Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32e1700d-9f11-47b5-9bb3-43193cebf550.roa
File:                     32e1700d-9f11-47b5-9bb3-43193cebf550.roa (raw, json)
Hash identifier:          3CLjcSM3Xk/PJeLxWppSy7sx2V1R01HC2g7Hc31z6uU=
Subject key identifier:   2B:9B:97:AE:68:9B:76:E4:95:FD:39:58:3F:CC:F7:12:49:79:4C:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B85662DC535F79AD096CCD90BDBCFDC9B4A9361
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32e1700d-9f11-47b5-9bb3-43193cebf550.roa
Signing time:             Mon 20 Oct 2025 03:51:25 +0000
ROA not before:           Mon 20 Oct 2025 03:51:25 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:66:2d:c5:35:f7:9a:d0:96:cc:d9:0b:db:cf:dc:9b:4a:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:51:25 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=cb060e1d8206517e68eaafe64d6c95cda25a7ddc86f9afbee032294036c96ed8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:64:60:66:6a:98:71:9b:08:20:0b:c4:9c:
                    f9:9c:cc:76:10:50:bb:80:81:11:e2:24:19:8f:1d:
                    7b:aa:e8:68:ee:55:f7:f4:58:a9:a3:b8:24:30:ef:
                    24:a5:01:63:fa:c2:c5:dd:20:55:10:9e:f9:77:5b:
                    68:e4:92:5b:e9:66:32:66:5f:f9:93:24:d2:f7:e8:
                    80:96:47:0b:16:51:07:12:e6:68:95:50:cc:b4:32:
                    91:73:8d:71:b9:18:28:ba:cf:9f:90:10:2a:95:0f:
                    39:a5:72:e8:e2:63:33:73:01:d0:42:01:ab:13:3f:
                    b3:54:84:ff:b6:a5:b7:e6:6f:70:48:27:76:8b:b3:
                    68:de:1e:64:b0:e3:3d:3b:a0:cd:5c:80:a2:5a:87:
                    9b:b1:11:8d:90:c4:fa:b0:ea:df:1b:dd:d9:c9:25:
                    a7:92:4d:e8:51:d6:eb:44:37:b4:60:39:9d:c3:ac:
                    d8:40:2e:a5:09:2c:e3:e2:25:10:42:d2:4d:5f:ed:
                    37:ca:7c:c4:17:7e:f6:bf:a9:13:91:ec:8e:f3:79:
                    7f:50:31:1a:a7:ce:e9:38:17:c6:41:a2:02:8f:21:
                    59:e7:01:9a:ad:03:2b:3e:a4:fd:a3:9d:93:11:3e:
                    f8:e5:6a:88:ed:35:b7:97:93:a2:75:b9:35:d6:9b:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:97:AE:68:9B:76:E4:95:FD:39:58:3F:CC:F7:12:49:79:4C:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32e1700d-9f11-47b5-9bb3-43193cebf550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:36:4f:dd:b1:24:cb:2e:a2:79:f5:83:ae:c2:5c:82:7b:48:
         40:3d:31:ca:1e:be:72:39:9a:dc:b6:30:f8:47:8f:15:75:18:
         98:bc:fe:73:75:59:32:11:b9:b4:61:ae:c5:de:2b:b5:92:21:
         87:92:5d:45:0c:19:a8:7a:dd:2f:3c:07:12:9e:fc:83:cb:b3:
         03:f2:be:51:73:60:9d:d7:4d:85:fe:0e:36:3d:32:c8:87:1c:
         10:09:28:e8:68:cd:30:ed:55:a6:c8:45:68:42:6a:53:69:c7:
         eb:fc:a9:81:33:3f:ed:e2:de:78:8e:fb:cd:7d:88:0c:a1:bf:
         cf:31:cc:c3:b2:fc:d8:95:b6:b2:14:dd:ad:dc:c5:a5:a5:92:
         1d:17:5d:52:3f:af:f6:34:34:0f:0b:e8:a1:07:78:3d:97:ca:
         f0:95:e1:bf:4b:3d:f7:4f:3b:29:87:05:2a:02:98:87:49:2c:
         75:3d:ca:3b:59:5e:57:75:4a:70:e6:b6:94:9e:e9:18:01:37:
         d6:6d:06:8f:5a:72:fd:7a:63:8a:a3:c5:08:0e:1c:46:c7:0c:
         61:0f:4d:bc:6e:5b:81:72:8f:ff:1c:88:d9:4d:2e:02:48:c7:
         ca:d4:08:5f:c9:2c:5f:8e:58:4b:6f:5d:81:93:ef:2f:87:e7:
         86:1e:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----