Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0e1597-b0f1-4736-9816-7fe7cbd9e218.roa
File:                     5e0e1597-b0f1-4736-9816-7fe7cbd9e218.roa (raw, json)
Hash identifier:          C7PKJKAdecWQo0XAw/BpNC9uWq9aiHoWaMIAsmHe1k0=
Subject key identifier:   54:03:39:BD:63:E9:8A:CF:7C:7C:F1:2C:E7:91:4B:7D:64:2C:18:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       64BDCEF92552B1344E23E13588AE843F5E61913C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0e1597-b0f1-4736-9816-7fe7cbd9e218.roa
Signing time:             Sun 19 Oct 2025 03:01:21 +0000
ROA not before:           Sun 19 Oct 2025 03:01:21 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bd:ce:f9:25:52:b1:34:4e:23:e1:35:88:ae:84:3f:5e:61:91:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:01:21 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=92831cbe1c613261e6b2b1c2887f763a970977ef79598b32a1adbcee87b24ee2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:ce:53:a1:67:f0:09:84:be:92:dc:97:af:
                    1b:6b:ba:d6:e8:24:47:58:b3:a2:f9:7c:ea:e1:93:
                    8a:09:69:ad:10:b2:79:bf:6c:c6:c2:28:79:8d:7e:
                    21:56:46:a0:e2:03:bb:3f:43:71:44:6b:ac:eb:81:
                    9a:57:5d:78:00:87:61:46:f5:31:cb:82:b6:91:66:
                    0a:0e:23:7c:36:05:a7:30:13:ac:f9:32:ba:ae:db:
                    fc:f2:6d:f6:ba:cf:bb:8f:c1:f8:56:7c:d3:d1:82:
                    90:4e:f8:bc:18:ae:23:e1:7c:99:fe:dc:bf:63:b7:
                    41:bc:01:27:df:27:e3:81:ed:d8:88:36:fd:42:3b:
                    77:f4:d6:c7:5f:86:be:45:a8:8f:0a:dd:fd:2b:4d:
                    fd:24:90:c4:e2:b3:4f:17:0c:12:a7:fb:a3:02:11:
                    2a:47:0e:12:ba:1b:d1:77:dc:af:39:7b:db:e8:f0:
                    f8:54:7c:01:e4:94:0b:8f:54:19:02:71:3a:52:9f:
                    01:30:b5:08:83:c3:45:97:c1:c5:1c:70:64:fc:cb:
                    f4:20:d6:d4:45:fa:63:1b:3c:70:98:86:4d:49:6f:
                    1f:01:1c:eb:9b:e7:3d:a4:c8:f5:9c:8f:c3:bb:ea:
                    35:10:9d:dd:40:0f:dd:0d:06:d6:f0:5f:ae:1c:00:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:39:BD:63:E9:8A:CF:7C:7C:F1:2C:E7:91:4B:7D:64:2C:18:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e0e1597-b0f1-4736-9816-7fe7cbd9e218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:0b:8b:8f:b3:09:ad:14:ee:0c:39:ee:7a:57:e3:d8:28:
         62:13:81:eb:d4:44:7b:1d:18:39:6e:c6:08:61:0a:5c:ea:8e:
         86:72:51:4c:29:18:7e:f0:c4:c6:90:45:d6:95:9e:99:f2:ce:
         5d:05:b1:8b:6e:94:df:25:8a:fb:71:27:de:87:cb:e2:36:30:
         8c:e5:95:36:38:ad:a0:a0:a0:c8:0d:b4:8f:06:a0:20:26:4e:
         19:3a:90:65:fd:07:56:2f:11:73:e4:d5:30:e4:45:41:11:de:
         2f:e7:57:2f:20:c1:63:16:9f:e2:67:32:90:f5:ff:85:73:2b:
         c5:22:b2:94:d5:fb:1a:03:5e:e3:93:1b:b9:0e:e6:25:45:d0:
         21:20:87:f8:60:97:da:a8:7a:d3:e3:ee:d5:c0:9d:24:f9:d0:
         b1:d3:f0:ea:5b:8d:5e:04:27:0a:cf:16:23:0a:96:17:1b:41:
         a7:5c:32:59:49:22:d7:2a:9b:66:bd:bf:71:0b:31:72:00:ad:
         e1:49:8a:72:6e:40:5d:7a:62:4b:54:dc:b4:1f:5a:6e:ad:91:
         0e:a8:c5:e3:36:bd:cb:a0:8d:85:75:65:d3:b7:00:25:7d:fa:
         b2:ae:e5:c0:87:66:da:b8:50:6c:2e:7d:7e:a5:23:89:6d:e6:
         85:8d:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----