Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2e4c6a-9d60-4383-80bf-f4827351eacd.roa
File:                     6b2e4c6a-9d60-4383-80bf-f4827351eacd.roa (raw, json)
Hash identifier:          +uDh2IzG50H2tCySdJexnlc46VGOVWXdog0NQKQszR4=
Subject key identifier:   C9:61:6C:FB:89:C1:5B:81:91:54:6A:2C:CA:AE:3D:13:AC:88:8E:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       186F36A82500C9A6D73CBC9FE899A9B0284382D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2e4c6a-9d60-4383-80bf-f4827351eacd.roa
Signing time:             Mon 20 Oct 2025 04:42:07 +0000
ROA not before:           Mon 20 Oct 2025 04:42:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6f:36:a8:25:00:c9:a6:d7:3c:bc:9f:e8:99:a9:b0:28:43:82:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:42:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a08a8b7aa55687903a09448c496faa4c1910306b0f43c9ab0f1a7bf62c5edb9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:e9:06:35:84:bc:8b:27:2b:e3:c6:8f:f6:
                    9d:09:fe:5e:44:ad:6d:67:3f:76:21:c4:0e:9b:2c:
                    d2:94:b3:1f:a3:e0:6c:9b:47:37:32:30:63:ba:ae:
                    49:24:3c:2e:13:38:7b:69:f9:ba:eb:96:ca:ee:f0:
                    b2:c5:10:1e:28:40:1b:f6:62:f8:e9:db:19:04:b0:
                    5b:eb:4c:a9:32:74:fc:f2:db:be:7e:1b:4d:02:8a:
                    53:c5:07:98:2f:70:9d:de:a9:89:51:16:0d:8d:3c:
                    f8:51:bd:1b:2e:ef:e5:f8:42:f7:fb:92:52:2d:92:
                    06:96:9e:0c:5a:06:ba:62:6f:33:8d:be:36:2c:6b:
                    24:0c:78:31:39:f8:c3:6e:0c:fc:fd:0f:2f:74:c2:
                    08:d3:2b:e1:60:12:dc:4c:df:92:61:83:5e:b1:6f:
                    a6:4c:a7:df:a0:ce:c7:99:f1:9b:2d:80:9f:3f:bc:
                    8b:0a:8e:c1:ed:c1:79:81:7a:f9:6e:0f:ed:66:d3:
                    d1:dc:9d:1e:24:45:13:8a:ea:88:a2:9c:5c:98:9a:
                    9d:d6:e1:8c:6b:62:a3:2b:71:c9:39:32:00:d6:1b:
                    1a:fd:ee:ea:f5:ad:0e:18:fb:1f:9e:52:1f:b7:84:
                    4d:fe:1f:ea:30:8d:aa:4c:69:d5:a1:a3:b4:fe:7e:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:61:6C:FB:89:C1:5B:81:91:54:6A:2C:CA:AE:3D:13:AC:88:8E:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2e4c6a-9d60-4383-80bf-f4827351eacd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:b1:8c:a8:1f:3c:a4:09:01:b8:3a:06:df:8d:fd:92:a8:20:
         b3:49:28:c6:28:10:cd:ea:3a:83:c4:c4:2e:0e:9a:e5:02:66:
         08:f1:b4:26:57:b7:5c:48:dd:85:d1:65:bd:66:e6:2b:cd:7c:
         67:7d:5b:a1:62:d1:b0:4d:8f:c1:95:0e:2f:77:31:f8:15:bf:
         2d:74:df:cf:5a:c3:49:2a:88:e6:2a:aa:57:32:67:51:6f:f7:
         6c:ed:8d:ab:72:a9:55:cb:80:9f:2e:80:aa:ee:29:46:27:8c:
         13:cb:c4:29:70:6d:ed:e7:1d:0a:e3:58:d0:38:8d:96:e8:19:
         4d:f9:1f:eb:fe:0c:1f:2d:0d:52:d7:74:c5:15:6f:55:30:7f:
         e4:8f:30:c7:1d:f1:6f:6e:16:de:dc:e7:d2:c7:63:99:cd:ec:
         b6:73:40:94:55:fb:f8:27:11:5d:ab:4a:06:56:7a:bc:6a:32:
         b6:d6:68:f3:90:2b:c3:8c:dc:d1:26:09:b1:4f:5b:f7:d0:e0:
         1e:c2:d4:2d:f3:1d:38:d2:d3:81:ad:f1:65:79:ad:f4:14:01:
         be:25:4f:36:90:88:a8:f2:84:7e:0b:ea:ed:b7:6f:cd:1f:ce:
         1b:8d:20:63:a6:f9:19:2f:09:80:c1:53:86:4e:72:4c:4b:0a:
         a4:c0:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----