Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e3023d0-c540-4511-ae9c-355db33399d4.roa
File:                     3e3023d0-c540-4511-ae9c-355db33399d4.roa (raw, json)
Hash identifier:          Q51pVDH112IP84/7DAaCksFvd1IUZmUppOo+GgvbfZM=
Subject key identifier:   20:EC:94:ED:8D:ED:2D:48:EF:B6:B8:06:26:DF:85:76:DE:A7:11:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D2088F91C6D3C2F04C985D588DBD0C0CAF67ED3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e3023d0-c540-4511-ae9c-355db33399d4.roa
Signing time:             Mon 20 Oct 2025 00:01:38 +0000
ROA not before:           Mon 20 Oct 2025 00:01:38 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:20:88:f9:1c:6d:3c:2f:04:c9:85:d5:88:db:d0:c0:ca:f6:7e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:01:38 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=d3151a56d1ba11d858b6beda1987c1dbaf2d513e820465d5018c1e2848a888d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:84:7e:39:4a:af:56:e0:5b:2d:7b:6d:e8:
                    1d:72:ab:56:9e:39:82:ec:7a:97:a4:73:b6:68:fd:
                    2a:a2:00:fe:f1:04:4e:b5:50:42:e6:70:fc:41:ac:
                    25:4e:4a:7f:82:6e:98:00:ad:d5:e8:94:dc:6b:77:
                    28:71:31:93:c0:b1:e0:db:a4:d4:8f:ba:55:be:74:
                    69:b0:91:4e:0c:b5:d2:1b:4d:6f:92:26:86:da:d0:
                    e3:e1:bd:55:17:24:e9:86:e6:dc:c3:2a:14:5d:77:
                    2c:90:85:a9:65:9e:d4:a3:93:03:c9:19:c3:2d:9d:
                    7e:dd:d6:c4:c2:06:a6:fd:e9:5c:35:cc:82:2d:df:
                    21:23:d5:18:5a:8f:2b:0c:c4:9c:a9:70:da:65:b1:
                    d6:9e:d3:7f:45:0b:e4:b0:c7:68:a7:9f:22:09:db:
                    65:46:6e:a6:15:3c:3c:a1:87:1a:77:a5:73:23:0f:
                    52:00:a3:76:3b:b9:54:e3:60:fd:b0:41:99:61:7f:
                    26:1d:7c:26:38:57:5a:06:26:ef:68:33:d2:fa:79:
                    52:f2:16:5b:0e:ef:fe:84:b3:15:00:81:84:1e:0f:
                    f6:81:a9:c5:df:24:dc:2b:f9:6d:28:2e:25:af:14:
                    5a:0a:e3:40:b6:49:f9:96:cf:7d:38:aa:a5:1b:ed:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:94:ED:8D:ED:2D:48:EF:B6:B8:06:26:DF:85:76:DE:A7:11:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e3023d0-c540-4511-ae9c-355db33399d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:e4:6a:ad:00:73:6a:6b:dd:0a:a4:8a:21:0a:0e:07:36:
         db:45:65:33:8a:70:27:0a:f3:24:d4:6f:31:89:51:62:11:5e:
         47:58:e9:46:f6:ec:7a:32:ff:40:d7:7b:01:da:ed:d4:4a:69:
         9a:15:9a:7b:b5:7a:a0:97:e1:dc:88:97:af:a2:6b:9a:f7:a7:
         1a:12:04:1f:00:af:2e:5f:61:fe:f3:ed:2b:a2:33:94:b6:7b:
         97:68:a4:87:3c:12:41:5f:6a:7c:60:11:ed:56:34:59:c1:fe:
         12:da:05:4e:fe:a9:af:bb:2b:c5:4b:44:71:46:0a:f3:ed:1e:
         03:e3:1d:92:32:81:e0:8c:44:04:2a:13:87:d3:b4:70:1d:ea:
         b8:54:a2:ce:69:29:c4:2a:e4:be:b4:c9:c6:01:23:fc:f0:68:
         24:ee:fc:3f:05:45:50:2b:c8:72:db:cb:b2:b4:5e:9a:30:21:
         cd:2f:9a:38:65:84:f1:fc:24:83:60:e6:11:1c:aa:fa:d5:eb:
         b5:8c:c8:e3:e1:f0:a5:3e:19:8b:e3:15:9b:3a:27:cd:dd:ad:
         e0:af:48:93:45:ea:95:d5:ce:b6:f0:74:b2:51:37:83:4e:84:
         2f:e4:8e:48:6e:af:9e:3b:bc:ab:56:f1:b3:1e:f2:a8:37:95:
         9c:0e:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----