Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69120c83-5146-4b03-99f3-3eec8dde8627.roa
File:                     69120c83-5146-4b03-99f3-3eec8dde8627.roa (raw, json)
Hash identifier:          UXgsBEVnIDdqoF647PlSytI00LySvb7d0SnY7wrvVos=
Subject key identifier:   B4:87:28:6A:03:21:13:01:69:A3:07:CA:46:68:06:85:68:15:65:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       187C8470B917F74AE539BE4AD76A9C56C298E4A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69120c83-5146-4b03-99f3-3eec8dde8627.roa
Signing time:             Sun 19 Oct 2025 03:20:03 +0000
ROA not before:           Sun 19 Oct 2025 03:20:03 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:84:70:b9:17:f7:4a:e5:39:be:4a:d7:6a:9c:56:c2:98:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:20:03 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=55a0180f264669a23dbf4f28c38bd29cf5dba4a15641adc5245aa1f7909cd89e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:ec:af:9d:7b:9f:a9:9a:cf:24:2c:cf:e8:
                    4a:09:00:cb:67:99:ac:3e:da:5f:20:cf:64:3d:02:
                    85:dd:f8:8e:f2:6e:b9:c2:3e:c5:0a:e7:f8:40:62:
                    f7:12:c1:be:63:0a:6a:49:cf:07:08:6a:93:e6:01:
                    e0:7a:5e:e7:09:60:01:45:bd:26:dd:99:27:94:fe:
                    b9:5b:60:18:a8:d8:f9:b7:bb:dc:f5:75:26:07:04:
                    82:df:22:09:8f:fb:a8:52:2c:f6:36:4e:b9:1d:11:
                    64:c5:e4:d5:79:e2:96:dc:2b:e6:19:1d:0c:f8:f3:
                    d1:2b:4b:b9:a7:d6:3e:38:a4:3c:77:64:99:06:0a:
                    98:b2:f5:84:e2:44:49:5e:9c:c1:6b:c0:0d:79:52:
                    0e:62:ba:ee:a1:98:2c:cf:5e:82:f8:8f:04:71:55:
                    ad:87:9c:fa:d4:08:dc:87:87:83:de:97:b2:82:3e:
                    11:68:44:54:94:7e:97:3d:bc:82:da:40:85:41:4b:
                    2d:37:79:5c:1e:47:c5:99:0e:f9:2b:c6:2c:34:ac:
                    65:52:2d:eb:97:fd:6d:71:e8:6d:40:59:ef:7a:30:
                    14:ad:90:c9:ee:a0:3c:16:f3:20:31:6d:f9:af:fe:
                    03:8d:ce:14:7d:f5:78:f8:7a:78:f6:4f:a0:34:94:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:28:6A:03:21:13:01:69:A3:07:CA:46:68:06:85:68:15:65:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69120c83-5146-4b03-99f3-3eec8dde8627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:4e:03:ac:58:25:4e:cb:a2:0f:32:e1:f9:70:fe:b6:9a:
         91:60:2c:8a:21:3c:b9:a9:e5:8a:09:44:cb:da:7e:d8:45:2e:
         ca:26:0e:8a:d6:ca:20:f9:09:24:c0:ac:30:98:e9:4f:ca:4c:
         f1:91:6a:e8:df:54:41:e7:ed:ce:f9:0b:42:b4:d4:b6:e1:c6:
         19:4d:2f:29:12:91:cd:97:20:69:5e:d9:58:4b:5d:aa:f3:b4:
         fb:7f:65:ad:1b:cd:33:3a:b2:19:99:92:b5:f8:23:a3:a1:cf:
         49:2f:92:60:79:3d:9c:62:e9:89:03:ea:7b:1a:66:18:61:c1:
         4d:e8:c2:f3:78:bf:0b:37:3d:26:93:46:e8:77:d0:0b:f7:60:
         71:5f:ba:0d:2b:94:f7:36:aa:a3:1e:0c:a5:44:e4:b2:e6:19:
         dc:0f:23:3c:a3:b7:53:b5:56:7c:da:a8:f6:1d:77:7e:31:5d:
         60:f9:1b:9e:49:8f:a6:5b:8d:dd:95:10:5f:5f:5e:25:bb:4a:
         f4:e6:fe:cf:c4:97:92:5d:cd:e0:70:86:b4:d7:49:db:2d:9a:
         fa:03:fb:fc:78:bf:4a:72:4d:40:5c:b8:3e:99:f2:11:c2:2b:
         3a:c5:ef:46:b8:23:48:41:a0:68:ac:58:07:58:5c:e2:bc:56:
         27:08:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----