Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b64bdb-5c7a-48ad-b706-b752d6dc6e22.roa
File:                     00b64bdb-5c7a-48ad-b706-b752d6dc6e22.roa (raw, json)
Hash identifier:          s1G4FjsS46hnHqvb77UxaDOojdKw1x17vV+3nlCxBkU=
Subject key identifier:   BE:11:E0:29:5C:FB:52:01:B2:30:B7:61:72:51:59:E0:0B:D4:35:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40B7C386A978DB5D0461CE7CB2CCB096CAB9466A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b64bdb-5c7a-48ad-b706-b752d6dc6e22.roa
Signing time:             Mon 20 Oct 2025 04:32:30 +0000
ROA not before:           Mon 20 Oct 2025 04:32:30 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b7:c3:86:a9:78:db:5d:04:61:ce:7c:b2:cc:b0:96:ca:b9:46:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:32:30 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=fe0f9257949c68291eeb0ad172bc43170f9ae3838d93f2d689c30746fecce3fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:e8:9e:f7:28:6b:8c:9b:18:04:83:c6:24:
                    9f:ad:7d:4c:67:d9:81:5d:b2:c5:e7:aa:6f:cc:c3:
                    b7:f9:fd:23:1e:35:f9:70:f0:99:bf:f8:40:a0:ac:
                    ec:11:33:b4:8d:d8:73:94:12:6c:65:d6:8c:2b:a5:
                    ee:bf:02:b6:3b:93:3b:9a:50:11:5d:d0:2c:8d:60:
                    ea:dd:14:e0:db:46:27:57:2b:22:c6:77:62:1e:60:
                    7d:b4:62:87:0b:9f:9a:67:0b:35:c4:92:8f:58:54:
                    20:06:fd:12:10:6e:bd:32:ef:5f:4d:e0:c6:40:eb:
                    16:06:ff:2a:74:e8:d0:e8:0c:32:37:51:5d:41:0f:
                    e9:da:cc:55:a4:45:90:fd:f7:2a:55:74:c0:e1:af:
                    6a:25:44:10:95:29:4e:78:e9:c6:91:50:b6:2f:f4:
                    7c:ab:50:74:9b:e8:9a:f8:7e:f1:f2:9d:24:a6:69:
                    1b:e2:15:2e:8a:62:0b:8a:70:b8:43:1b:4b:36:ad:
                    01:82:d7:e2:9d:b6:ca:11:a9:81:d2:28:ad:ae:7d:
                    37:ea:fe:2b:4a:c8:7a:ab:d3:66:88:10:77:1e:45:
                    60:b2:c3:21:a1:98:50:e4:68:8b:2c:0a:bf:14:f4:
                    ec:48:21:17:73:33:77:12:9b:8d:0b:a3:8f:e8:94:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:E0:29:5C:FB:52:01:B2:30:B7:61:72:51:59:E0:0B:D4:35:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b64bdb-5c7a-48ad-b706-b752d6dc6e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:2d:22:e7:c6:d7:44:72:52:f7:a9:cb:bc:e8:35:d2:b1:
         1f:37:dd:ee:28:22:f6:a0:31:78:c1:c2:d9:3c:8a:09:01:9e:
         e2:55:24:a0:0d:8a:82:00:f4:e6:4b:e4:25:43:6c:84:1b:b0:
         91:a9:3b:34:6a:d4:37:77:31:e8:d9:70:1e:60:5c:e9:7e:1a:
         d4:62:54:84:3b:fd:e1:63:70:a8:5f:52:e9:f4:00:7b:6c:ed:
         d9:4a:44:40:60:db:82:e7:51:bd:23:f5:f6:24:40:19:0f:95:
         f7:a9:f4:ee:99:0a:ed:36:75:03:25:0b:db:d5:cb:b3:c1:09:
         f2:63:f0:b5:72:63:b3:ee:95:23:7c:81:96:1f:28:69:00:13:
         03:3b:4e:79:ee:3d:26:bf:c4:27:2a:a2:c9:96:a3:72:d9:b8:
         33:1c:f8:22:c4:e5:30:1e:fc:83:95:d5:14:b2:6e:b7:74:89:
         1f:cc:ac:e1:fa:b9:32:d0:80:a5:74:3b:51:e6:8d:c9:27:42:
         4f:d2:55:33:f8:5c:ac:bb:5a:2e:d3:8a:1e:ac:f0:e5:9e:da:
         7d:33:da:c1:e9:7d:92:c7:2b:dc:8d:47:33:f2:27:9b:a0:4c:
         ac:20:dc:f2:dd:10:df:b7:45:f2:03:27:49:de:c5:ee:7c:fe:
         b9:7f:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----