Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c04d811-e527-4adb-bd9f-d7d265bdd01b.roa
File:                     4c04d811-e527-4adb-bd9f-d7d265bdd01b.roa (raw, json)
Hash identifier:          P1S+UqwcnzmbqygOXpK24XoOGm7tqDgWejB7hPkQw/c=
Subject key identifier:   6D:BC:53:87:59:EF:C3:F5:EF:0F:20:B5:6A:CE:75:78:0D:D6:3D:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B3907A96E101CA3CFFAAD74ACB918ED76EA9DBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c04d811-e527-4adb-bd9f-d7d265bdd01b.roa
Signing time:             Mon 20 Oct 2025 02:30:17 +0000
ROA not before:           Mon 20 Oct 2025 02:30:17 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:07:a9:6e:10:1c:a3:cf:fa:ad:74:ac:b9:18:ed:76:ea:9d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:30:17 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=94e98046ae7f1109dcaaaf178cbaea8d133e1adc3a413ca52da23c5706258b6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:1f:27:a0:b2:5e:63:d9:22:e7:ba:1d:8b:
                    55:59:82:a1:cf:13:cb:d6:f1:df:91:8d:07:cf:0c:
                    95:81:50:60:d4:ed:51:6d:07:67:b1:40:02:c0:84:
                    97:87:97:c6:25:2c:1b:64:64:dd:91:97:dc:9e:46:
                    6a:79:58:be:d5:c5:34:c7:e2:44:17:02:f1:19:ac:
                    5d:83:be:3c:b8:37:a6:86:25:e2:bc:be:0d:1e:39:
                    e0:76:e8:7c:68:f9:1c:29:22:7e:3c:91:a1:05:a9:
                    6a:c7:d0:eb:6b:70:47:6f:3e:d3:62:17:93:53:cc:
                    86:4a:5a:8c:fe:ff:d4:15:d6:a6:61:e6:04:73:ef:
                    b9:1c:00:1f:a9:86:d0:da:18:0f:1a:2b:61:9c:81:
                    14:8d:40:88:b4:17:d9:0d:51:1a:c1:cc:c9:d1:31:
                    f2:53:15:f7:fc:92:55:29:ee:cd:90:38:1e:33:5a:
                    f2:14:6d:b1:ae:61:12:88:c7:dd:0c:b0:1c:1c:f6:
                    1f:d4:11:fa:25:23:42:df:3a:1c:ce:ed:48:9b:4a:
                    7b:c0:de:3f:14:da:c6:a6:4e:8e:8a:f7:b6:19:7b:
                    e4:5e:ba:6b:93:43:6c:24:61:fb:ef:19:0b:cd:ad:
                    0c:a2:81:ec:75:af:3d:b6:a7:7b:f5:3e:85:27:a6:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:53:87:59:EF:C3:F5:EF:0F:20:B5:6A:CE:75:78:0D:D6:3D:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c04d811-e527-4adb-bd9f-d7d265bdd01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:fe:fd:d2:de:5c:78:6e:c3:25:aa:af:a3:3f:39:c1:4a:
         ad:0e:29:77:53:13:b7:0b:91:02:1a:64:5b:8a:03:c5:76:fa:
         0a:86:11:a4:09:25:3f:84:6f:c5:86:26:ff:35:2a:d6:76:be:
         22:1a:bb:cf:68:7a:6b:ff:28:a8:72:f0:82:6a:e7:49:39:4c:
         4b:3e:90:e5:f3:3e:f6:d2:72:0b:2c:db:42:a4:53:29:1b:4a:
         32:c3:e4:62:2c:98:98:fc:54:44:76:c5:eb:80:f2:ef:cb:ca:
         d5:dc:8d:d5:54:ab:cc:d2:86:a0:7f:3d:02:b4:a1:a3:ff:86:
         e8:08:67:dc:de:2e:1f:19:2a:53:2a:ba:10:8e:0a:01:ed:89:
         18:6e:13:83:26:54:88:93:ca:21:07:8d:10:60:45:02:fe:cb:
         7a:0b:ac:85:1b:9f:83:ad:80:74:f8:a9:a0:af:d2:58:b9:62:
         69:f4:6b:e5:8b:e0:d4:3c:82:61:64:25:7c:6f:7c:35:a6:23:
         37:62:7f:9c:92:c0:19:6e:ed:d1:25:b5:92:98:ac:35:56:20:
         3b:40:a5:59:4e:67:0d:5f:ce:cf:97:23:e5:d1:06:ea:74:30:
         93:3e:e0:6e:8f:b1:80:a9:7c:17:a1:e4:f4:d0:7e:57:0c:38:
         0a:ba:de:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----