYdX+wfvni97mDKhaH3Mss/Bb471tXfyeog+hLMcHVvBoJgFySmO
12XYcRZiJqdEl36/ToXxZRjDq0Pqdv03gMOXkC87FyJ5DI0sXqLb93+hCI40Db87
GOV0zgeXnJaUIle6QynEfRkbAjNnXae3gc2kcp8ejdRxlnsEz4Hbn3gXy2N2YBrJ
KJ3qpV6HUX7UqlUJWc7pfjhbAS7fA6iGT+1P2q19yhkbixbsv2175WZlCAs/Aqgg
vrDzERVqEA28zfLYmo5/M1CiCmX31gegN+qNa9mimwiQ+aY24w8mZb50MA==
-----END CERTIFICATE-----