Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38778360-12a0-4af8-9c98-0130cf13d647.roa
File:                     38778360-12a0-4af8-9c98-0130cf13d647.roa (raw, json)
Hash identifier:          JG27UT0+tIp0a3Srv7l/SL2AbIGkMD6yVr0AamhSSUQ=
Subject key identifier:   F4:CD:82:A2:75:C4:FB:14:13:94:58:13:BF:5C:EA:2E:93:5B:B3:83
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       400F9D1C0634A0429F6FE5537E00FD2F5B333171
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38778360-12a0-4af8-9c98-0130cf13d647.roa
Signing time:             Sun 19 Oct 2025 01:21:32 +0000
ROA not before:           Sun 19 Oct 2025 01:21:32 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.64.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0f:9d:1c:06:34:a0:42:9f:6f:e5:53:7e:00:fd:2f:5b:33:31:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:21:32 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=232576503d8386dad1f699578d043f023c12482fb68e586f2fb873de6b3eb763, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8a:79:1a:07:5c:5b:54:99:a7:15:b6:b9:a2:
                    0c:16:52:1f:2a:dd:c6:14:3a:c5:00:6b:65:26:cf:
                    01:2d:e4:70:34:9c:98:70:f9:b2:97:45:08:35:62:
                    73:9d:df:00:43:cb:fb:9f:8a:3c:82:40:12:98:d2:
                    e4:77:cf:c2:1e:22:fa:c3:66:04:51:b0:f6:b6:cd:
                    78:db:a7:79:ee:12:e6:d3:cf:dc:d8:b0:7f:c2:34:
                    06:92:e9:8f:9f:6c:eb:f2:6a:2c:d3:77:d1:fc:b3:
                    1e:43:13:57:85:4b:90:29:8c:db:f8:da:15:52:b9:
                    67:6a:38:f7:da:ce:9a:93:97:92:9b:6a:1b:2b:57:
                    7c:05:ae:6b:52:33:a4:50:c3:a2:79:73:b1:13:c4:
                    49:de:c7:1a:a0:8a:65:74:f2:a0:54:a8:18:79:c9:
                    2e:19:3d:a8:d8:be:21:8f:86:40:f1:93:55:aa:5a:
                    b1:19:61:14:4f:24:ac:56:ab:9d:9f:43:9d:6e:c3:
                    0f:f3:07:21:ec:bc:e8:72:6f:a0:25:43:2f:29:44:
                    b2:f4:cb:91:7d:7f:78:86:9b:36:67:52:0d:88:67:
                    84:15:1d:19:49:7a:e1:f3:ef:9c:30:9d:f2:14:ed:
                    57:c3:c4:69:b0:4f:8c:14:6a:41:9e:82:dc:a0:91:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:82:A2:75:C4:FB:14:13:94:58:13:BF:5C:EA:2E:93:5B:B3:83
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38778360-12a0-4af8-9c98-0130cf13d647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:3f:9d:35:b4:a5:ea:c7:4e:67:f3:73:d2:cf:b6:42:81:
         b1:de:af:4e:e6:b9:7d:f3:4a:b4:c6:df:40:6f:d9:c7:53:68:
         c1:b1:62:e7:5d:17:4b:84:a9:23:bf:05:54:b5:4f:f6:5d:4d:
         77:f2:50:ae:d8:83:27:02:e2:12:d5:2c:3d:49:ed:f6:13:e2:
         2c:77:5c:62:91:64:20:e3:7b:68:70:4a:d2:28:1d:46:f6:3f:
         c4:aa:ec:1a:90:79:d9:11:1e:50:58:c3:db:4a:bf:24:ce:8f:
         40:e0:49:c3:59:47:fd:e2:bb:44:d3:d7:f0:fa:7f:ad:89:7a:
         49:4f:34:cd:16:5c:28:9e:53:1b:4d:d0:3d:c9:85:1c:4f:36:
         12:cd:66:e9:70:18:cf:69:51:22:32:4f:5f:7e:70:2e:f8:1d:
         f6:f0:ff:5f:b9:f0:3e:c5:a2:ad:1d:7b:dd:12:cf:e6:b6:5b:
         f0:d0:03:cd:6f:f1:db:f5:e3:20:36:ea:46:a7:24:21:5c:e9:
         23:79:f4:16:83:1a:d1:d6:42:cb:fc:af:44:72:92:eb:85:7d:
         fc:fc:d0:ca:2d:88:75:7d:75:24:31:15:0e:f3:0c:64:31:fd:
         8a:6a:2c:9c:d5:65:85:65:97:55:5a:09:05:61:85:af:8a:aa:
         e1:01:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----