Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ca67fc6-1fe2-423d-b948-2ddbaed57fc6.roa
File:                     6ca67fc6-1fe2-423d-b948-2ddbaed57fc6.roa (raw, json)
Hash identifier:          LBj4WrSRyDpKHM7QPTOFI+ZnVSdmNeFr81OT5BCaHvk=
Subject key identifier:   5A:C3:2A:54:D3:CB:07:85:D4:FB:53:01:2B:98:02:E0:D1:25:4A:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FFB4D2022A9B7BB31C7281AC6871EB45BE54749
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ca67fc6-1fe2-423d-b948-2ddbaed57fc6.roa
Signing time:             Sun 19 Oct 2025 03:01:22 +0000
ROA not before:           Sun 19 Oct 2025 03:01:22 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fb:4d:20:22:a9:b7:bb:31:c7:28:1a:c6:87:1e:b4:5b:e5:47:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:01:22 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=0b55cdb6d8b5d75191fc3f07efa28766b38ca10b7b3f0a8d427950c54484a941, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:7d:92:cc:b7:45:94:fe:df:9b:15:3e:4a:
                    a4:06:66:b2:fc:6e:17:74:d7:35:64:04:7f:64:27:
                    71:5c:2f:14:17:e1:91:dd:47:07:9c:c9:29:5f:a7:
                    11:81:d9:cf:00:b8:31:23:f1:77:30:23:c0:00:0c:
                    3a:e8:b2:58:70:08:55:a3:f1:a7:19:06:f9:cb:4a:
                    0b:dd:86:dd:81:96:97:53:f1:4c:07:8f:f6:89:1e:
                    72:3c:d9:ba:c0:dd:36:49:ac:2a:35:a9:cf:e3:fb:
                    b2:32:fe:e5:6b:ae:4d:42:51:71:30:96:72:a9:f4:
                    9a:9c:01:5a:3e:b3:8b:f0:ae:59:63:ba:52:1a:15:
                    15:be:ea:42:5f:e1:dc:72:01:08:cf:26:bd:1a:e0:
                    05:54:73:58:68:f0:06:45:8f:c0:82:52:6c:1e:bc:
                    0f:c3:6f:9e:bc:d5:98:7b:6b:03:37:77:26:3a:5e:
                    35:3a:a7:5c:3b:8f:df:9c:fc:bf:8c:bd:7f:69:7d:
                    db:ec:96:de:8f:7f:37:44:bb:f8:20:22:16:d4:66:
                    74:c4:09:61:f8:9d:8f:6f:17:bb:36:e2:48:63:12:
                    7b:33:92:30:80:1e:42:f9:05:bd:5a:e7:81:bd:3e:
                    96:36:24:2c:eb:64:04:01:2b:40:d8:28:7d:3f:d2:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C3:2A:54:D3:CB:07:85:D4:FB:53:01:2B:98:02:E0:D1:25:4A:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ca67fc6-1fe2-423d-b948-2ddbaed57fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:55:45:9e:7f:fb:82:82:c6:45:54:88:ef:cb:ff:4f:64:92:
         17:8a:6b:10:6a:82:cc:d6:0e:12:19:a5:eb:a2:c5:e6:c3:90:
         25:5a:bb:b2:c0:f4:c0:1d:23:fb:dd:9d:42:30:6e:03:27:a7:
         5f:bb:72:af:b1:e7:0c:62:bc:d0:cf:cb:28:4d:32:ec:26:4d:
         7e:c4:79:11:e7:c5:64:c3:69:ac:04:2d:ec:e7:08:48:65:47:
         c7:27:b7:f4:79:96:17:83:ea:f8:ce:6b:be:95:60:23:c0:7b:
         57:ec:3e:ec:0a:ca:a4:c8:ce:e1:ea:44:29:ac:8c:25:0e:dd:
         48:b8:96:8d:44:c7:76:38:94:69:67:00:e0:ea:15:07:ff:db:
         ba:ba:2d:d6:8e:6c:2c:3a:a3:02:68:6a:cb:dc:0e:74:54:7c:
         c3:0e:31:b7:c3:b4:b4:7e:55:3e:6c:8d:4c:c3:a1:a6:5a:fe:
         f3:7f:94:63:23:bd:e4:c2:66:0c:4a:75:be:85:16:aa:df:a3:
         c9:1d:8b:9a:10:fb:d8:52:d9:a8:b4:11:3f:0d:d0:f3:03:e0:
         65:97:39:5b:bd:07:b7:6b:59:d3:86:74:a8:ab:0e:e5:5c:32:
         77:48:68:3f:f7:c8:60:96:40:ae:c1:2f:19:cd:8a:28:8c:dc:
         3c:73:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----