Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0802d5e1-cc65-49e6-8b3b-15bf0d2fb20b.roa
File:                     0802d5e1-cc65-49e6-8b3b-15bf0d2fb20b.roa (raw, json)
Hash identifier:          KpvmX4HNN/ZsjbLEGr98aPh8etTpHWG9BV4++JH9oc4=
Subject key identifier:   E9:3B:9B:EC:53:2B:1F:B4:77:2F:5D:55:6F:94:B9:B4:E9:48:98:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       143A1EE2938DB7E2DBB9DE28145AB0DE1A4F91E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0802d5e1-cc65-49e6-8b3b-15bf0d2fb20b.roa
Signing time:             Mon 20 Oct 2025 02:41:23 +0000
ROA not before:           Mon 20 Oct 2025 02:41:23 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3a:1e:e2:93:8d:b7:e2:db:b9:de:28:14:5a:b0:de:1a:4f:91:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:41:23 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8e926f23eb40b4a23c2a49cc48ece90e3d3d97034a2aba203871a7b91eb3744b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:c8:ed:9c:66:03:a6:3b:d6:cb:b9:c6:63:
                    9e:d3:61:fd:9f:6c:ec:f5:0a:71:9a:78:e8:cc:33:
                    86:59:4c:91:b5:b8:8c:af:c5:2f:74:e4:4d:99:9a:
                    c0:2c:d6:26:54:bb:82:c6:13:ec:9b:bd:8e:99:a0:
                    f9:05:8b:b3:60:5c:7a:a5:c7:2b:ab:90:23:30:81:
                    c9:0d:d0:ee:15:87:12:b2:cc:10:e8:41:bd:33:90:
                    d3:8d:47:a4:30:1a:39:4d:0f:fb:ca:17:82:84:5b:
                    ed:a7:5e:3e:84:ea:f3:68:9d:5c:0d:f7:bc:bb:cb:
                    6f:2d:3d:d2:e0:db:5d:b2:8a:86:11:24:f2:62:d6:
                    66:a2:19:60:68:31:22:10:10:2c:eb:71:ac:fa:d7:
                    f0:0a:1a:97:75:e4:ad:45:0e:9c:a8:01:92:81:3d:
                    00:45:ac:97:37:08:f7:58:05:bd:25:17:60:6e:b4:
                    f0:b8:83:e4:78:22:2c:90:d3:e9:6e:d3:c4:a2:af:
                    be:24:6f:c5:aa:be:96:f8:86:b2:7a:e9:ae:e1:37:
                    f5:1d:e4:28:fb:14:9a:42:cf:94:6f:f7:7d:f1:49:
                    ce:bf:06:17:ac:dc:0a:fe:06:da:67:12:ed:17:e1:
                    2a:7d:3e:a3:c4:a9:7b:a4:41:cf:15:e2:5a:c1:d8:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:9B:EC:53:2B:1F:B4:77:2F:5D:55:6F:94:B9:B4:E9:48:98:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0802d5e1-cc65-49e6-8b3b-15bf0d2fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:a9:26:a7:fc:1a:3c:3b:2f:7c:c2:19:fa:1d:b4:02:54:
         b7:b7:84:44:b3:e2:17:f2:64:e8:ca:a2:01:52:4c:2d:03:0e:
         81:09:dc:fd:ac:12:b8:90:e7:66:93:20:16:33:48:69:b0:55:
         1d:7c:3b:de:66:5f:1b:eb:7b:ea:5e:1a:4d:aa:f4:95:07:2e:
         fc:c9:81:7f:e7:f9:70:e8:bb:44:67:58:2d:9c:a3:02:82:93:
         83:e5:38:ab:89:c2:c8:78:58:69:b0:ea:a7:d7:d7:a1:63:08:
         2f:a6:c7:64:c1:25:ec:1c:87:34:bf:5a:c0:98:6d:d9:85:7a:
         4b:3a:b0:bc:58:2b:31:7b:7d:b0:ff:01:70:22:a1:f2:f3:e4:
         7e:24:0f:89:54:e8:62:91:1a:cf:20:23:6a:ff:52:8b:65:b0:
         5d:df:d0:82:0e:4f:30:7c:a9:04:8d:42:45:bc:e8:c2:4a:a1:
         5d:d7:39:10:df:25:79:b7:14:69:1c:2e:b3:11:dc:d8:99:21:
         0f:cb:a3:4e:32:e0:5e:e4:e8:4d:da:14:6b:fa:6e:50:55:7a:
         67:19:cf:97:0d:3f:ae:cd:d8:44:e9:e9:81:f6:2b:75:b1:dc:
         3e:49:5e:7b:45:47:af:fc:e1:04:74:39:e7:32:0e:ee:2f:5a:
         25:f7:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----