Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38dd80a1-c2f1-4b52-9182-94deb624cf15.roa
File:                     38dd80a1-c2f1-4b52-9182-94deb624cf15.roa (raw, json)
Hash identifier:          BGg0JuPox6RlEnF3o1qgDAweywfB2hLunGxisjasXhQ=
Subject key identifier:   E9:B0:8F:D0:8E:6F:4F:F9:C2:5B:2A:7E:A6:31:6A:70:F0:27:50:9A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43A6FB3F44D265C15818EBCE3FE5BE5BAC7C728E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38dd80a1-c2f1-4b52-9182-94deb624cf15.roa
Signing time:             Mon 20 Oct 2025 05:40:59 +0000
ROA not before:           Mon 20 Oct 2025 05:40:59 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a6:fb:3f:44:d2:65:c1:58:18:eb:ce:3f:e5:be:5b:ac:7c:72:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:40:59 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5067afd3a0c1390aff0982cee66747666941c1fa203d992ec1b1015f7d0c6923, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:68:97:01:a4:ae:b4:4e:61:60:0e:39:24:
                    c0:82:b7:94:fe:c3:0f:9e:9d:25:8e:f3:98:99:0b:
                    e3:ec:ce:d9:79:a2:17:e9:69:9d:c1:95:bc:e6:07:
                    90:e5:e6:d1:fa:86:ed:18:b9:0f:50:ba:29:d6:ff:
                    c5:78:32:6e:84:86:7c:8c:9b:1f:6b:33:b0:4e:06:
                    f9:cc:fa:94:96:44:33:6d:a1:ff:e1:59:9d:25:c1:
                    98:81:f4:ca:02:f3:9d:23:a2:07:b3:ac:c6:fb:fa:
                    47:01:d8:59:d0:d2:7d:03:34:53:06:55:7a:1b:2e:
                    ac:ec:b8:2e:b3:5d:f4:6d:87:33:d2:e0:2a:63:de:
                    f4:3a:fa:73:33:40:06:b6:d7:42:e4:57:27:23:1b:
                    b3:65:e2:f3:d9:0f:7a:ec:69:41:eb:c1:76:39:4c:
                    bb:65:fc:5a:e1:16:99:c7:3d:e3:d1:e4:0f:e2:01:
                    dd:b9:44:3b:65:ad:82:55:1f:99:10:60:ab:9f:58:
                    7b:8c:ce:8c:45:ee:0f:a9:4e:64:99:d6:f4:23:a4:
                    6b:89:b7:f9:93:a6:75:31:f8:2d:76:2f:98:23:21:
                    ea:24:84:38:91:48:56:b0:a1:8f:9c:0d:2c:e6:7d:
                    82:cb:95:ad:ea:6e:ca:03:43:dc:29:43:20:91:f0:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:8F:D0:8E:6F:4F:F9:C2:5B:2A:7E:A6:31:6A:70:F0:27:50:9A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38dd80a1-c2f1-4b52-9182-94deb624cf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:f7:24:dd:53:a9:bb:4b:1c:6d:12:06:07:86:f6:e1:02:
         96:86:08:0a:ce:a3:b5:fc:da:d8:cb:b9:42:15:88:02:6b:8b:
         fe:05:d9:b1:82:b7:c5:3f:18:7a:0c:de:40:15:ae:3d:72:66:
         bd:d8:3f:ee:b0:ff:64:0c:d9:4b:2c:c7:6c:6b:42:25:c6:09:
         50:66:8c:23:91:17:7a:0b:e4:f8:e4:ee:2a:2f:2d:99:7e:d9:
         6d:ab:68:13:0e:b6:7e:4a:13:79:81:8f:4e:88:9d:58:6e:60:
         1c:7c:e4:b5:18:5e:16:df:7e:0b:ea:6e:1c:8c:ef:e0:60:3c:
         82:47:f8:e5:20:c5:b7:ec:22:b4:6f:1b:c3:90:ce:46:d1:db:
         2a:64:2e:19:ad:98:72:a7:39:29:db:0f:e7:2b:ef:97:c3:ab:
         f3:87:a9:11:4d:ba:4b:32:cd:92:e1:b9:de:5e:b9:a4:90:5e:
         a7:f5:a0:bb:61:45:4a:39:df:e7:66:c2:97:6c:e4:b1:0a:0a:
         64:ae:02:d0:f9:15:81:29:b3:c0:0e:c1:3d:f5:f6:65:99:07:
         50:af:37:30:8b:5a:c1:40:54:b4:d5:41:1f:f4:d3:b5:a6:78:
         72:b0:84:c7:67:f8:d7:9a:e7:7d:18:20:63:6f:ce:5c:20:8a:
         82:ed:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----