Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
File:                     08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa (raw, json)
Hash identifier:          8qsi6bngc+9/tLtuOPHnJg5c3Xnda/8I6GBUVWX21Io=
Subject key identifier:   9B:47:43:D1:03:EB:A9:16:4E:21:FF:C7:13:57:FC:E9:65:C6:68:3A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       750F52E6E45B1DB30A3A6AED16F24F3E832FB6BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
Signing time:             Sun 19 Oct 2025 00:11:19 +0000
ROA not before:           Sun 19 Oct 2025 00:11:19 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        104.153.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:52:e6:e4:5b:1d:b3:0a:3a:6a:ed:16:f2:4f:3e:83:2f:b6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:11:19 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=2a766194a530298bff1c6829388a82d894cec5ba97eb3313356a23fb75a7cb1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:67:46:33:1b:75:9a:4d:33:e6:07:74:0c:
                    a5:07:0b:98:df:ab:44:3d:10:69:0c:74:4c:d5:89:
                    5b:06:0c:b5:13:ed:2e:48:a7:a8:f7:01:15:26:ac:
                    1f:3b:57:06:77:32:3e:b4:bc:52:84:4d:47:d9:98:
                    d2:53:2b:20:18:fe:6c:cd:02:a0:5c:0d:08:46:99:
                    a6:c8:ef:c3:5d:68:61:77:32:37:f6:21:06:2e:65:
                    14:6b:58:ca:db:77:d6:8b:10:7f:8d:d1:08:28:b0:
                    0f:36:b6:04:46:fa:7c:f0:30:5e:d7:85:c3:62:e2:
                    fc:39:80:0c:1f:af:65:90:55:0c:93:32:df:5c:b9:
                    e4:df:99:24:36:a8:a5:33:c6:a0:95:06:45:c3:51:
                    1f:bd:30:73:c0:7d:42:12:9a:a0:03:fe:32:41:53:
                    f5:c1:09:38:bc:82:6c:7e:b7:52:e3:97:95:76:c3:
                    50:b9:6f:90:a5:76:64:f1:84:16:65:26:f3:a5:8a:
                    cc:40:6d:73:7a:48:40:17:74:51:4f:70:3f:8d:d7:
                    3e:24:0a:95:ba:4e:75:99:76:31:a8:0f:eb:3d:81:
                    e8:9b:e1:cd:77:99:8d:f0:69:c3:fa:2e:ee:6f:71:
                    33:c8:8b:b7:7d:97:b3:e7:e2:cc:79:a1:3e:a2:41:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:43:D1:03:EB:A9:16:4E:21:FF:C7:13:57:FC:E9:65:C6:68:3A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:38:79:fa:d8:39:3a:25:c4:6e:60:73:29:a4:42:2b:77:34:
         a7:5b:c7:c1:11:0e:b8:7d:92:b0:b1:96:a9:fa:15:6b:e3:0e:
         7f:ea:63:44:6e:b6:65:fd:b4:26:cc:05:cf:57:fe:ce:f1:c1:
         35:33:0b:3e:c7:41:19:48:de:a9:9a:f9:0a:c1:47:7c:51:1f:
         d4:11:2f:c6:f4:d0:90:e7:7d:64:b8:a7:68:40:64:d1:96:3a:
         81:16:da:44:98:ec:13:19:fa:44:c2:6f:25:74:fe:4a:82:89:
         56:1a:c1:ae:01:c1:74:76:4f:ef:fe:44:9f:50:cf:05:a1:17:
         a7:99:27:c3:e6:a1:c0:de:10:2c:c0:41:09:cb:f4:e7:86:23:
         82:05:0f:49:b6:40:89:48:52:8c:c6:a9:87:5a:53:7d:a7:59:
         02:55:93:9c:a1:a7:4d:d9:f1:fc:5c:a9:3a:ec:46:82:6e:a8:
         23:69:cb:4b:34:33:e8:e8:e5:de:3f:5c:a1:25:98:3b:15:13:
         e2:ec:dd:b8:bd:4b:82:ca:3d:41:89:0b:58:e1:cb:df:e3:03:
         b4:d9:73:24:0b:98:e3:06:36:b9:66:33:ef:31:3f:b3:56:fc:
         44:ae:ca:28:82:94:0b:f8:22:14:c7:2d:f0:ee:8c:04:8b:ce:
         40:d4:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----