Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a47777-b97c-4764-9a68-806a218e83a4.roa
File:                     67a47777-b97c-4764-9a68-806a218e83a4.roa (raw, json)
Hash identifier:          yatFrKiVhaYHJiFEJwtGtIo5LWfWr94isbpErD4K0QY=
Subject key identifier:   9D:93:A1:73:13:28:40:28:B5:C5:2D:27:11:0F:0D:2A:0E:6E:CD:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       8298AC444C43F0B8D472926A6653067AC31231
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a47777-b97c-4764-9a68-806a218e83a4.roa
Signing time:             Sun 19 Oct 2025 01:50:02 +0000
ROA not before:           Sun 19 Oct 2025 01:50:02 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:98:ac:44:4c:43:f0:b8:d4:72:92:6a:66:53:06:7a:c3:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:50:02 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=6f45e8616b80ba55063563b7b8ee366279f2dbf761b2e4ff1c445cdf26e38576, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:8e:0b:66:3a:b2:dc:2c:42:79:a3:a6:e6:
                    fd:ac:17:bd:15:26:22:c5:24:2a:74:f5:73:34:3c:
                    8f:e5:26:6d:68:a9:d1:ab:81:fb:47:6e:b7:e3:b4:
                    44:c9:84:e3:b4:90:8f:19:2d:95:71:4c:f8:62:2c:
                    3c:48:e1:06:99:0a:45:0f:44:df:c1:c2:5a:25:2a:
                    f7:60:8e:41:72:aa:15:8e:08:78:3b:0f:8a:2b:bf:
                    13:a2:31:4d:3d:36:77:fb:36:64:d1:01:f6:fc:49:
                    7e:26:f5:7b:24:31:bb:8a:20:59:1d:50:7d:b4:dd:
                    05:cc:58:57:ba:5b:c4:98:50:2d:7a:60:6c:d6:f8:
                    f4:07:48:99:ca:e5:83:c6:09:be:0a:e0:cc:27:b8:
                    ca:f5:9b:82:bb:2c:87:b8:fe:a4:5d:9b:1f:44:d0:
                    48:7b:24:f1:cc:9b:db:90:06:fc:59:1c:44:48:55:
                    1e:01:80:1a:1e:91:17:61:e6:8c:ed:65:a4:27:dd:
                    af:1d:e9:ac:c2:e1:eb:c1:a1:b0:81:34:c8:c4:ed:
                    ea:98:e5:c7:13:42:16:74:b0:3b:35:ec:68:05:a8:
                    2a:62:5c:7c:50:49:d8:b0:19:f3:47:39:e0:ab:3a:
                    aa:ca:6f:d1:70:25:9f:53:cf:02:78:dc:b9:72:cd:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:A1:73:13:28:40:28:B5:C5:2D:27:11:0F:0D:2A:0E:6E:CD:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a47777-b97c-4764-9a68-806a218e83a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:9e:83:d5:6c:51:3e:39:45:3e:ed:fb:ec:33:b4:88:7f:
         24:8e:d1:6b:18:0d:e1:fa:28:2f:ae:52:fd:7b:6d:d5:9d:90:
         14:b9:be:a8:dc:45:5e:13:f0:06:55:65:81:0d:f8:0e:2b:4e:
         9e:c0:c1:12:16:d7:8e:d5:ff:e0:b7:2b:92:3e:92:e1:a0:2f:
         17:4b:e5:f6:9b:ad:20:fb:5a:11:c1:f8:56:08:d3:b6:28:fa:
         54:5f:82:4f:3c:81:1a:b9:d9:30:ed:0c:1e:cb:6b:75:66:71:
         fb:dd:74:ef:71:d4:92:7f:55:ec:88:fa:51:74:da:8b:2b:6d:
         27:14:e1:2c:25:90:83:ff:cb:c2:05:df:d4:53:7a:f8:96:a9:
         28:a0:cb:5d:f3:29:b7:97:c7:78:f3:47:86:f7:a3:40:cb:ca:
         ba:50:b5:11:a0:42:3a:8e:fe:5e:61:6f:0a:51:4a:5b:d7:c9:
         9a:74:bf:85:ba:1f:42:90:a9:d5:c0:1e:52:50:ab:6f:8f:54:
         dd:41:b3:f1:ae:6d:4f:01:d3:95:8b:8b:d5:e2:ec:e4:d2:2f:
         3b:a1:87:e3:70:9e:4a:9a:52:0b:1b:77:cb:9d:b6:12:4c:74:
         26:7f:24:b7:82:0b:06:d8:70:75:ea:50:2a:0b:5e:40:84:c6:
         00:f7:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----