Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ef4060-6905-46ab-a85a-2303e58fa0e5.roa
File:                     53ef4060-6905-46ab-a85a-2303e58fa0e5.roa (raw, json)
Hash identifier:          qpRRBlbgHxtyctQrATzX3EwQEdqDHpA+6aQtozt3m/g=
Subject key identifier:   4E:FF:91:15:96:BE:D4:A8:5D:44:20:12:5C:02:E9:FA:68:FA:9F:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       598057C0C0644483B8D1CBA8B13F1453A420C979
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ef4060-6905-46ab-a85a-2303e58fa0e5.roa
Signing time:             Mon 20 Oct 2025 06:12:10 +0000
ROA not before:           Mon 20 Oct 2025 06:12:10 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:80:57:c0:c0:64:44:83:b8:d1:cb:a8:b1:3f:14:53:a4:20:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:12:10 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=69654d321cb1d2d7c79a6ef07919e296f9602934e4a268986580142b84daa292, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:bc:ee:33:41:53:3b:53:2a:b6:04:20:1d:
                    6d:9c:33:cd:76:c0:8a:c8:fe:e9:83:6f:86:53:86:
                    65:4e:ad:2b:b8:cf:bd:cd:fd:16:46:dc:8c:b7:59:
                    d9:68:43:5d:16:f1:35:02:59:b4:51:1f:19:c1:19:
                    e3:fd:88:7d:95:03:b8:8a:b8:a7:ec:90:89:da:c4:
                    1c:3f:cf:74:14:31:dc:37:7b:98:6b:89:ca:d9:06:
                    81:9d:ce:d0:a7:71:68:b8:44:7f:99:5c:87:a8:1e:
                    46:da:15:cf:84:ef:f8:e7:67:1a:1d:68:45:f6:b9:
                    99:4c:89:ec:1a:2e:1d:66:56:74:b0:88:5f:15:99:
                    97:59:81:dc:dc:02:76:32:cb:fc:0e:32:77:a7:96:
                    dd:93:d2:56:4d:98:04:62:56:cb:4c:34:c0:73:05:
                    4c:be:75:1e:d8:94:af:d1:cb:f4:1b:4c:cf:72:9e:
                    ab:db:5e:e5:11:b6:e2:fc:94:92:2b:d6:e3:9d:e3:
                    40:b9:f6:6e:b1:fd:75:85:33:f6:06:a1:0a:07:0b:
                    2b:89:19:65:74:5e:87:eb:14:cf:76:c0:e8:46:86:
                    70:41:ce:fc:4a:03:86:c5:cc:99:0f:04:00:4c:c4:
                    83:e0:0c:c4:d1:3f:1e:6b:51:ca:83:4f:81:17:0d:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FF:91:15:96:BE:D4:A8:5D:44:20:12:5C:02:E9:FA:68:FA:9F:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ef4060-6905-46ab-a85a-2303e58fa0e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:b5:90:3c:ef:a6:5c:5e:68:5c:c4:ca:ff:80:c4:a6:6a:
         71:d7:71:c6:38:4e:ef:0d:6d:5f:70:2c:ac:73:5a:b8:a4:86:
         48:c3:af:33:8c:da:1f:95:ba:f2:7d:18:43:22:60:c0:9c:db:
         ef:99:a9:92:85:2a:cb:6c:a1:4b:60:e2:9c:be:e6:e7:dd:b1:
         54:cf:4f:31:99:88:f7:13:8b:e4:f4:9d:f2:be:5a:81:a4:b1:
         e0:57:aa:54:86:02:77:6f:20:30:97:c7:17:2b:c2:af:51:30:
         91:d4:ef:94:78:af:12:f6:b6:88:3b:b7:e2:80:c6:fc:ce:42:
         ad:7f:64:ba:60:35:2d:ec:28:9f:9d:39:7f:42:77:e1:ac:5d:
         8a:39:64:64:73:96:40:eb:61:91:57:5f:67:66:12:b2:cf:b2:
         13:f3:e2:6c:55:7e:3f:03:31:41:43:c0:51:38:82:8d:2a:ed:
         b1:63:ec:e3:b7:30:dc:b1:62:51:c1:4a:17:d0:49:ee:51:3b:
         2b:17:81:2e:b3:aa:48:eb:b4:af:a0:58:1b:be:38:24:f5:58:
         62:b6:a2:bb:77:66:51:8f:b6:ae:b6:44:30:99:d8:d0:ca:9a:
         5d:5f:dd:ab:47:57:51:06:a7:f4:80:d3:74:05:7e:67:22:6f:
         c2:f7:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----