Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54367d07-e0c5-4efd-b469-3c2754fe5084.roa
File:                     54367d07-e0c5-4efd-b469-3c2754fe5084.roa (raw, json)
Hash identifier:          p347j81Ik2nx6opVdkHQJxCyDQ3aC79XZTyyPcNq3DI=
Subject key identifier:   9E:14:FF:64:33:31:7E:F2:5E:0E:67:9C:D9:B9:E5:34:B9:1C:49:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E7B8BB2DA352B9955A07A0C5A5F6F8909EF0D57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54367d07-e0c5-4efd-b469-3c2754fe5084.roa
Signing time:             Sun 19 Oct 2025 00:00:46 +0000
ROA not before:           Sun 19 Oct 2025 00:00:46 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7b:8b:b2:da:35:2b:99:55:a0:7a:0c:5a:5f:6f:89:09:ef:0d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:00:46 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=e0753301f0e3a80e275e8634c20ec970b4b3beae1025660217cf83528f806bfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:62:c5:ed:33:ae:9e:6e:33:0c:9c:56:a3:
                    42:1f:8f:1a:fa:15:2c:23:69:0a:16:36:8c:cc:1c:
                    68:78:48:0a:5a:17:a0:c0:18:91:23:2d:bc:5c:c2:
                    bb:1c:23:68:58:e3:1f:58:1e:6c:41:31:c6:58:f1:
                    be:01:fe:46:2e:fb:10:99:7f:37:5f:51:6a:a3:d4:
                    bc:f4:06:83:c2:09:cd:ba:35:d3:c4:61:e8:0a:8c:
                    1b:4b:45:e4:7c:b2:5f:a9:51:ed:2d:8c:29:da:8d:
                    ea:cc:0f:ce:7e:a2:2e:6b:24:fd:3a:bc:e2:bb:d3:
                    09:1b:52:2c:c0:56:13:c0:07:c9:bf:0a:2d:30:ae:
                    c1:df:6a:5b:08:67:64:bf:d1:91:80:94:47:35:74:
                    23:88:a8:0f:84:33:2c:80:5e:04:76:9e:5d:5b:06:
                    a3:01:99:92:be:6f:11:1c:56:9b:e3:37:99:14:98:
                    fa:be:4f:8b:bb:15:fa:bf:2a:24:ca:d0:14:fa:0b:
                    64:71:5d:b7:1a:db:19:72:ac:ce:2e:32:3b:cc:f9:
                    3e:b8:f3:89:4d:ba:9b:1e:77:4d:04:0c:da:27:09:
                    bc:b3:65:c5:1c:fd:c7:2b:8b:1e:07:89:2c:32:9e:
                    d6:ba:67:4e:a7:1f:14:8d:28:dd:5c:58:17:05:71:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:FF:64:33:31:7E:F2:5E:0E:67:9C:D9:B9:E5:34:B9:1C:49:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54367d07-e0c5-4efd-b469-3c2754fe5084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:d7:eb:8c:f7:83:b7:38:ac:2a:2b:b5:e3:30:2a:cc:3b:
         05:20:f7:4a:1b:30:6c:85:8c:3a:5a:50:83:42:8f:f9:33:bc:
         d9:07:d4:fa:f8:fb:d9:eb:73:0a:e0:67:93:90:c6:d8:1d:db:
         6c:f8:98:8a:45:e5:7d:d7:ac:9c:aa:f8:77:d9:ba:76:25:6a:
         55:f3:b3:8d:13:d1:49:e3:f9:b5:03:f7:b9:dc:54:1e:96:bd:
         fe:ab:ae:ad:02:b3:15:80:21:85:61:ce:ad:ad:4c:64:83:27:
         f6:d1:df:ae:82:fe:5b:6a:45:b9:c5:58:c4:a1:55:33:73:9d:
         b7:1b:7e:a0:de:c0:fc:2f:e0:5f:9c:48:40:e8:39:46:cc:aa:
         c5:59:c2:3d:07:6e:23:06:a4:ca:b9:69:db:95:31:57:b2:dc:
         43:fb:a2:25:21:26:cc:b4:db:e6:b6:8d:1a:15:61:a2:08:57:
         50:ad:33:21:c8:3d:9c:32:e8:42:10:ab:38:74:41:e4:51:f7:
         75:6a:af:1e:a5:dc:74:d3:19:1e:0b:a1:7b:fe:76:b8:57:7f:
         43:52:12:75:53:6c:0d:e1:f5:82:04:46:b3:90:bf:12:dd:72:
         d3:fe:b6:ef:f8:68:59:6a:62:00:cf:96:4d:30:93:76:1f:ac:
         2d:9e:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----