Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5094cf-ca9e-4d20-893a-51f59795f80a.roa
File:                     5a5094cf-ca9e-4d20-893a-51f59795f80a.roa (raw, json)
Hash identifier:          0mZ3ft2d65h18rayHsuXXBha/xLCKxixoX/jKGOIpTA=
Subject key identifier:   06:3B:07:F2:66:00:4A:D0:B3:33:EA:5E:96:E1:D0:EA:56:98:0B:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       730F99E352817373C637C7D785993B043558D0CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5094cf-ca9e-4d20-893a-51f59795f80a.roa
Signing time:             Sun 19 Oct 2025 02:41:27 +0000
ROA not before:           Sun 19 Oct 2025 02:41:27 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0f:99:e3:52:81:73:73:c6:37:c7:d7:85:99:3b:04:35:58:d0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:41:27 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=6245b8c7a5f67c76273bb1c66a15f06a904d389d351e0ffee5ab13214abad469, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:47:4f:ce:1a:b3:9e:d7:b5:e5:04:a9:70:
                    26:67:4d:d4:6f:57:dc:fc:d8:cb:86:17:cd:46:42:
                    1b:9b:ec:8d:72:81:57:76:22:64:3d:c8:a5:ac:95:
                    ff:c7:c0:74:b4:07:61:96:7d:60:dc:49:0e:86:c6:
                    a2:04:c0:b3:bb:1b:a3:4a:c7:03:6e:32:47:c3:58:
                    70:65:38:0b:4b:a7:da:cd:f3:9d:39:49:10:a8:5a:
                    16:95:ba:84:08:0b:e1:12:2a:b5:0b:f8:33:fc:f2:
                    58:34:bb:ee:35:74:96:41:14:cf:a9:b9:b1:d3:be:
                    f9:c0:a1:63:0e:41:ad:81:93:65:e1:33:c7:de:1a:
                    eb:72:6f:45:3b:e6:b3:2a:6f:40:3f:d8:6e:f2:00:
                    cd:26:47:56:f6:c3:1e:24:04:d2:af:e7:a7:48:6d:
                    8a:7c:80:81:62:91:6d:e7:60:c0:3f:9f:ab:0e:89:
                    7d:2f:5e:aa:b9:84:1e:d0:c3:87:39:82:83:17:31:
                    b1:b8:a3:14:01:5c:d0:92:d7:f2:d1:af:14:7d:dc:
                    11:e6:f1:95:a0:c4:0a:1b:04:b8:4c:a2:ae:33:31:
                    bb:ff:4d:f2:86:39:c1:62:1a:07:f3:cc:2d:7d:4f:
                    39:90:44:7c:14:a8:3e:8d:0e:94:75:44:5c:4e:25:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:07:F2:66:00:4A:D0:B3:33:EA:5E:96:E1:D0:EA:56:98:0B:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a5094cf-ca9e-4d20-893a-51f59795f80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:49:f6:33:01:4c:14:72:ff:f6:bf:38:cb:4b:0f:6e:16:fb:
         74:a0:81:94:fa:84:ba:ad:85:36:ab:6a:69:a5:43:7c:2c:c8:
         3b:ef:52:68:57:7f:4b:6e:e8:3d:8d:f0:c4:c2:03:ab:6e:9e:
         31:5f:24:a2:eb:74:5a:9e:e0:67:51:19:7a:d8:69:47:38:78:
         2d:bd:68:8a:20:e1:51:48:0e:ca:f1:2e:81:c1:e7:17:b3:8a:
         fe:55:22:30:e3:eb:99:f9:54:da:95:8c:8b:ce:ef:20:83:0b:
         ce:be:06:ef:39:50:2d:b7:20:77:4e:15:e7:52:70:8c:83:e0:
         6b:d2:c8:ac:8b:46:39:61:25:a4:6d:3a:49:12:47:36:76:31:
         2f:e7:79:39:41:96:42:1d:19:64:c2:83:ae:17:d3:47:06:d8:
         65:76:8e:37:79:96:a6:5a:2b:66:b8:0e:62:34:86:2a:4a:c2:
         70:ae:53:1f:cc:ed:fd:2d:6f:67:3e:75:e0:1a:f6:49:74:0c:
         a1:49:3e:67:8d:53:5e:04:54:30:7c:50:ec:96:e7:b2:aa:2a:
         05:d4:e5:0a:14:98:12:60:0b:97:08:54:f4:0f:e5:c1:95:d9:
         2f:43:69:b8:46:8b:82:76:66:46:dd:e8:06:b4:2a:cd:53:fc:
         bb:44:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----