Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5982ff11-9c90-4667-8e13-73f2555cf04a.roa
File:                     5982ff11-9c90-4667-8e13-73f2555cf04a.roa (raw, json)
Hash identifier:          y7jBIsHQdpZxLAvagFspcyjyOkFaXF/NmDqMlEQpQtM=
Subject key identifier:   62:BA:19:16:94:4F:30:A3:B7:F4:69:F6:85:17:9E:35:17:2B:0E:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6615A539722551A54255ECD75AF15A2CC2AFB4EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5982ff11-9c90-4667-8e13-73f2555cf04a.roa
Signing time:             Mon 20 Oct 2025 01:10:07 +0000
ROA not before:           Mon 20 Oct 2025 01:10:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:a5:39:72:25:51:a5:42:55:ec:d7:5a:f1:5a:2c:c2:af:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:10:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=082eb4b3b490dbc13e304f6b70a2e6d3900085a271ea64cab47d40b9a23af70c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:80:69:18:a9:aa:d4:64:a5:5c:6a:6e:70:
                    f9:ea:25:eb:7a:72:e7:29:b4:0b:4c:e5:64:30:60:
                    c3:e9:34:b5:4a:2c:14:eb:78:9b:fd:f9:66:af:6d:
                    8b:fd:22:e9:22:b5:56:b7:9b:e0:c2:f3:68:cb:ed:
                    65:65:58:be:f3:2b:c9:ca:15:23:9d:a7:15:52:23:
                    8d:2b:2c:5c:46:ad:cf:f0:9f:9f:e9:5e:17:13:b2:
                    cc:55:4f:70:c5:a4:af:14:9d:f2:57:b9:ca:17:a9:
                    fa:84:d5:46:6d:84:8a:6e:fb:af:61:8c:2c:64:c5:
                    24:63:90:f7:b2:c3:89:40:4f:de:f1:68:0f:02:ce:
                    c4:65:35:c7:69:f4:04:a3:ea:40:c6:72:db:3e:2c:
                    d3:42:08:1e:6f:4a:65:84:e0:9a:ad:58:e2:35:2e:
                    a5:94:d8:28:bd:e0:82:d1:6e:1e:b7:0b:01:bc:4f:
                    f0:e3:50:22:c7:41:35:19:94:8b:dc:a1:56:0b:05:
                    2f:67:80:31:7d:1f:60:0b:08:cd:e8:b2:02:87:96:
                    0d:ba:c3:89:9e:e6:0c:29:70:d5:c7:0d:df:6d:f7:
                    e9:f6:8d:de:3e:06:f6:94:50:be:2a:32:54:48:56:
                    f5:60:3d:ee:5c:6c:0e:b4:89:d3:78:23:27:df:57:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:19:16:94:4F:30:A3:B7:F4:69:F6:85:17:9E:35:17:2B:0E:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5982ff11-9c90-4667-8e13-73f2555cf04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:ab:b6:61:b3:0d:69:a3:55:da:b2:30:f2:70:24:91:0b:56:
         f8:b8:8d:77:50:9b:e1:0b:16:25:4d:67:99:a3:c3:8e:2f:99:
         1a:a2:99:87:b6:62:5f:1d:e0:e4:bf:72:b3:8f:89:55:00:91:
         f3:ba:19:fd:a4:1d:a4:9b:d4:3c:94:b1:b3:c6:e0:52:39:ea:
         56:00:3c:ab:f7:b2:db:0a:a2:6c:4b:11:a4:3f:8e:60:3b:23:
         f7:45:f7:e1:26:9e:cb:68:ab:20:2a:23:24:42:b4:9f:8f:48:
         3c:3d:b6:69:93:59:20:35:28:90:31:77:e2:e4:c9:a6:f6:66:
         7b:7b:1c:c9:9d:59:4e:63:19:ed:f0:69:0f:51:f5:15:f4:13:
         a9:3a:3d:fe:e2:83:6a:23:9e:07:50:39:59:5b:26:d6:43:d8:
         b2:3b:53:2a:fa:1a:1a:75:0a:24:be:77:66:70:b4:c0:4f:6a:
         10:33:12:c1:34:62:e2:9f:db:0b:2b:f2:fd:57:e6:2a:fe:bb:
         3c:6c:43:a0:8d:04:4e:0c:25:e5:23:5a:88:4d:0b:93:e9:22:
         b9:ef:fa:8f:b8:19:a6:bd:0c:69:22:c3:75:9c:f1:bf:3c:51:
         9b:6b:70:04:2e:dd:2d:74:54:0c:b8:58:cc:f9:4c:80:8d:87:
         db:c8:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----