Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f51f914-dde7-481f-839d-c4be99208dfa.roa
File:                     4f51f914-dde7-481f-839d-c4be99208dfa.roa (raw, json)
Hash identifier:          wpuVFV/+3zfhF+Oozwgey/mWiN7BthS57m6Ez2360EQ=
Subject key identifier:   50:5A:8B:AA:AC:0D:2B:B1:69:93:A0:16:D1:54:3D:FF:D0:28:45:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A1088A6FDC9B0CA01F66A89E112EBE2E5DC28BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f51f914-dde7-481f-839d-c4be99208dfa.roa
Signing time:             Mon 20 Oct 2025 05:52:03 +0000
ROA not before:           Mon 20 Oct 2025 05:52:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:88:a6:fd:c9:b0:ca:01:f6:6a:89:e1:12:eb:e2:e5:dc:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:52:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=1c988bb3f745a7c2b3a32e5633a3852108f7b32a8c2274d448fa96b1ccd8b072, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:e0:a0:e5:a1:b4:8b:17:fe:0c:94:3d:ed:
                    b7:92:e0:dd:88:61:29:09:d2:6a:b1:52:36:39:a1:
                    7a:84:86:d0:be:a7:57:03:a9:6d:8a:62:c6:62:87:
                    01:91:86:56:aa:e8:c0:f4:43:3d:36:f4:23:3f:fd:
                    24:f8:42:64:f7:6d:0a:5b:19:e8:6c:43:34:95:98:
                    78:33:ce:cf:f3:41:8f:f2:74:6c:5b:37:88:1d:23:
                    89:cc:f7:85:a6:74:33:3d:34:be:e9:cf:f4:92:4e:
                    4b:79:ef:3d:4d:56:8c:48:c2:a5:7d:fe:71:9e:96:
                    61:d4:9b:f6:86:7c:c0:66:dd:18:be:dc:6e:f3:37:
                    7b:08:0b:6b:06:3d:06:e8:68:d2:82:3a:04:02:0d:
                    cf:5e:fe:25:65:55:6d:5b:18:c6:d5:25:39:46:f6:
                    f2:04:cd:c5:c1:2b:00:93:d3:9b:68:da:95:50:27:
                    19:68:63:3a:bf:0c:c8:60:24:fe:3d:96:a5:d3:78:
                    e5:a8:f4:12:ff:7a:0f:96:72:45:63:bc:a4:d1:75:
                    0c:0e:57:f8:cc:d5:14:d0:7c:70:50:5c:81:e5:54:
                    ae:7b:db:bb:f7:b8:83:f1:bf:41:7b:c5:eb:2c:66:
                    88:5b:74:d6:ec:b5:41:32:25:e4:36:da:3e:45:d5:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:8B:AA:AC:0D:2B:B1:69:93:A0:16:D1:54:3D:FF:D0:28:45:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f51f914-dde7-481f-839d-c4be99208dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:1e:83:4b:0a:5a:54:61:30:66:cf:4a:ce:35:e2:40:f3:
         fd:fa:85:e9:35:89:fc:05:9f:e7:01:58:5c:50:09:94:97:1c:
         d7:29:b2:4d:a1:1c:75:14:ea:49:06:8e:25:e3:54:35:46:67:
         b6:87:d1:e2:b0:6b:e3:d6:98:45:09:9d:0e:46:45:8e:f6:24:
         30:fa:90:e3:50:22:71:b7:3a:d0:15:9b:89:6c:93:da:10:1c:
         16:18:0a:9d:e2:77:53:82:a0:d6:92:26:55:31:1b:83:02:f4:
         97:6a:aa:02:a9:f0:bd:5a:51:a7:42:f2:e9:3b:78:46:8a:30:
         ba:17:b5:34:fd:7d:fa:76:bd:20:66:ab:ee:da:4b:92:d2:5a:
         74:96:ad:80:71:72:11:e0:bc:97:6f:2b:05:46:c0:d3:56:60:
         8b:92:b3:34:48:3a:3e:0f:3c:3b:b2:3a:a6:42:4f:a0:ba:d9:
         f8:c3:a1:26:bc:71:4f:d1:fa:54:ea:6b:cb:e9:e4:27:43:32:
         83:a8:11:8e:bb:67:72:3e:49:cb:c6:15:56:94:fa:8d:1b:ed:
         5d:dd:9b:7c:db:f3:11:36:37:5d:4d:60:a7:fe:69:04:73:73:
         71:1a:cc:5d:ab:9d:e6:83:cf:6b:f1:f8:47:62:32:84:12:3c:
         fc:83:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----