Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb6221fd-9102-4d2d-9756-de24c56fb021.roa
File:                     cb6221fd-9102-4d2d-9756-de24c56fb021.roa (raw, json)
Hash identifier:          veR2nDiSSZhRHHim+Im0zNOFQHJ+okdv1+T9x4etTY8=
Subject key identifier:   DF:86:1C:25:07:2B:27:B9:BF:9A:56:E0:5B:81:AD:54:E9:EE:08:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D00E913BDC9A8CB74E477F8207630CCFC2207E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb6221fd-9102-4d2d-9756-de24c56fb021.roa
Signing time:             Mon 20 Oct 2025 02:31:47 +0000
ROA not before:           Mon 20 Oct 2025 02:31:47 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:00:e9:13:bd:c9:a8:cb:74:e4:77:f8:20:76:30:cc:fc:22:07:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:31:47 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=258e4ca8ea8f5b2ff9c661cf9b041ed7f6d584597340729093f33f73032a89ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:c4:b8:78:09:bf:dd:cf:8b:71:76:37:ca:
                    92:e9:47:a7:f9:76:9d:c6:80:c7:be:a4:7f:06:7c:
                    ce:96:6d:62:9d:bc:f8:7b:22:4b:52:ba:7f:bf:5a:
                    d5:b7:92:69:83:82:e1:5b:9a:cd:b9:91:8e:09:f1:
                    29:a8:f5:d4:42:5e:da:32:10:e5:83:f4:5c:d1:63:
                    18:66:48:e2:98:53:bc:41:48:ab:a5:6c:eb:7a:f1:
                    48:75:df:5a:96:2c:17:7a:f5:7c:9b:4a:51:86:02:
                    b3:ae:b4:7a:40:14:eb:aa:80:4b:d0:08:17:92:cc:
                    9c:79:65:98:e6:d6:e5:a4:23:a7:a5:91:b8:46:05:
                    cb:df:59:c5:a8:88:8b:03:97:a1:64:98:ec:d7:39:
                    a5:f8:0d:3b:1d:5f:f7:10:44:b9:a4:f2:b6:86:c1:
                    ee:67:86:9f:e9:06:7a:5a:35:c1:2f:c8:ee:0f:2f:
                    cb:c7:29:fd:29:d2:3d:16:de:a0:8b:02:a7:fd:ff:
                    34:dc:4f:8e:fa:a3:a7:3b:13:db:7d:94:97:98:1c:
                    66:ff:a5:3b:e1:ea:68:dd:5b:cc:99:05:58:f7:5f:
                    36:e5:8c:dc:1b:73:22:fc:c2:1c:13:14:9a:d0:97:
                    37:18:b0:b2:11:bb:97:1a:db:74:fe:6e:68:39:6e:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:1C:25:07:2B:27:B9:BF:9A:56:E0:5B:81:AD:54:E9:EE:08:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb6221fd-9102-4d2d-9756-de24c56fb021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:41:05:f1:fc:65:e0:2b:f3:54:3f:38:50:f1:69:d3:93:
         3a:d1:b0:1c:65:49:55:52:7e:58:ae:91:e5:3d:46:1d:ce:8d:
         21:66:54:66:74:15:2e:7b:ab:d3:64:b5:4f:5b:7a:4e:1d:71:
         bc:50:65:87:a1:89:58:7b:ad:28:29:09:3b:40:7f:2c:5f:49:
         73:95:b7:51:c9:46:f4:eb:e8:d0:aa:67:ed:81:43:87:58:99:
         5f:85:93:6c:66:ab:6a:d8:ed:78:76:08:64:ee:b3:47:6d:10:
         5b:4e:ce:37:08:28:de:bd:ab:27:e1:7b:69:e3:26:e5:36:8c:
         43:27:ff:79:9d:5a:61:58:e6:0f:28:05:99:ba:9e:ce:54:30:
         92:46:30:f4:0a:c6:c0:55:d9:73:4f:4e:1b:37:59:1f:67:d3:
         b6:66:d6:c3:a9:9d:55:20:a2:88:fd:b4:88:b7:91:f1:00:85:
         5e:0e:fe:55:c9:06:f3:f2:9f:e8:ab:ed:7b:ff:70:ee:b6:d7:
         a6:d2:24:8f:d8:43:23:9b:c8:31:d5:aa:f1:48:bb:0b:25:9f:
         7c:79:b9:3d:81:64:c0:85:1e:1a:4a:4f:4c:4e:c9:cd:0a:62:
         63:9a:81:c7:83:93:54:fd:6d:15:be:a8:7a:d7:e5:bf:81:87:
         01:03:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----