Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed488487-5b2e-4a22-a5ea-f35029d02607.roa
File:                     ed488487-5b2e-4a22-a5ea-f35029d02607.roa (raw, json)
Hash identifier:          dd0d2zARlHs+NOL6YF5bGHNDEMy+lrNONlmwcWpnqrs=
Subject key identifier:   B6:CD:3E:05:82:1D:FB:B0:FB:78:B6:17:28:92:C5:4E:10:5B:66:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       459CF0396F99781074547B2DEC152AE59F3A43AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed488487-5b2e-4a22-a5ea-f35029d02607.roa
Signing time:             Mon 20 Oct 2025 02:50:10 +0000
ROA not before:           Mon 20 Oct 2025 02:50:10 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9c:f0:39:6f:99:78:10:74:54:7b:2d:ec:15:2a:e5:9f:3a:43:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:50:10 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=e57ad45c8c75bfd7f38c993d5064823a43894bdfc05614bde0bd452a512585aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:9b:19:ec:d4:94:80:55:d2:42:aa:9c:b1:
                    4d:86:c0:8d:e3:1b:b8:00:fa:cc:b6:ff:fd:04:1e:
                    cd:86:62:5b:00:90:5c:28:be:7c:a9:9b:3f:6e:8c:
                    e9:29:35:7b:f7:7d:f4:73:a7:94:93:be:b0:d8:d7:
                    ef:1b:8f:70:8d:e3:62:90:ba:86:64:99:63:9a:61:
                    2b:09:ce:40:01:f1:81:82:3e:9e:05:34:61:89:59:
                    24:ad:9d:e3:a3:c1:fb:75:ca:b8:f4:ac:b7:18:d8:
                    57:c7:be:46:f9:66:ba:8c:2f:b4:d7:80:19:1b:f8:
                    e2:ea:91:17:64:a2:33:dc:0d:4e:aa:a8:1d:2e:a3:
                    13:62:34:4c:f7:d7:fe:7b:ea:2e:70:73:e4:1e:54:
                    da:a5:8f:76:8b:5a:71:6a:17:a8:20:0f:ad:a7:f3:
                    bb:e3:26:1e:d2:96:3a:e1:37:ae:45:cd:a3:9f:0f:
                    00:e6:2e:da:1e:11:d4:50:ea:c0:bb:33:1a:8a:72:
                    ce:97:b9:11:ca:a5:24:f8:02:fe:0a:89:90:18:06:
                    be:98:50:21:48:3c:b2:ef:fb:28:2d:57:20:13:78:
                    3d:c7:bf:fe:62:5a:56:18:07:52:90:74:2c:52:28:
                    a1:59:f6:69:17:1b:5c:30:2e:48:92:8f:88:74:67:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:3E:05:82:1D:FB:B0:FB:78:B6:17:28:92:C5:4E:10:5B:66:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed488487-5b2e-4a22-a5ea-f35029d02607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:5c:ac:02:4a:2c:29:d3:24:ef:26:8e:d7:a0:50:95:e5:
         ad:71:ee:44:4b:a8:64:c5:67:f1:99:3e:6a:60:d6:b0:d0:d2:
         db:ba:28:3d:8b:f2:6e:4b:23:aa:64:e4:96:36:ea:a6:77:21:
         da:67:97:f8:a9:0d:c1:74:9f:59:0a:c4:e9:90:12:11:87:ca:
         b7:f9:54:e3:d7:1e:b1:da:4e:c2:7f:9f:b9:2b:60:45:60:65:
         27:db:e3:30:77:f9:0e:8b:cd:b8:78:a8:ad:8a:c6:d3:af:da:
         70:52:1e:7f:e3:a4:53:15:71:97:9d:47:d0:e8:47:f3:4a:44:
         34:3c:84:9e:7e:63:1a:a2:28:e3:57:86:e6:dc:15:82:45:89:
         87:87:ad:73:d0:6d:4c:d6:ee:2c:b7:59:fc:d6:d4:09:77:c1:
         fc:eb:ec:23:05:41:c8:85:a0:d8:8f:6e:d9:39:be:c9:f9:ee:
         47:56:46:1c:a5:67:29:9d:8e:85:f9:75:a1:46:e4:4c:94:77:
         d9:a6:45:67:db:7b:de:40:86:ef:c6:e3:3a:67:c3:c6:51:d8:
         69:8f:a3:ed:50:42:06:9f:98:5e:6a:75:2a:2d:f7:3f:19:5d:
         b4:54:4e:91:85:f8:34:9f:3c:24:25:c5:6f:51:f6:4b:a5:b9:
         7d:ec:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----