Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19549c01-07c7-4498-8b44-e16a1bb16ff4.roa
File:                     19549c01-07c7-4498-8b44-e16a1bb16ff4.roa (raw, json)
Hash identifier:          ln8F/m6gHDXMwJ4Oxn8Kk0prhtMKAudIm3edoDfO9f0=
Subject key identifier:   6F:32:A3:59:A2:B0:54:C6:F5:E1:CB:E4:56:55:9C:07:9B:97:41:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       417E9C3809D99F4B83E52E75D085727449932012
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19549c01-07c7-4498-8b44-e16a1bb16ff4.roa
Signing time:             Mon 20 Oct 2025 01:11:59 +0000
ROA not before:           Mon 20 Oct 2025 01:11:59 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7e:9c:38:09:d9:9f:4b:83:e5:2e:75:d0:85:72:74:49:93:20:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:11:59 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=b91c3359fa1cf86870590dd9e7a6ba26efb758dfbef5a323b8b938b5e08c20e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:43:b2:8f:ac:8d:8a:1d:56:8d:de:11:c0:
                    42:dc:70:a3:d9:44:7c:07:ff:b2:fe:a2:63:73:e3:
                    da:06:f8:93:c3:37:10:59:c5:f3:2e:79:88:01:58:
                    83:30:d0:50:6c:03:65:6f:97:48:9c:66:7a:3d:a4:
                    e7:4d:fa:bd:10:e2:0f:bc:a7:02:07:72:bd:32:f1:
                    6a:d7:f1:37:38:e9:1d:87:38:22:0f:6a:a0:a0:ba:
                    2e:dd:b5:ad:56:3f:e0:8a:68:6f:ab:f3:a9:07:0a:
                    37:08:78:a9:49:73:ed:db:9e:5f:94:05:f2:89:42:
                    bd:a5:28:61:81:f8:54:66:f3:07:72:31:b1:c3:7b:
                    19:74:61:51:45:6c:9e:59:77:be:40:d3:b7:f0:1d:
                    a5:b2:30:52:1c:b7:9a:4b:6f:48:b1:74:e8:ad:16:
                    e0:82:13:5b:3b:4b:cd:72:be:3c:98:e0:08:cf:af:
                    75:12:6d:f2:6a:1c:07:bb:b0:e1:39:b0:a7:bb:5c:
                    d2:07:5e:09:4d:61:50:bf:b2:fa:4d:21:68:37:87:
                    fb:04:fd:51:91:82:dd:81:23:6a:f0:19:c1:b9:28:
                    2b:71:38:e5:45:c4:16:70:08:8a:b9:bf:83:94:4a:
                    de:86:3b:eb:51:41:97:a6:56:3b:25:67:4a:e5:df:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:32:A3:59:A2:B0:54:C6:F5:E1:CB:E4:56:55:9C:07:9B:97:41:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19549c01-07c7-4498-8b44-e16a1bb16ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:cf:20:1a:13:00:03:81:d3:c2:cf:8f:58:49:1a:83:b4:
         4e:91:ea:9d:78:8b:04:f6:98:ab:20:b2:3b:3f:84:7f:07:0a:
         fd:c5:2d:2b:d5:20:73:a7:20:12:ee:0d:73:3f:16:12:76:18:
         e6:fc:7a:1e:b9:70:1c:89:80:65:6b:6a:d3:85:bf:35:ab:d4:
         4c:4f:48:ff:76:f6:f1:97:23:19:cf:25:fc:fd:08:11:c3:4a:
         1a:71:70:33:73:d4:53:d7:9b:9b:78:4a:7c:b2:7a:cc:28:9e:
         ad:7a:c1:c7:48:24:27:c3:61:76:5c:f1:f3:48:c2:4a:41:8e:
         43:73:40:26:e4:01:1a:fd:5a:18:d7:e8:7c:8d:b2:09:05:9d:
         b4:e8:2a:50:c0:89:91:ed:52:59:ee:c2:ad:5a:18:92:28:fb:
         92:77:54:1b:ec:06:f4:cb:92:77:b0:f9:72:2d:6e:2a:eb:de:
         3a:e4:8b:54:ca:59:87:72:ee:b5:dd:cd:80:eb:fa:3a:01:ba:
         7b:61:75:43:e2:d0:8b:ee:01:49:8f:20:27:9e:a4:44:81:59:
         9f:02:56:06:59:8b:31:81:32:b4:ea:6a:4b:b2:42:e2:76:2a:
         0e:b9:d8:60:cd:1c:f7:6e:03:88:ad:59:76:f1:e4:8d:7e:fa:
         ce:cf:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----