Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113bfd40-3f53-4b9c-95d3-98cfa0c36a03.roa
File:                     113bfd40-3f53-4b9c-95d3-98cfa0c36a03.roa (raw, json)
Hash identifier:          eXjMLcYF5mFuMq+wCoshLAaHHkSm3kCzMxlFq9ga95U=
Subject key identifier:   46:35:FD:8E:BB:58:49:2F:87:16:9E:42:C2:DD:35:42:E3:79:F9:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77118C2C7735D32C4E35EBB1AFB5DA3872C9334F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113bfd40-3f53-4b9c-95d3-98cfa0c36a03.roa
Signing time:             Sun 19 Oct 2025 00:51:31 +0000
ROA not before:           Sun 19 Oct 2025 00:51:31 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:11:8c:2c:77:35:d3:2c:4e:35:eb:b1:af:b5:da:38:72:c9:33:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:51:31 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=4c415518b9f396dc4c141fdce9dea25f074f6007939ae6c6a130779c600f8983, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:8e:47:74:ec:03:37:a5:6c:e7:6f:9d:0c:
                    b6:7a:1e:d1:bc:25:92:d7:11:b0:1a:02:db:ef:17:
                    28:26:a4:f8:2b:4c:09:66:16:58:d1:ce:b3:26:62:
                    da:40:eb:66:bb:bc:50:9d:bf:7d:c9:7d:00:8f:7d:
                    ab:13:36:e6:62:2f:5f:3a:c1:64:7e:43:e6:cd:6a:
                    ab:a1:25:fa:70:47:e6:78:33:81:15:a2:77:d4:8f:
                    e5:d8:e2:33:c7:22:82:95:e4:eb:37:b6:75:5e:87:
                    e4:2e:fb:1d:3b:af:e8:8b:2c:ed:1e:58:e8:32:3f:
                    f4:9a:f8:d1:f2:7a:e6:66:65:d4:7e:ee:24:f7:1b:
                    da:ff:99:df:3c:76:db:47:55:79:1d:50:ad:ff:8c:
                    96:11:40:30:5d:d1:78:2b:70:d1:7f:6e:c8:cc:4c:
                    4c:84:2c:9b:28:29:0f:ec:60:8f:6c:a1:ee:e6:a1:
                    ba:25:41:ea:b7:82:d6:b2:a1:33:65:a3:3e:60:0f:
                    f6:92:43:39:37:b9:f2:67:bd:87:0e:69:36:e4:e7:
                    ac:63:cd:49:52:a5:aa:02:08:ff:ba:4b:f9:bb:48:
                    e4:3d:06:91:c0:45:af:84:0a:e3:f4:ca:ce:82:68:
                    44:ca:de:01:a6:d9:98:c4:f5:2e:11:25:75:4d:75:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:FD:8E:BB:58:49:2F:87:16:9E:42:C2:DD:35:42:E3:79:F9:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113bfd40-3f53-4b9c-95d3-98cfa0c36a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:94:a6:43:5c:39:96:86:e1:da:b5:a4:41:3b:c8:43:f0:c5:
         78:e1:52:b1:76:4b:fb:bb:35:79:60:63:18:d5:9c:b4:74:9d:
         1f:4d:64:2d:09:b7:d2:b0:81:8d:d0:40:a2:a5:9b:99:97:6d:
         b0:ee:7a:e8:36:aa:15:ae:5e:55:99:b6:44:89:35:f0:37:43:
         33:03:0a:78:ec:1c:ad:fd:58:cb:97:c3:0f:dd:2a:06:20:b5:
         70:23:55:7d:42:16:f3:b2:41:a4:8b:f5:d2:42:d2:c5:e9:8c:
         4f:a8:ad:33:e8:13:c6:91:eb:99:55:b3:05:a3:85:b1:79:a3:
         6a:14:0a:80:8c:9a:95:52:e3:ca:bd:21:cb:ca:56:86:04:53:
         be:6f:59:70:ae:23:d9:2b:93:28:65:5d:e3:b7:d0:10:dd:ae:
         a8:62:d1:ef:07:f7:2f:bb:fc:f1:a8:18:63:c0:b1:b9:aa:0d:
         4b:de:29:6c:22:2d:59:fd:ba:dd:17:64:a0:61:f7:db:81:53:
         2f:46:f0:e8:0e:0f:d1:11:87:30:a2:79:19:a6:92:b2:02:95:
         b8:03:6e:f0:f8:7d:b9:b6:36:5c:51:6b:fd:9e:39:44:d8:3c:
         81:8b:1a:2a:d3:3a:6a:ed:ed:71:45:b4:21:50:ef:05:d7:80:
         5d:52:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----