Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a98c94f-af73-4726-88ec-9a043d9867f9.roa
File:                     7a98c94f-af73-4726-88ec-9a043d9867f9.roa (raw, json)
Hash identifier:          PyWpyS2Z48Nzh3i3WNWoL+kJHA+Gd1o6+6dFvnQUfLE=
Subject key identifier:   5D:4B:75:EE:86:05:55:EF:58:AB:E5:F4:9A:42:F4:9A:65:78:BC:B1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CDA64EBF3520376173A1CEA8C1E0722170A1D42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a98c94f-af73-4726-88ec-9a043d9867f9.roa
Signing time:             Mon 20 Oct 2025 04:41:24 +0000
ROA not before:           Mon 20 Oct 2025 04:41:24 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:da:64:eb:f3:52:03:76:17:3a:1c:ea:8c:1e:07:22:17:0a:1d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:41:24 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4c236f9f3c6e62554b4215d3e8894fc2a0eb05bebbcb2a5fedd469b4a3b99abb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:d4:77:84:a8:e3:bd:e2:e4:5e:5b:5b:1b:
                    be:fd:40:43:03:b0:21:d8:33:03:4f:c4:59:da:af:
                    cf:f6:b4:99:63:72:3a:f5:35:cc:c7:0b:84:48:73:
                    1e:7d:1d:fc:c3:9e:08:e7:fb:f1:8c:59:21:3f:1a:
                    40:00:61:24:27:10:0f:7f:bc:45:ef:74:4e:7c:a9:
                    3c:ae:dc:11:d2:06:0e:56:6f:61:49:58:f4:b3:62:
                    34:26:73:a4:e8:5c:3c:0f:d9:74:8e:88:4e:16:5f:
                    eb:0e:08:90:73:0d:9c:d3:d3:d6:37:9d:d0:42:57:
                    c5:07:37:09:58:37:d4:f1:62:d5:ad:29:86:0d:9e:
                    c8:23:48:1e:ee:49:4f:30:69:d9:25:d2:db:18:d8:
                    fb:00:a7:37:e7:bf:ef:94:ca:62:d5:dc:71:24:1b:
                    59:04:14:68:fd:f5:7c:34:d8:93:97:bb:8d:7c:8f:
                    a7:60:a3:82:ab:16:16:8e:b8:4b:22:9c:fb:44:8a:
                    f4:3e:6b:1d:b3:0f:49:bf:96:59:a8:3a:f1:37:6c:
                    ca:65:fb:01:88:11:a4:e9:fc:8f:65:ff:29:35:48:
                    1c:f4:dc:0f:ac:7f:20:e2:fd:92:e9:c9:ea:27:4d:
                    77:07:d6:61:e6:48:1c:ef:ea:49:02:ad:9a:76:91:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:75:EE:86:05:55:EF:58:AB:E5:F4:9A:42:F4:9A:65:78:BC:B1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a98c94f-af73-4726-88ec-9a043d9867f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:3e:86:2c:77:17:e9:a9:1d:cb:6e:80:e0:9c:fc:cb:ef:
         83:e8:e6:f8:3c:c6:ef:2d:18:ea:cb:0a:46:10:42:80:19:88:
         75:0a:9d:24:b5:12:82:b7:41:23:e5:fe:e3:5b:c2:b5:f2:60:
         60:9d:58:01:36:92:35:21:8d:ec:31:94:e7:64:fa:83:98:66:
         2d:68:c0:14:1a:56:90:48:40:89:85:16:76:2e:66:64:a3:13:
         03:27:9c:c0:57:94:b4:eb:c8:ab:ac:b4:5e:dd:9e:24:d4:88:
         4c:9e:22:24:88:0a:29:91:0d:b9:bf:7b:95:2d:b9:c7:3b:02:
         bc:aa:e2:6f:41:23:e2:98:3c:d3:09:13:99:97:00:ef:ce:b7:
         0c:96:a8:42:36:0f:7b:1f:c5:1c:71:40:f2:38:04:41:e9:24:
         bd:16:0c:46:fc:0f:18:1f:b0:6c:72:ed:a3:37:0e:58:fb:02:
         24:42:0b:c2:d4:d7:3c:8c:30:54:7f:d8:71:a3:2b:bf:0d:f0:
         47:1a:d7:f4:a7:bc:8d:32:76:42:d8:51:13:fb:e3:94:be:d0:
         83:ac:03:32:f3:d8:cd:06:e8:6b:ea:93:c0:d7:f2:f8:c0:b8:
         d3:45:81:fa:77:ae:78:bb:ef:bc:8b:1e:ea:53:e7:f3:b3:0d:
         87:09:d3:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPNpk6/NSA3YXOhzqjB4HIhcKHUIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQ0MTI0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YzIzNmY5ZjNjNmU2MjU1NGI0MjE1ZDNlODg5NGZjMmEw
ZWIwNWJlYmJjYjJhNWZlZGQ0NjliNGEzYjk5YWJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv4NR3hKjjveLkXltbG779QEMDsCHYMwNPxFnar8/2tJlj
cjr1NczHC4RIcx59HfzDngjn+/GMWSE/GkAAYSQnEA9/vEXvdE58qTyu3BHSBg5W
b2FJWPSzYjQmc6ToXDwP2XSOiE4WX+sOCJBzDZzT09Y3ndBCV8UHNwlYN9TxYtWt
KYYNnsgjSB7uSU8wadkl0tsY2PsApzfnv++UymLV3HEkG1kEFGj99Xw02JOXu418
j6dgo4KrFhaOuEsinPtEivQ+ax2zD0m/llmoOvE3bMpl+wGIEaTp/I9l/yk1SBz0
3A+sfyDi/ZLpyeonTXcH1mHmSBzv6kkCrZp2kXYDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXUt17oYFVe9Yq+X0mkL0mmV4vLEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhOThjOTRmLWFmNzMtNDcyNi04OGVjLTlhMDQzZDk4NjdmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnJowDQYJKoZIhvcNAQELBQADggEBAJ7IPoYsdxfpqR3LboDgnPzL74Po
5vg8xu8tGOrLCkYQQoAZiHUKnSS1EoK3QSPl/uNbwrXyYGCdWAE2kjUhjewxlOdk
+oOYZi1owBQaVpBIQImFFnYuZmSjEwMnnMBXlLTryKustF7dniTUiEyeIiSICimR
Dbm/e5Utucc7Aryq4m9BI+KYPNMJE5mXAO/OtwyWqEI2D3sfxRxxQPI4BEHpJL0W
DEb8DxgfsGxy7aM3Dlj7AiRCC8LU1zyMMFR/2HGjK78N8Eca1/SnvI0ydkLYURP7
45S+0IOsAzLz2M0G6Gvqk8DX8vjAuNNFgfp3rni777yLHupT5/OzDYcJ05k=
-----END CERTIFICATE-----