Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d429f0-3b8f-4be5-9330-38c49d7552be.roa
File:                     d4d429f0-3b8f-4be5-9330-38c49d7552be.roa (raw, json)
Hash identifier:          KdU8RzYPs9U4LUoSWQ6xtKTKWihmNfw7nnmgsRfzRr0=
Subject key identifier:   93:BA:88:C5:56:3C:5D:3F:EA:B7:1D:CB:1A:52:09:68:B8:8C:7F:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F157CC28F2317D300FFA40C40321FEB0E7313F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d429f0-3b8f-4be5-9330-38c49d7552be.roa
Signing time:             Sun 19 Oct 2025 00:20:45 +0000
ROA not before:           Sun 19 Oct 2025 00:20:45 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:7c:c2:8f:23:17:d3:00:ff:a4:0c:40:32:1f:eb:0e:73:13:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:20:45 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=4bfdc28ed0e229b33ed485d15f5ed9af44ec2b80c2a86914f2ffd724fceab46d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:c9:31:b3:5c:d1:45:4a:63:e0:35:21:2c:
                    c1:b3:ac:15:46:43:e8:c6:d8:e1:b8:c3:86:a3:3a:
                    f8:8a:82:8b:3a:1b:2e:e1:18:2b:8c:b5:57:98:36:
                    34:f1:76:6b:e3:71:8f:a5:90:05:3d:24:c5:41:0e:
                    63:4e:7c:44:f4:4e:0d:91:a8:a1:d9:07:15:b0:e4:
                    6a:e3:a4:6d:a4:33:a1:ad:80:78:eb:34:d0:54:ac:
                    16:14:69:8b:69:88:3b:ff:d4:34:df:dd:0e:0d:f2:
                    66:f7:1e:79:77:0e:86:2a:56:53:9c:d1:d0:e3:6f:
                    02:de:c1:15:07:5f:07:15:88:d5:c1:d5:a1:21:f5:
                    69:95:fa:50:da:f9:75:c4:11:f1:0a:df:24:b5:22:
                    80:ca:91:fa:d0:6b:fb:45:8c:32:b2:2b:09:3c:63:
                    c8:a0:6e:80:0f:18:dd:9e:03:ee:a1:c1:5e:ea:cf:
                    d1:0e:90:5e:da:a4:37:99:42:02:6d:fc:9f:1f:92:
                    31:4a:41:8d:fa:ee:73:b5:2b:3c:c4:83:96:31:06:
                    1c:09:3c:7a:a0:87:8e:13:a6:f5:d2:18:de:86:c5:
                    7c:a0:38:96:ac:27:ef:96:a1:9b:d5:a2:1d:a2:f1:
                    39:ea:ea:21:a0:68:e2:6e:be:75:b0:1b:59:fc:7c:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:88:C5:56:3C:5D:3F:EA:B7:1D:CB:1A:52:09:68:B8:8C:7F:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d429f0-3b8f-4be5-9330-38c49d7552be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:55:95:c8:a4:7e:34:27:29:52:7a:82:51:a8:76:f2:d3:0b:
         f5:3a:1d:a5:05:35:c3:c3:71:5d:e0:a0:e3:e7:6f:90:c2:e5:
         fe:85:aa:31:50:bb:4f:ef:95:70:4e:86:b0:f0:8b:7f:10:6a:
         3e:44:cc:cf:8e:fb:f4:7b:4f:41:e0:7f:d8:d3:ae:a9:97:42:
         91:10:10:4e:5d:4e:e8:08:a2:cb:fa:e4:eb:36:03:a2:28:28:
         97:63:a9:57:3c:46:05:2f:f5:8a:6c:eb:7e:4c:9a:b6:4e:32:
         ee:bd:9a:2c:4e:88:6b:df:a3:eb:68:f7:96:81:31:70:08:7a:
         0a:55:f3:ee:4a:15:18:0d:94:ee:b9:6b:a6:8b:f7:50:45:26:
         f5:f8:93:b4:5e:9a:81:c7:e6:cb:cd:97:44:79:5a:51:60:8d:
         92:8c:c6:67:d2:a9:ac:f0:ab:d6:e9:f7:10:3a:48:70:3d:fc:
         ef:92:a2:fa:59:3c:bb:65:ad:03:5a:13:76:0c:dd:de:1b:3a:
         49:31:da:25:4f:2a:f6:07:fe:2e:0f:6a:b2:d7:80:f1:af:01:
         66:18:e1:16:75:4e:af:99:21:b1:d9:95:1b:8b:1d:a8:33:ad:
         11:fe:ad:9c:8c:89:17:40:55:ee:18:91:54:3f:43:4d:eb:cf:
         9a:b9:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----