Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24bc0c8e-caaf-4e9e-9e89-2ea593b776b9.roa
File:                     24bc0c8e-caaf-4e9e-9e89-2ea593b776b9.roa (raw, json)
Hash identifier:          I+LEtW6zKjto8s30F758OINqsIwEsm5s+RiGg+wA+W0=
Subject key identifier:   9A:6C:50:7B:5A:9B:98:8B:92:CC:73:5D:C0:60:60:0C:31:89:13:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39080B674FA0A73D8CBDEFC28CE2715D6F720D9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24bc0c8e-caaf-4e9e-9e89-2ea593b776b9.roa
Signing time:             Mon 20 Oct 2025 06:10:44 +0000
ROA not before:           Mon 20 Oct 2025 06:10:44 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:0b:67:4f:a0:a7:3d:8c:bd:ef:c2:8c:e2:71:5d:6f:72:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:10:44 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=6aa3823c2458682bc8447e76b1e90e8bcef61367d993392a75edcae9d36d0b98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:7a:0e:63:af:35:16:3b:e2:de:0f:89:80:
                    37:78:20:2a:59:7c:bd:02:cd:3a:af:fb:89:5d:d6:
                    b7:fa:86:0f:73:e5:fd:4e:1f:7f:12:2f:c2:14:35:
                    62:99:7c:9f:09:a2:cb:a4:a1:f5:2d:5e:85:12:c1:
                    13:0e:97:07:60:63:71:dd:f8:91:fd:b3:be:33:da:
                    06:3a:78:06:69:92:56:f4:d6:fb:ba:47:57:62:2e:
                    53:79:69:11:52:8e:77:a2:29:b3:67:65:31:3f:1c:
                    4a:2e:c8:44:5f:13:41:f5:01:c4:8e:ec:17:f3:6c:
                    17:a8:f0:8b:c4:40:61:52:3f:38:38:7b:53:cb:b7:
                    c8:db:c4:fa:2f:bb:37:d3:fd:0f:3c:a0:be:b5:ef:
                    b6:6b:a2:c5:cf:5b:9a:4a:a5:0f:f3:78:6f:62:8e:
                    26:7e:9e:43:3d:9b:d9:bf:67:09:9f:90:33:5c:30:
                    87:0c:8f:54:87:72:2b:2f:94:95:60:e2:15:73:93:
                    04:38:d7:d8:cb:26:5f:94:e4:f9:e6:2f:ce:16:8e:
                    82:b5:81:f0:0c:1c:d1:8e:2f:44:f2:64:73:f0:05:
                    37:a8:cf:2b:ff:13:6d:00:2c:ad:c0:70:d1:fc:96:
                    cc:dc:3c:19:d8:9f:27:7c:79:15:f7:0d:9d:f6:2b:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:50:7B:5A:9B:98:8B:92:CC:73:5D:C0:60:60:0C:31:89:13:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24bc0c8e-caaf-4e9e-9e89-2ea593b776b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:5a:9e:24:6f:51:70:e5:70:4a:97:a6:13:29:ef:8b:a1:
         e4:22:ee:2e:2a:ea:5a:ea:2e:cf:0d:9c:d2:cb:60:14:1f:ad:
         95:97:43:43:f3:f3:d7:e1:2f:1b:f3:8a:a2:27:e0:f3:04:01:
         7c:90:97:44:88:63:d0:bb:77:67:28:cf:4e:45:be:88:b3:48:
         81:24:00:a6:2b:21:ec:df:9a:e4:ad:56:cf:0e:76:6f:92:2c:
         3a:74:17:41:06:70:5b:5e:b9:c9:e1:0c:67:cf:77:98:8d:00:
         0d:7c:3e:92:c3:6c:f1:3d:51:bf:12:8e:10:67:c6:b5:f3:62:
         9d:05:a1:75:a8:a9:07:af:b9:9f:9f:10:20:76:f0:c9:be:64:
         a5:03:ee:72:c2:61:5a:20:6f:8d:83:3a:6f:8d:94:99:06:52:
         d1:e1:03:3e:84:d9:34:59:aa:bd:13:bb:e5:2a:fb:29:52:63:
         ac:50:45:9d:a4:93:8e:40:e8:dc:7e:44:71:e0:5d:30:4b:ad:
         fd:90:98:43:a6:74:f8:5f:79:63:35:ba:ad:c2:ec:9b:10:dc:
         4b:b2:50:57:79:14:e7:9e:0f:13:3c:96:e3:81:2e:b8:7d:9f:
         02:22:29:6f:20:a1:8a:c6:a1:c3:2d:eb:d0:43:19:0b:d2:97:
         94:a9:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----