Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58742fd7-27cc-4f5e-8823-f4e96fe7cfa5.roa
File:                     58742fd7-27cc-4f5e-8823-f4e96fe7cfa5.roa (raw, json)
Hash identifier:          oWF4BckM5k5q+Zm83lYT3Azr2dn5zZ6TBV1Oxaj24B8=
Subject key identifier:   16:65:77:A9:CD:C5:F2:EB:52:E6:35:33:14:B5:E9:06:80:C5:DC:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       131320CE5C9E628426B905B7ABCCDBD55E512CC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58742fd7-27cc-4f5e-8823-f4e96fe7cfa5.roa
Signing time:             Mon 20 Oct 2025 06:10:45 +0000
ROA not before:           Mon 20 Oct 2025 06:10:45 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:13:20:ce:5c:9e:62:84:26:b9:05:b7:ab:cc:db:d5:5e:51:2c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:10:45 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=477874ed33f0dbc567c6aaabed442267b816f6343d7749d7154c777295f72255, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:ba:e8:66:71:1a:f6:32:e8:64:33:85:2e:
                    ae:22:61:33:14:90:06:49:c6:3c:c0:00:13:e5:08:
                    ad:9e:82:2a:df:c0:ff:e8:c4:7c:4c:c6:49:66:65:
                    a0:4f:8f:d6:04:54:6c:08:80:ec:f6:fc:53:af:31:
                    18:b6:55:ef:e1:ad:04:29:ce:8a:a9:4b:d6:1d:50:
                    45:1a:6e:9d:35:07:71:cc:db:14:3c:71:c9:63:25:
                    cf:c0:c7:dd:ab:0f:80:b1:cf:ba:e0:26:ca:49:6b:
                    55:8a:32:8c:1b:14:7a:3b:90:7d:f5:b1:05:ec:57:
                    bd:6a:56:4a:a4:12:a7:7a:47:a9:25:a1:91:e3:ef:
                    cc:75:b9:91:be:bc:96:e8:18:5b:d2:b0:44:43:a0:
                    02:15:d2:ab:24:99:04:ef:c4:77:ef:b6:99:25:3a:
                    52:b6:c1:27:9a:52:b3:87:7a:be:7c:a5:bb:f7:3a:
                    cd:e0:5d:b2:bb:72:85:d5:77:20:b6:f9:99:72:b2:
                    b0:e4:fe:42:84:43:01:e4:d8:59:aa:a5:a3:4f:59:
                    6f:83:24:7c:e6:d1:1a:4f:95:cf:de:ab:0b:0f:07:
                    35:e6:92:62:54:72:3a:90:38:76:6b:b4:78:d5:21:
                    f8:b4:87:11:6f:a2:f7:d9:03:91:dd:86:b7:55:e9:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:77:A9:CD:C5:F2:EB:52:E6:35:33:14:B5:E9:06:80:C5:DC:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58742fd7-27cc-4f5e-8823-f4e96fe7cfa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:06:52:54:49:47:4c:c0:19:0e:26:ea:36:72:8c:b3:d3:f1:
         c8:40:a0:2c:5b:0a:b8:30:2e:9d:6a:2d:31:c5:e9:08:97:0d:
         5b:31:b9:7d:22:10:87:6a:91:dd:c0:6f:cc:82:ff:b1:55:d4:
         ba:c6:c0:85:4e:da:45:b5:b5:dd:24:42:57:62:28:43:24:28:
         95:52:60:7a:db:e0:49:84:44:4c:27:63:30:b1:6b:ab:27:ea:
         30:ae:de:25:77:ac:f2:93:f0:a0:bf:4e:64:fa:0d:ae:2f:95:
         c5:09:eb:dd:ff:ea:67:f5:51:89:35:78:56:8d:f6:0e:b9:fc:
         b7:8b:53:d8:60:b6:52:3b:6d:78:4b:ef:53:ff:03:58:60:5e:
         b0:5e:24:dc:53:0c:39:7e:f9:87:36:31:3d:0d:a2:53:fa:2f:
         49:2a:bb:e0:eb:27:ab:75:4a:29:e2:d6:17:09:f7:1b:a0:b6:
         fe:3a:07:c9:4e:8a:22:b6:32:fd:7a:0d:36:d9:67:5c:8e:a6:
         4d:12:fa:61:5a:17:58:a9:7b:d8:48:8d:d0:51:7a:52:85:10:
         34:4c:dd:1e:fa:8d:38:49:96:2e:ab:b9:87:47:89:67:56:14:
         34:98:93:68:6e:34:c1:eb:f4:21:73:07:be:33:89:c9:34:f3:
         b0:1d:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----