Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc1d4aca-6588-45a9-8666-cf83df1ff359.roa
File:                     fc1d4aca-6588-45a9-8666-cf83df1ff359.roa (raw, json)
Hash identifier:          513C5+NVXg9jrivfRS5MCkJ52lL02t8PSqI5FjyrubE=
Subject key identifier:   70:4B:7E:A6:AA:D9:F1:6D:06:58:15:EE:8D:88:76:99:02:DF:2C:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26A4328F816A3E38B2D11F98AE7F2A287AB385E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc1d4aca-6588-45a9-8666-cf83df1ff359.roa
Signing time:             Mon 20 Oct 2025 05:00:07 +0000
ROA not before:           Mon 20 Oct 2025 05:00:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:32:8f:81:6a:3e:38:b2:d1:1f:98:ae:7f:2a:28:7a:b3:85:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:00:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=deafb19b66f3edf1816d222e64a1da2fc68a33501859ee46a4d06e72ac550439, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:e0:1b:38:b3:97:ef:0b:3a:d1:2a:9a:31:
                    87:e0:44:1d:d0:36:d9:e5:51:e9:2d:91:2f:5f:75:
                    ab:e4:81:0b:a6:7f:78:dc:1e:4c:43:ec:f1:dc:e7:
                    bd:54:04:3d:55:f4:32:c8:32:65:68:a5:94:96:16:
                    8f:0f:f3:c8:13:56:65:b0:f2:82:f1:c0:45:77:4d:
                    31:68:f4:d7:34:fe:53:ca:e0:31:6f:18:41:ab:1c:
                    a7:52:f1:a4:7f:e6:b3:99:2b:b7:f6:e1:b8:ef:e3:
                    64:78:10:4b:49:d8:c8:10:00:29:a4:d6:d2:f8:5a:
                    91:c6:f7:d5:3a:86:dd:5d:d6:77:71:ad:c6:37:14:
                    18:09:75:22:9e:52:36:80:c8:0d:e9:94:7f:73:1d:
                    43:bb:79:c2:2b:73:1d:59:e9:2a:4a:10:82:14:89:
                    ce:97:d3:78:0b:83:31:58:7a:56:fb:87:dd:2e:f3:
                    04:fc:a8:a7:46:b5:b5:fd:89:e3:8b:be:a7:36:1e:
                    8c:6f:67:a9:7d:d5:3f:5d:bf:97:c7:c3:20:2a:79:
                    91:87:e6:ff:38:61:b9:c5:67:84:da:dd:62:27:07:
                    d8:7c:ff:06:5e:ba:12:86:af:64:c1:66:88:fd:ac:
                    92:82:e2:d3:0d:af:39:6f:5e:f2:da:46:e9:44:d6:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:7E:A6:AA:D9:F1:6D:06:58:15:EE:8D:88:76:99:02:DF:2C:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc1d4aca-6588-45a9-8666-cf83df1ff359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:99:6b:a9:66:c0:52:46:be:93:54:e5:a5:29:18:0a:82:
         9e:24:ef:d2:8c:6b:7a:07:e7:3b:3b:c0:76:95:c0:e4:d7:b9:
         88:ea:c0:6c:7f:30:65:c5:b9:e3:3e:fc:4d:0e:b7:2a:16:5d:
         37:53:45:15:a3:0a:93:31:c3:82:a5:6d:a6:90:2f:fb:b9:67:
         9f:54:c8:ab:0a:46:b0:11:4f:34:1e:55:74:ab:54:ed:ee:14:
         31:a5:5c:b7:60:f4:ff:46:7c:a9:f3:5c:4b:09:78:85:33:c0:
         c6:38:84:d5:8c:03:44:46:e2:d8:10:4f:db:d0:17:04:2b:fb:
         6f:cd:4d:3b:cd:8d:ad:47:ca:c8:2b:f9:ac:d3:66:68:da:7d:
         1e:9e:f0:55:4f:d9:bc:4d:7c:65:23:64:90:58:e7:6f:f5:87:
         39:52:e9:f7:b6:85:60:7f:2f:57:e0:44:8c:6c:99:dc:f6:a9:
         3b:e5:37:fe:06:9a:c6:fe:30:7c:1a:6f:e8:09:06:dc:c6:c5:
         6b:d1:3e:c5:76:72:ec:f5:22:cd:89:e4:ee:8d:fe:d6:93:0d:
         b6:e7:6b:ba:02:86:9e:c4:1f:17:34:ed:af:a5:1c:2c:f2:ad:
         c4:47:f5:a7:87:96:b2:dd:d9:c1:31:de:0c:95:fc:59:32:2e:
         7a:26:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----