Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6f06d7d-4d76-4950-9943-8ee17bd08463.roa
File:                     b6f06d7d-4d76-4950-9943-8ee17bd08463.roa (raw, json)
Hash identifier:          xnxEvmtMHVdkYwo8y8lVVfxmUU3r3jNj+QaHPPWQSZ4=
Subject key identifier:   D3:33:0A:A1:BB:65:BE:6C:D3:E2:38:DC:18:0E:60:39:92:AE:E3:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26980C25E1CD19A3FA68AA470680B8B89549F0D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6f06d7d-4d76-4950-9943-8ee17bd08463.roa
Signing time:             Mon 20 Oct 2025 01:40:02 +0000
ROA not before:           Mon 20 Oct 2025 01:40:02 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:98:0c:25:e1:cd:19:a3:fa:68:aa:47:06:80:b8:b8:95:49:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:40:02 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=493a1c76158da4a79358a07adc99fa00b9365a985ea0df3da5010a2fcda4d83f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:34:84:11:6e:5d:e6:de:a9:f1:09:d5:fd:
                    4b:60:d7:c5:aa:b7:38:0f:82:77:07:ba:42:b2:00:
                    f5:30:cb:e5:16:b4:47:aa:03:19:f9:d9:d1:55:ef:
                    83:a3:df:b9:d7:60:65:2c:fb:27:92:37:d4:ae:00:
                    af:9d:1b:d0:d9:61:b5:22:2d:82:28:e8:f2:11:48:
                    64:2d:ad:dd:72:3d:1f:20:0f:63:0d:72:80:41:98:
                    12:c2:8a:78:24:fd:d1:67:6f:31:a2:80:81:34:ff:
                    ed:c7:4b:79:bc:e5:63:36:85:11:9a:6c:2d:b4:3d:
                    bb:03:5e:14:ad:43:1f:5c:37:f9:eb:b8:18:d7:b6:
                    c4:a2:2b:72:2e:f2:9a:c9:b4:84:1f:84:a9:85:0e:
                    8d:98:4f:de:0c:e8:15:8b:3a:d2:a4:ec:73:b1:23:
                    51:19:32:7e:ef:2c:e5:1d:8b:10:d3:15:f7:39:60:
                    fb:f9:03:b6:c5:30:65:58:50:6a:72:04:dc:9d:b2:
                    fb:42:80:41:7f:11:8b:66:3c:a2:eb:bf:cf:71:47:
                    a4:8d:93:52:b2:28:6b:20:ef:6b:c9:c7:7e:6e:68:
                    bb:45:ce:a4:14:3e:e1:3c:63:57:2a:af:3b:d6:76:
                    07:33:71:59:fa:98:62:24:74:78:6a:77:74:14:b5:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:33:0A:A1:BB:65:BE:6C:D3:E2:38:DC:18:0E:60:39:92:AE:E3:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6f06d7d-4d76-4950-9943-8ee17bd08463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:b3:95:b5:8c:53:97:86:a1:89:84:ef:92:65:d8:47:d9:8f:
         f4:2c:18:9f:80:b2:b6:15:15:1d:25:ae:42:f8:f2:0b:95:d7:
         7a:5d:44:fc:33:83:f0:da:fe:04:ce:6e:19:3d:38:7f:f0:6d:
         dc:ac:00:88:50:a7:61:d3:d5:48:fc:94:bc:0b:ff:78:6a:ec:
         85:27:c4:be:ae:b7:98:80:77:cb:52:1a:38:2b:b8:a3:0c:f5:
         f4:34:41:cc:c2:52:a1:14:42:b7:5d:17:c3:c7:81:7c:d2:11:
         06:16:b7:a7:67:df:43:d8:20:f0:c1:df:e2:7b:19:37:76:59:
         af:b1:c9:a8:e2:f6:22:1f:a8:24:ac:9c:74:02:a5:0f:44:58:
         4a:47:f4:ab:d0:84:4b:fb:41:e4:45:db:6a:b1:b2:c5:eb:ec:
         38:18:8c:22:82:fe:57:93:26:93:ce:44:52:ec:a7:5b:7c:33:
         82:21:79:e2:74:37:ff:8e:40:20:32:50:10:95:0b:28:3b:4a:
         c1:2e:e2:2a:0c:20:ef:98:87:8d:0f:ba:29:2b:4e:c9:98:7f:
         47:93:74:08:69:e6:81:52:50:a2:2a:2c:e7:5f:08:a6:8a:34:
         1a:b7:23:fc:1b:4b:14:7a:76:fd:79:7d:df:ef:87:b8:2e:69:
         54:15:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----