Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ed69d58-b7fa-4a92-b73d-37a5d8474167.roa
File:                     4ed69d58-b7fa-4a92-b73d-37a5d8474167.roa (raw, json)
Hash identifier:          WaNp36Z/Gtq7u1p6m84TJLHyc+ej/diTyZxzxbXG+r4=
Subject key identifier:   BE:64:A0:C6:A8:F1:9F:6D:E8:6D:6F:D0:77:A6:63:3D:87:87:7A:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E6EDD9D08069E3F8EC301F77A41797CB7E3B986
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ed69d58-b7fa-4a92-b73d-37a5d8474167.roa
Signing time:             Mon 20 Oct 2025 04:31:07 +0000
ROA not before:           Mon 20 Oct 2025 04:31:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:dd:9d:08:06:9e:3f:8e:c3:01:f7:7a:41:79:7c:b7:e3:b9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:31:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=f2d9948a82464bd525e24f83271120395b6977bdd1a97fb27ec7f64419f3be82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:09:6c:51:ed:f8:cb:8f:00:f3:f2:3e:55:
                    a6:e5:43:2b:1d:aa:cc:25:21:36:6a:8f:5b:1f:3f:
                    41:7f:0c:35:ca:8d:82:83:b5:bc:71:49:45:1a:d9:
                    8a:dc:f5:f8:17:d2:08:b0:53:2c:3a:d5:4c:55:0a:
                    65:a3:04:cd:a6:ad:66:d2:ec:e5:3d:4e:5c:c3:3e:
                    67:03:2e:9b:0e:de:f3:8c:4a:a3:a0:06:2c:d7:89:
                    f0:ae:57:64:cf:e2:38:da:0b:eb:1d:e6:78:0f:ec:
                    d9:f7:b2:a7:40:65:87:7d:40:05:90:44:93:a7:a8:
                    de:b4:91:bb:6f:97:31:24:9f:dc:c4:d1:6b:b5:fc:
                    d7:c8:a9:cb:01:6d:e9:13:b1:3d:99:db:d4:1c:d6:
                    44:1b:d7:c2:6b:24:dc:a1:12:79:c3:ca:1a:47:64:
                    df:d3:70:aa:83:d5:09:ca:8e:23:d6:82:c3:2c:11:
                    ef:64:d0:b8:73:87:25:50:75:6f:0a:69:77:f7:9f:
                    94:6f:d7:21:84:11:62:4e:25:39:8f:16:a3:b8:0c:
                    71:08:08:28:27:6e:ca:2d:79:89:cb:d6:66:04:82:
                    9b:4c:01:50:e7:da:31:dc:1d:00:4a:c6:a2:1b:db:
                    26:7a:03:f8:72:c7:91:c5:0f:cb:16:23:d6:73:12:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:A0:C6:A8:F1:9F:6D:E8:6D:6F:D0:77:A6:63:3D:87:87:7A:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ed69d58-b7fa-4a92-b73d-37a5d8474167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:fd:3a:a0:06:5a:8d:6b:72:46:18:df:dd:27:0a:db:82:
         46:9e:42:47:ba:99:29:ae:c0:7b:ae:48:52:bf:eb:78:7c:c2:
         6f:1e:2a:73:3e:91:cc:38:db:76:3c:3a:2d:75:9f:9f:f9:66:
         e6:60:56:6f:b6:40:99:c0:41:ae:05:ea:a8:2b:d3:62:65:34:
         64:62:11:e6:fd:e2:d5:09:d9:72:4d:02:2b:21:39:92:6f:6b:
         c3:fb:73:3e:79:27:33:f5:fe:d4:a0:04:34:e9:ab:0b:97:ac:
         10:8c:5d:bf:42:6e:fd:40:2a:f9:88:91:b0:6f:22:91:e1:77:
         dc:b1:60:e9:8a:e6:76:7a:d0:dd:14:d8:f7:e5:f3:7d:3a:b8:
         5c:d2:e4:de:3b:58:7b:e0:de:bf:5a:70:8b:82:77:69:77:6b:
         17:61:5a:71:d7:93:fd:3c:9d:a4:75:68:75:36:a5:e9:66:9e:
         30:6b:e5:fa:75:dc:39:c8:77:d5:4d:70:d2:08:e5:fe:84:e6:
         1d:29:e1:65:6d:9f:49:3f:2f:9f:03:69:fb:cf:af:6e:41:e7:
         44:af:4d:35:ff:fb:54:58:85:fe:15:3d:4a:fa:6c:31:f8:d5:
         32:87:9f:c2:02:dd:d5:54:52:8b:91:2d:d5:62:6b:82:0f:4e:
         c9:ce:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----