Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/193e4d72-20a1-409d-b2e5-38a343da71c7.roa
File:                     193e4d72-20a1-409d-b2e5-38a343da71c7.roa (raw, json)
Hash identifier:          i/NTMiFnZl/2zQV/alwM0q5G0Qpm50EHpGtFL74DEOk=
Subject key identifier:   78:17:68:F1:DE:0E:9D:C8:A8:F0:2C:77:D5:B1:E8:6F:FA:69:A3:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A47F06DA29E5533A66AFEF4EDECB2CB043D6681
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/193e4d72-20a1-409d-b2e5-38a343da71c7.roa
Signing time:             Mon 20 Oct 2025 03:22:20 +0000
ROA not before:           Mon 20 Oct 2025 03:22:20 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:47:f0:6d:a2:9e:55:33:a6:6a:fe:f4:ed:ec:b2:cb:04:3d:66:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:22:20 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0c7542e95bf3dec982c3a273f3beb094d6a5fcd005658fcf66b2240d0e8d91de, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:7e:3d:10:79:bd:b6:d0:89:91:31:74:b0:
                    e4:53:04:d1:9d:d7:e0:28:86:44:2c:02:65:b4:db:
                    81:cd:e4:42:7d:b3:c3:c5:7e:88:02:8e:ec:aa:f3:
                    cc:f9:4c:31:9e:97:f3:45:a1:e5:52:42:eb:f2:e7:
                    0e:e3:c0:d8:99:05:81:c6:14:e3:4b:db:35:ff:99:
                    0c:9b:fe:0d:06:d1:e4:82:6d:5a:5c:f2:c2:ba:6a:
                    e4:38:04:4c:05:14:b7:1f:cd:be:c4:44:10:10:44:
                    be:7f:4d:59:e7:60:a2:25:7c:76:15:cf:71:02:cc:
                    22:8c:85:a1:47:a9:5a:c9:22:10:d6:9c:8d:95:84:
                    fa:82:b2:d5:c2:36:20:cc:10:b5:8c:ae:6e:a2:43:
                    68:b1:04:d0:21:b5:e9:3f:d7:25:81:af:97:06:50:
                    24:81:9a:70:a0:3b:18:34:56:ce:a2:eb:25:ad:be:
                    3f:bc:21:ca:ae:41:c9:58:2e:53:c9:0f:be:f4:9d:
                    d0:45:13:0a:20:3b:db:50:da:01:da:cc:ed:7d:e8:
                    04:6d:b6:f7:82:5e:a1:b0:98:04:75:2a:76:ad:8d:
                    9f:dc:77:2b:6a:a3:21:e0:48:b6:e3:40:fc:9d:fc:
                    25:36:67:16:cf:b6:fe:18:da:7b:e0:ac:9f:8d:55:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:68:F1:DE:0E:9D:C8:A8:F0:2C:77:D5:B1:E8:6F:FA:69:A3:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/193e4d72-20a1-409d-b2e5-38a343da71c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:53:b0:d5:6c:b9:ef:91:41:3d:0f:ac:6f:dd:15:92:79:e4:
         4a:25:7c:0e:5f:66:42:ef:4c:ce:c4:4f:23:c6:f1:85:46:32:
         32:66:4a:66:85:67:96:b3:6e:69:3a:ff:c7:60:af:d7:79:2c:
         ea:12:41:be:57:32:bd:b1:24:a5:18:ab:12:5d:4a:95:ec:11:
         52:7d:ab:46:f8:9c:c6:7c:07:fc:20:c7:5a:5a:9c:1c:80:08:
         01:8d:7f:74:89:a5:e4:b3:13:b6:32:00:93:4e:99:a6:a9:bf:
         ef:4a:2d:ac:40:2a:fb:3f:2b:6d:dd:cb:2d:9a:f2:57:33:65:
         86:39:54:84:df:4d:56:45:ce:cf:63:a5:cc:f7:73:94:d7:ed:
         bd:7e:43:0d:ef:2d:53:e1:eb:56:88:87:ae:d3:16:ff:c7:7b:
         ac:33:ec:e0:7c:dd:99:9e:44:d5:5e:49:f2:e3:86:0b:33:29:
         b7:44:95:44:86:bf:e1:87:dd:00:5d:63:89:bb:9e:1a:18:5a:
         13:ca:2d:84:9a:36:1d:43:9e:27:f1:ec:0a:e5:ed:37:6d:b2:
         83:9a:55:b8:eb:d1:97:c8:d1:82:19:f9:26:0c:fe:4b:7b:7c:
         22:73:38:57:26:c8:86:16:ae:7f:da:36:4b:8f:2d:3f:b8:1a:
         51:36:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----