Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/239fa7a9-4daa-4154-94ef-351a96c59044.roa
File:                     239fa7a9-4daa-4154-94ef-351a96c59044.roa (raw, json)
Hash identifier:          eMo2bGdg7IPq2nT8EnQXXiTRuPAV8bsbnz66jwdIBJg=
Subject key identifier:   37:BD:BA:70:3C:85:BE:67:C4:0A:1D:1C:34:89:B6:93:DC:73:9E:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       292CF2097675FB5662C557D40AC543F190FB28B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/239fa7a9-4daa-4154-94ef-351a96c59044.roa
Signing time:             Mon 20 Oct 2025 03:52:03 +0000
ROA not before:           Mon 20 Oct 2025 03:52:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2c:f2:09:76:75:fb:56:62:c5:57:d4:0a:c5:43:f1:90:fb:28:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:52:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=d7ee49a8442bea6da644efbc387ff35b8a92c073219d7a267010cf869197b7ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:85:37:2b:67:4f:95:13:48:c9:ae:d2:57:
                    98:d3:3b:19:9b:58:a9:65:64:f7:3c:1d:27:a9:f0:
                    aa:d4:fe:c6:f3:42:b3:d1:ce:7a:aa:1e:87:c7:39:
                    2b:b7:d6:cc:6d:49:19:56:84:17:bf:ec:c6:b8:5e:
                    bd:2c:67:e1:67:56:b2:de:39:5b:c9:0c:6b:21:ad:
                    b0:39:d4:fc:0e:2c:0e:0c:0f:51:2e:a6:fa:55:7a:
                    8a:67:f9:e9:b8:ae:1b:78:b0:37:dd:05:11:a2:9b:
                    a2:e4:31:d5:e5:a4:c5:b6:f1:24:79:34:ff:77:83:
                    08:01:55:4b:d6:1f:85:6f:5d:01:64:90:de:cf:64:
                    13:05:61:82:d9:8c:5b:ef:84:02:a1:32:33:bc:73:
                    40:1c:7c:aa:9d:db:ed:30:2d:27:3d:19:29:60:c3:
                    46:c8:b5:2e:7b:45:26:b2:95:6f:81:13:1c:e0:00:
                    61:33:9a:6e:21:88:54:0c:32:4a:6a:7d:ad:97:cb:
                    2f:4c:a2:c5:73:06:f4:de:13:36:0d:ef:cf:f6:b4:
                    28:a5:42:79:ae:d4:c1:ba:1d:ca:a4:c9:e4:f1:4c:
                    03:f8:a1:b8:e8:b5:14:f8:f8:60:e9:9b:27:b8:62:
                    da:de:06:5c:9f:f0:3f:f7:cd:42:fc:fc:bf:22:eb:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BD:BA:70:3C:85:BE:67:C4:0A:1D:1C:34:89:B6:93:DC:73:9E:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/239fa7a9-4daa-4154-94ef-351a96c59044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:1c:9d:8c:ba:69:66:f8:27:f4:bc:9d:22:d2:ec:ce:f5:
         71:c7:bf:76:60:0a:b1:bf:a2:c9:0d:a9:f6:1c:c0:f8:0b:60:
         c3:c9:44:c3:d3:60:fd:63:5d:f5:51:53:b9:27:9f:d4:33:5d:
         a9:3a:51:6a:23:44:b2:a1:48:1d:48:8a:15:fd:d0:fd:f0:db:
         94:f7:d6:b2:93:a4:57:c3:00:85:69:21:9e:ad:7f:86:b5:95:
         c0:b9:cb:5f:37:08:3f:76:9c:bc:fb:f9:40:a8:80:eb:ba:a9:
         e7:3f:c9:b3:5e:92:17:78:de:70:15:5e:e0:b2:c3:9f:1b:fb:
         d2:79:37:8f:76:9d:ad:4c:4f:b9:b7:85:de:69:c0:15:76:dd:
         24:64:77:26:2c:99:86:e8:32:e0:c1:ba:16:9b:d1:d3:8d:30:
         55:04:e4:f1:86:dc:e5:5f:ce:0f:8a:72:dd:76:a1:59:f2:0f:
         c3:26:e2:75:ec:d3:b8:9f:ea:41:a3:6c:bc:e6:16:43:d7:2d:
         4b:40:4a:23:46:61:05:a1:cc:1b:59:56:da:f4:1c:bb:89:f0:
         0d:eb:1c:37:d9:44:13:ce:b9:81:8e:27:44:53:ec:f4:1f:eb:
         6a:7c:13:f4:28:d4:65:7b:24:5c:ad:ff:39:47:96:e3:4f:3c:
         26:c8:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----