Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddf33cd-b916-4cbc-9ac9-86922c7c6168.roa
File:                     7ddf33cd-b916-4cbc-9ac9-86922c7c6168.roa (raw, json)
Hash identifier:          BVTWSz/kjq4KtqBI6pkdCfnnpD7rmcno3yVRa5lnUP0=
Subject key identifier:   ED:70:8E:5F:A2:80:43:02:75:9D:2E:B0:6A:68:A4:07:52:AA:DB:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03C96888C60D8B59EB633AC94416DE51B5D02B65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddf33cd-b916-4cbc-9ac9-86922c7c6168.roa
Signing time:             Mon 20 Oct 2025 06:21:38 +0000
ROA not before:           Mon 20 Oct 2025 06:21:38 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:68:88:c6:0d:8b:59:eb:63:3a:c9:44:16:de:51:b5:d0:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:21:38 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ea0e8ef058cd061d2e27b8d60628b57f4edf8ef2f637472c61ae23d4d7dd7fbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:42:e6:b0:93:80:f9:0c:be:7e:5f:11:98:
                    95:86:53:ec:d7:2a:22:7c:2b:85:d0:78:f0:c8:ca:
                    3e:59:a2:d1:96:c6:88:19:ff:91:40:0d:93:08:2a:
                    a0:de:10:fa:0d:a4:37:ab:ac:a8:29:a1:76:06:ac:
                    94:d2:3f:a2:fa:be:23:5c:57:15:4e:8c:4b:21:1d:
                    36:c0:a9:2a:29:be:e1:97:94:23:2f:4d:e9:c5:5e:
                    92:45:4c:31:76:d8:b6:91:d8:91:e5:a0:a5:1c:bf:
                    ea:01:f3:77:08:e9:04:be:bb:f6:c4:7f:10:3d:21:
                    7e:42:1b:06:2a:1d:45:28:5c:af:09:2e:33:e3:e4:
                    91:ed:14:02:db:0c:41:69:9e:f6:b2:ba:45:28:d6:
                    1d:b4:d0:b7:9a:2a:66:7c:bf:d6:0e:68:31:f3:68:
                    81:28:27:6d:59:6e:f3:43:9e:30:ee:94:a3:e9:42:
                    2b:98:73:bf:e0:9b:8e:59:29:36:06:db:f9:e0:3b:
                    42:c5:55:f6:a7:e4:93:16:f2:d9:f1:a6:50:be:88:
                    af:1c:12:31:8d:e1:39:ea:4e:68:fc:40:58:0e:57:
                    55:9b:70:6b:29:90:3f:d1:95:b2:9e:78:a9:01:73:
                    32:60:ce:50:01:1e:2c:3a:68:d1:aa:8d:52:e6:72:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:8E:5F:A2:80:43:02:75:9D:2E:B0:6A:68:A4:07:52:AA:DB:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddf33cd-b916-4cbc-9ac9-86922c7c6168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:66:51:62:7d:f3:2a:b3:29:0a:60:d1:4c:ae:c1:51:d4:c0:
         8c:c8:52:07:b0:c3:91:34:fa:eb:07:ca:6a:15:41:73:d4:8e:
         04:f0:c9:04:b6:d7:43:53:b0:50:db:fd:48:00:89:ea:5f:b7:
         4c:eb:43:90:c8:d7:32:d6:1c:49:30:6e:00:e2:d5:f6:74:4c:
         cc:9a:c4:2e:5a:42:d0:bc:44:23:f0:86:23:d5:85:cf:61:c3:
         5f:84:26:bc:2c:4f:d9:60:69:07:e2:96:42:af:c7:bc:22:8d:
         e7:e8:d9:7b:1e:b6:ea:4b:85:31:dc:7a:81:77:31:45:9f:b9:
         12:bc:c4:37:55:22:70:ee:0f:17:6c:03:59:b3:49:0a:0e:54:
         63:b9:e2:51:b1:69:f1:95:db:7c:a7:f5:f5:74:a2:cd:db:77:
         57:7d:ba:9f:7d:09:d7:66:d4:f6:94:40:16:b7:72:b4:bf:39:
         c6:8b:42:9b:79:ec:f4:20:9b:ca:0e:fa:c9:19:f5:b9:bd:aa:
         f8:46:25:65:cc:64:ae:2b:41:0d:72:a5:0b:4e:d5:d8:05:f3:
         23:b6:32:43:9b:62:30:ed:b5:de:0c:bb:ce:0f:a0:4a:cc:5d:
         c7:54:35:e6:94:20:d4:e4:d9:dc:dd:a1:b6:d1:39:56:ea:18:
         2a:b6:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----