Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/244a3134-224f-45f7-be6f-fd69a99737d6.roa
File:                     244a3134-224f-45f7-be6f-fd69a99737d6.roa (raw, json)
Hash identifier:          EpkEYK3majB3kSarNdwrlbixZrNbQoDrcEEErCWpwE0=
Subject key identifier:   2B:F2:27:C3:CD:85:1F:24:3A:76:55:0D:EE:9B:83:2F:98:0E:F7:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72DB42BC6B4D343949CA5BFC22C9DF339F636177
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/244a3134-224f-45f7-be6f-fd69a99737d6.roa
Signing time:             Mon 20 Oct 2025 06:10:08 +0000
ROA not before:           Mon 20 Oct 2025 06:10:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:42:bc:6b:4d:34:39:49:ca:5b:fc:22:c9:df:33:9f:63:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:10:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=48da03d430c4b5f5a61d12d32de4c8c422ffa8925769ff89dc712d6a0478bd76, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:88:7e:aa:aa:33:ec:aa:44:bc:d1:a4:14:
                    e8:59:28:8d:e6:68:7e:35:dd:90:10:2b:c1:6e:eb:
                    6e:af:27:7d:e7:20:ba:b0:8c:d3:b2:2b:dc:7b:71:
                    71:c3:f5:3c:12:56:71:3e:dd:f6:60:5f:be:01:88:
                    86:1e:22:ff:ee:f1:66:c1:70:07:30:9a:be:1f:a8:
                    10:b5:59:c7:f1:80:13:b1:86:cf:2e:df:85:9e:a7:
                    4c:7e:7a:1c:c0:23:77:af:32:62:2f:06:de:03:ed:
                    1b:8c:65:47:89:d2:74:ff:c4:b7:d4:12:fe:9b:50:
                    fa:25:4a:97:b8:85:03:48:83:f3:b2:96:0e:e9:88:
                    de:f3:29:07:f7:dc:c6:b5:49:de:4b:c4:c8:64:9d:
                    93:a9:0a:cd:cd:a9:6c:b4:b2:c0:63:4c:8d:3c:2b:
                    2f:a1:63:ad:bc:ed:42:73:09:ea:c6:42:12:e8:6c:
                    2c:83:33:73:4b:43:3c:52:93:3a:0e:5f:b6:5f:9d:
                    d6:d5:52:b1:a9:68:4e:72:f7:5d:38:77:b2:55:0e:
                    bd:58:64:58:21:1e:5d:85:e3:ad:38:e1:b4:ac:88:
                    ae:5b:80:3b:2a:de:3f:12:72:e8:af:87:7d:9a:3e:
                    39:5f:1f:a1:04:58:16:a3:1e:cc:99:75:43:30:dd:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:27:C3:CD:85:1F:24:3A:76:55:0D:EE:9B:83:2F:98:0E:F7:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/244a3134-224f-45f7-be6f-fd69a99737d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:4f:e3:d0:82:07:3e:ed:2b:fe:bd:7c:38:c5:82:8f:3e:
         ca:e9:aa:04:9e:bb:a8:a6:b8:6c:b6:67:0f:1b:d1:b8:31:e8:
         f0:0a:9b:ec:44:b5:ac:15:26:07:a0:71:7b:e5:35:6e:7f:f0:
         19:7d:da:48:75:5e:66:cd:f7:b0:26:54:09:65:d5:87:2f:78:
         73:4f:a1:da:42:6e:39:df:6e:ff:e2:17:f4:ab:01:55:4b:e7:
         f8:0b:ef:a1:5e:4c:a7:0b:cd:1d:44:6e:04:f5:4b:54:bb:51:
         a8:d7:38:c8:6e:72:ad:ac:3d:c3:af:a9:64:2a:21:81:4f:d3:
         40:ee:fe:ff:47:bc:69:b8:86:7f:54:14:62:91:2c:d5:36:5a:
         f6:a4:a2:c2:99:7c:de:eb:9b:07:ab:66:b4:a5:11:5e:de:7c:
         5c:e6:a8:d6:5f:ac:d4:4c:67:78:c3:18:97:a2:09:b7:49:5d:
         26:09:0c:72:2f:1a:39:37:17:d8:60:a3:b0:76:11:2d:50:08:
         e4:cb:1d:59:22:df:30:14:c5:29:04:fc:dd:56:3f:85:b0:71:
         76:fc:a0:6f:f9:18:08:07:a3:b0:d3:b5:e9:87:60:52:d2:4c:
         c0:a9:b9:4c:02:88:31:3e:02:20:a2:c9:40:ba:da:24:e5:e8:
         84:e7:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----