Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5058eb5f-9eb4-4935-a144-aa5e80f8d41e.roa
File:                     5058eb5f-9eb4-4935-a144-aa5e80f8d41e.roa (raw, json)
Hash identifier:          dObYlGbdUo6vnoGxp849zr3L1TCfWqznPVSCz2AA9FM=
Subject key identifier:   94:96:63:7D:93:06:7F:F2:F6:8F:F2:60:4B:59:E8:E4:30:5C:02:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D31F6699F756A8F08BD49A40E88FC21AE51F119
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5058eb5f-9eb4-4935-a144-aa5e80f8d41e.roa
Signing time:             Fri 17 Oct 2025 00:39:57 +0000
ROA not before:           Fri 17 Oct 2025 00:39:57 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.136.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:f6:69:9f:75:6a:8f:08:bd:49:a4:0e:88:fc:21:ae:51:f1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:39:57 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=25ea35e3012b3cf3fc156bcd5a451a1c6ddee33edd9070e706f8caaf19296eda, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:90:24:5d:e7:cd:86:ec:bd:94:97:1f:95:
                    8c:78:44:c1:43:32:b1:9c:79:16:11:8c:95:f1:39:
                    3c:0c:b9:88:4a:66:66:6c:f1:05:93:dc:90:ef:d3:
                    5c:7a:09:1c:80:a3:a7:f4:91:18:7e:15:b9:68:b3:
                    ce:39:ee:67:0c:ab:1a:26:5b:f9:91:f9:b2:90:bf:
                    89:eb:8b:0d:9c:f8:5a:51:d5:7d:92:08:c1:26:7d:
                    eb:89:73:1f:a2:c9:db:70:87:3d:f4:7f:c6:13:b4:
                    f3:cb:27:47:6f:ee:dd:c4:9c:b2:5f:bc:c3:73:a6:
                    25:75:a3:bc:b3:36:53:c5:53:d6:ba:be:34:d0:85:
                    02:45:75:22:0e:2e:86:d1:ea:c8:17:29:0d:e3:0e:
                    06:32:7e:e7:b1:6f:fe:37:0f:55:7b:83:f4:f2:b8:
                    7d:95:0e:9d:e1:13:8a:e7:70:a6:d3:09:20:f7:fd:
                    0c:7c:d6:7d:18:f3:cb:b7:d1:bc:ec:f8:cc:b1:ce:
                    54:4f:b1:58:ba:93:6d:21:bf:ef:15:35:c9:3d:6a:
                    ab:4d:e7:2e:52:f0:c3:59:48:20:0b:ba:2a:ce:8d:
                    0e:e5:d9:9c:b7:14:25:6e:ef:62:25:0a:83:9f:3b:
                    ba:dc:f9:4b:cf:01:a4:0e:8b:39:a2:cc:5b:57:b7:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:63:7D:93:06:7F:F2:F6:8F:F2:60:4B:59:E8:E4:30:5C:02:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5058eb5f-9eb4-4935-a144-aa5e80f8d41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         96:f8:45:ef:9a:be:33:aa:37:2d:25:1f:ab:fd:10:84:f4:59:
         ee:f9:2c:ad:bb:9a:00:30:cb:3f:33:b2:0d:83:fb:5c:c4:b9:
         12:3c:98:89:1f:f5:2d:5b:54:79:60:e6:23:e6:d3:e4:b2:e6:
         00:b7:50:08:ca:ff:cb:1d:05:0e:8c:9c:6a:16:0a:89:b1:cf:
         0f:89:04:8a:ef:21:f4:31:46:30:8f:f1:20:db:ac:17:dd:0f:
         4a:d0:04:11:cd:55:5b:2b:e5:30:3f:f2:df:1d:5f:38:50:97:
         dd:37:d6:72:0d:dc:88:4c:e8:ec:0a:b3:b6:65:e8:91:77:ba:
         4d:3a:db:61:fb:ae:f6:19:78:01:3d:da:90:9c:ab:a7:7a:4d:
         ba:67:a1:1c:b5:fd:b3:7f:4c:ce:43:e5:ea:ba:1b:d5:f2:c7:
         83:41:b0:23:b5:8d:f6:44:ac:2e:74:10:c4:c3:27:9d:77:6e:
         bc:15:83:ef:c5:c8:18:b9:30:9d:cf:5c:15:66:4b:f8:2b:e5:
         01:62:62:3f:05:c3:38:22:47:cc:4b:fb:13:b8:a0:3c:61:fd:
         00:99:25:d6:c9:f5:11:b1:d7:3e:8a:b8:b3:25:13:d6:3e:09:
         83:a9:90:cb:bd:84:18:98:93:5d:75:43:7e:f0:6a:15:29:97:
         c8:25:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----