Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217d6e72-5dc3-4f97-b255-777669240331.roa
File:                     217d6e72-5dc3-4f97-b255-777669240331.roa (raw, json)
Hash identifier:          00nwfnhG15pqMsXCLBIVC7+VLvizfaMSAMMZWe54JYE=
Subject key identifier:   A5:8E:C4:45:60:10:49:96:3C:0D:A4:7C:16:F2:95:C4:52:30:BE:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B82539C5FD36F4F5C5ECB9B673ABDE99BD5C593
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217d6e72-5dc3-4f97-b255-777669240331.roa
Signing time:             Sun 19 Oct 2025 02:40:47 +0000
ROA not before:           Sun 19 Oct 2025 02:40:47 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:53:9c:5f:d3:6f:4f:5c:5e:cb:9b:67:3a:bd:e9:9b:d5:c5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:40:47 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=26d120b6da78b6d7bacabf535408b95151e9b9e7dbdd7cd2fd456360edec8b9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:cc:0a:f8:dc:b5:54:91:ff:06:76:82:ce:
                    0d:37:5e:a1:ad:38:87:d3:14:30:52:28:9a:d4:61:
                    38:5c:eb:50:fa:99:88:cf:d9:51:7d:0f:8f:67:d9:
                    7c:fe:9a:40:c7:5d:22:8c:08:f8:c7:4e:4b:20:b0:
                    5b:46:e1:40:8d:f4:0a:48:60:32:8e:5d:38:a9:46:
                    ad:c3:5e:ae:ba:00:05:60:56:89:40:da:52:f6:85:
                    4d:3b:ed:87:70:be:bf:fc:55:2d:a1:75:91:75:1b:
                    15:eb:97:4d:f1:8e:be:91:d3:1d:9a:ee:87:91:8e:
                    e8:3f:aa:50:aa:5a:76:79:55:93:33:cf:51:27:06:
                    c2:87:28:e7:4d:c5:da:32:36:c5:38:06:e1:ce:8f:
                    b6:01:de:e9:d3:73:b8:57:7a:ea:2f:01:10:f7:63:
                    8d:f6:d5:45:61:9e:a0:ce:c1:a1:81:2e:f5:c5:f0:
                    01:81:26:d6:89:7b:be:8e:fd:d9:e7:d2:6c:e8:4b:
                    3c:4f:c5:00:f2:7a:84:3b:e0:f8:1d:8d:05:76:2c:
                    68:99:16:59:72:54:5b:16:f6:23:bc:0f:f9:65:23:
                    95:b5:fa:6c:76:6e:ef:0b:23:12:54:e4:82:38:02:
                    86:8b:d6:ba:23:da:5b:30:41:11:0d:e3:5e:cd:e9:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:C4:45:60:10:49:96:3C:0D:A4:7C:16:F2:95:C4:52:30:BE:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217d6e72-5dc3-4f97-b255-777669240331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:04:7e:b5:d0:43:70:0c:8c:92:94:5b:b6:08:d2:30:cf:28:
         de:4e:cf:0e:68:a9:3a:01:98:dd:20:9b:fb:78:b8:ff:22:29:
         24:36:7c:3c:3d:27:e3:ca:0b:be:5d:63:f5:f8:ec:0b:bc:ca:
         4b:6e:18:d7:7a:26:21:d1:47:32:16:9a:34:e1:f5:2c:16:10:
         e4:fb:b4:cc:15:87:d8:af:93:37:17:05:80:50:10:40:3b:28:
         f5:34:62:67:ae:24:be:51:10:2e:6e:97:6a:60:3b:1d:9b:9b:
         22:53:2c:11:bf:90:20:29:c4:13:b3:ff:4c:91:a1:d2:dd:7a:
         8d:99:be:84:3a:67:93:47:73:be:b9:83:4a:7b:a3:a1:8c:bf:
         1f:b4:9b:00:51:3c:58:71:77:79:b9:d7:36:ee:d5:68:ee:ce:
         1a:d0:0b:45:38:a6:2d:78:17:82:cd:a0:b7:8d:66:d5:8c:5b:
         13:b3:1e:dd:dd:38:f1:29:b0:d9:46:ce:5d:6f:d4:76:82:f0:
         96:33:f9:cb:75:d4:e6:5b:c0:30:24:f0:e5:3f:d7:50:3c:67:
         64:91:41:ca:17:e0:73:89:71:34:66:e7:58:59:2c:04:79:8a:
         91:df:e6:ec:46:5e:f6:19:b5:48:69:78:9c:f3:f2:e7:f9:aa:
         b3:e8:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----