Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a2ce326-51bc-4b23-95aa-7fcb4a4070b3.roa
File:                     8a2ce326-51bc-4b23-95aa-7fcb4a4070b3.roa (raw, json)
Hash identifier:          IxEfXHICd5TX5/zhL2KvxstZGVQyOghCqzNxbTeb2wQ=
Subject key identifier:   C4:15:64:3F:E9:34:D5:4C:79:6D:BC:89:82:59:2B:D3:19:8D:53:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1CFB7B7E0BE6D8B34DD68AC350AF366E921A8252
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a2ce326-51bc-4b23-95aa-7fcb4a4070b3.roa
Signing time:             Sun 19 Oct 2025 02:20:04 +0000
ROA not before:           Sun 19 Oct 2025 02:20:04 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fb:7b:7e:0b:e6:d8:b3:4d:d6:8a:c3:50:af:36:6e:92:1a:82:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:20:04 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=227b3f179c3d0d70bc3cdd5c821c43b43c4b876f1d8c4aaa6eea2bfb9b9eafea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:ef:47:e5:cb:fa:d5:a0:60:06:35:26:ae:
                    fa:7c:eb:af:4c:cc:bf:c6:08:33:da:32:49:64:4d:
                    80:ae:cb:d9:b7:80:dc:f9:24:97:be:a9:b4:b2:17:
                    78:92:b5:4f:d2:d5:93:29:04:4b:54:15:60:4d:63:
                    1f:b7:8e:7a:46:6d:91:85:b3:2c:0c:64:1a:16:79:
                    1c:62:23:9f:6c:f7:5a:04:47:37:63:37:40:95:25:
                    f4:4e:95:1a:9f:ac:60:fd:64:16:61:3a:92:b6:4e:
                    d5:87:4e:17:93:8f:e2:20:0e:9c:3f:89:26:6f:a4:
                    ec:9b:d6:5e:86:c0:d5:18:6a:e1:89:8f:91:83:23:
                    d3:1b:16:fa:1e:c4:28:40:4f:85:45:b5:c3:1f:fe:
                    c8:ec:5f:17:36:78:0d:79:c5:fd:3c:e5:35:c9:02:
                    ff:7e:3c:ea:ac:86:67:ac:14:b4:49:e0:ac:3b:f8:
                    0e:e6:a4:58:3d:dd:21:81:f5:74:b0:03:98:5e:d1:
                    22:9b:ae:ef:74:72:ce:0d:c0:28:b0:0f:28:42:89:
                    35:99:3d:b3:49:4b:e7:46:a1:90:50:94:1b:8b:7b:
                    46:d9:12:09:6d:d4:94:53:77:20:ad:02:b6:8a:01:
                    7f:b2:39:e7:83:57:14:d6:f6:39:3b:26:7b:b1:8c:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:64:3F:E9:34:D5:4C:79:6D:BC:89:82:59:2B:D3:19:8D:53:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a2ce326-51bc-4b23-95aa-7fcb4a4070b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:cf:27:e0:8a:5d:ea:0e:53:05:ad:88:b8:76:8f:d9:07:
         61:64:23:13:88:46:30:02:5e:c3:23:b1:9f:18:c9:a2:f1:c8:
         58:17:25:80:b2:18:b6:1e:21:40:3a:7b:93:60:7a:72:b7:4a:
         90:1e:ca:a9:f1:48:3a:14:7c:82:4d:52:20:b6:1c:bd:fa:2b:
         2b:11:31:f5:8a:a9:ae:29:7b:7c:dc:c2:c3:92:68:7e:e2:38:
         45:a7:30:ea:18:37:6f:64:7a:a3:fd:20:0e:8b:1a:50:05:30:
         56:93:ba:ad:9e:ca:b9:f2:62:1d:1b:cc:83:98:ce:ec:a6:93:
         95:63:48:15:09:f0:f2:f2:e9:8a:f4:a3:ac:20:fe:18:f8:78:
         87:83:a5:4b:25:3a:f3:2e:1e:a7:4e:c9:df:f8:68:66:7b:c7:
         f8:11:e6:47:41:61:fa:74:3d:93:d0:a2:30:9a:9a:79:1d:a5:
         b4:52:24:74:bd:d4:78:03:6a:17:17:4b:b4:9c:cf:b9:a1:e0:
         72:4c:cf:b1:d6:17:52:06:ad:91:4b:68:12:18:fe:17:44:4d:
         29:f8:c4:a1:76:52:aa:0b:13:20:48:c4:b6:7e:28:ae:7b:09:
         f4:45:b9:8f:66:6b:d3:f6:41:53:8b:f6:18:d3:c3:ee:cd:e1:
         9c:8b:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----