Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cb18727-7e77-45d2-affc-5052300d94b7.roa
File:                     1cb18727-7e77-45d2-affc-5052300d94b7.roa (raw, json)
Hash identifier:          JTKZrnPDMLSu9naAMgn0KB9u/9sDlzH0EqPVpj3PSwU=
Subject key identifier:   1C:9A:B4:B0:2A:6C:B5:9A:D8:05:E8:F9:63:92:79:E6:13:3D:F9:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       032F9CA915F96BC55996502FE4FC52C9AAB4E7D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cb18727-7e77-45d2-affc-5052300d94b7.roa
Signing time:             Sun 19 Oct 2025 00:31:06 +0000
ROA not before:           Sun 19 Oct 2025 00:31:06 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2f:9c:a9:15:f9:6b:c5:59:96:50:2f:e4:fc:52:c9:aa:b4:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:31:06 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=a9f48599c810e05ef254fae10331c57ac6a480ab66eeb93ff68a001c86899e12, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:bf:1d:7f:d3:0e:44:6e:a8:4b:ad:b7:57:
                    e7:cf:64:9a:fd:93:e1:00:74:60:e4:0a:01:97:8e:
                    4e:a6:96:e3:8c:f1:f2:c7:c2:d4:ce:6a:19:7e:50:
                    c6:f2:c9:27:89:f4:b7:0d:fd:be:68:60:6f:15:ee:
                    15:dd:04:8f:15:ff:e9:af:5d:9b:76:47:cf:64:9b:
                    49:85:90:a9:ad:ee:ff:a7:ef:f2:68:41:fa:a7:45:
                    97:06:bf:c8:04:68:8e:2f:45:66:7b:05:3a:23:e4:
                    c5:46:39:37:23:c2:10:5d:69:33:8f:8b:da:7a:2f:
                    dd:4a:7c:af:7b:a9:5d:fd:9f:58:6a:9d:2c:c0:fe:
                    47:85:bb:62:11:4e:13:33:d3:6e:63:94:2a:ea:17:
                    2c:74:88:17:c9:1d:4d:eb:7b:8a:20:ca:3f:09:3f:
                    80:2d:87:83:17:9e:87:be:95:89:d6:bc:d6:bc:42:
                    85:0d:cb:ba:ab:42:54:38:7e:7f:81:70:e9:bf:db:
                    c1:2b:2a:74:a5:d7:47:66:ca:a6:af:9a:b4:1d:6d:
                    92:c5:20:99:4b:c6:3e:d7:73:61:99:b2:33:51:ea:
                    70:c1:cf:29:af:88:b2:39:f7:fe:10:0c:1b:97:28:
                    5e:0f:70:f8:0a:a6:09:25:49:19:e0:d5:eb:e9:e5:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:B4:B0:2A:6C:B5:9A:D8:05:E8:F9:63:92:79:E6:13:3D:F9:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1cb18727-7e77-45d2-affc-5052300d94b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:55:a2:89:23:53:81:50:53:64:e8:33:3d:e6:f2:75:45:99:
         87:f0:04:07:3c:47:c7:22:dc:dc:cb:65:ca:4c:a4:85:5f:f0:
         39:cd:87:ed:84:fa:b8:ae:d0:79:0b:66:09:0c:54:f9:7a:a5:
         85:87:a1:83:9e:9f:b0:ed:ac:fc:17:4d:50:56:ba:7f:2f:21:
         25:3a:47:4b:92:37:44:dc:1d:9a:49:0e:7d:b7:c0:9f:36:5c:
         e3:ee:be:5c:f8:67:7a:4e:67:d0:e3:8d:ee:ec:cf:a3:e5:bb:
         aa:d5:37:22:a2:fc:d9:16:4b:82:13:f6:cd:56:fe:46:b2:0c:
         d0:86:bf:a6:d4:87:c7:a5:f7:28:2f:14:1d:69:be:d0:0c:16:
         23:71:ff:6a:4e:39:09:6e:d2:86:50:1d:c4:c3:bf:27:30:76:
         22:01:17:3c:c6:9d:a0:5a:c2:84:25:39:e8:e9:ec:fc:73:f9:
         3a:2e:f9:dd:1b:63:b8:f9:ee:e1:89:87:fd:10:74:a6:c4:a8:
         4f:89:fc:97:9e:46:15:04:a0:fb:55:13:5b:2a:46:2b:04:1b:
         a8:d0:2d:07:51:77:a0:4b:81:46:00:03:b4:29:44:14:3a:76:
         c5:97:c0:d6:c5:2d:8d:9f:ed:8c:17:dc:d7:e8:27:eb:48:84:
         9d:db:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----