Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2ba44e-2ac9-48e0-8373-89f6e35facbf.roa
File:                     7c2ba44e-2ac9-48e0-8373-89f6e35facbf.roa (raw, json)
Hash identifier:          ItDus9w4Bt4HScZV5K55P9P2dYKBHb33oCVTN83PNrQ=
Subject key identifier:   A6:40:8D:45:1C:AC:AC:55:FF:E4:E1:3D:C8:D0:E3:D4:D1:8C:8F:52
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FEEFE4118B405FCF7739CF10A9817D8C0CBC791
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2ba44e-2ac9-48e0-8373-89f6e35facbf.roa
Signing time:             Mon 20 Oct 2025 03:41:35 +0000
ROA not before:           Mon 20 Oct 2025 03:41:35 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:fe:41:18:b4:05:fc:f7:73:9c:f1:0a:98:17:d8:c0:cb:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:41:35 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5da3454d4c69a83d195804f5f5c50ac3d0ccf0ea45cef38e7b87c492a406d6a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:db:48:f4:20:2d:0d:8f:37:4c:8a:cd:ea:
                    fe:30:eb:1c:f7:a0:e3:95:a8:21:0d:c0:d2:97:f0:
                    2d:ad:2a:9f:a8:1b:09:48:d6:f3:44:d9:4a:a9:70:
                    4f:e4:92:63:12:d9:0c:5f:1a:de:6f:4c:4b:20:a8:
                    55:46:e7:0d:ec:18:a2:b4:3e:a9:2b:6f:de:87:b3:
                    a9:2d:79:fb:54:54:12:46:bd:9b:fa:e3:cf:8d:b1:
                    ae:a8:7a:b6:6e:49:ee:e5:e9:d7:1f:bd:82:a3:d3:
                    12:c8:67:a1:f2:45:e2:e1:71:0f:b1:e4:94:0a:5b:
                    ce:36:f7:0e:91:d3:0f:3e:cc:f2:b0:4d:4b:df:73:
                    f4:c0:72:8f:59:da:08:cb:39:4d:34:f1:e1:9b:5c:
                    ae:6a:dc:32:8f:40:e2:1b:56:bb:af:ca:ce:54:af:
                    64:1c:28:3a:5c:9b:cc:7e:3c:0b:4b:ca:83:be:76:
                    7c:b9:5c:dd:11:57:9f:f5:a6:58:fb:cc:09:be:c7:
                    d8:4f:3b:1f:9a:85:9a:7b:45:b3:df:61:f8:a5:60:
                    f0:0e:9b:18:a5:93:e4:00:9f:5f:07:94:a2:78:b8:
                    3b:cf:db:f7:0a:33:56:bd:46:d1:10:d7:db:6e:bd:
                    d6:26:f8:b1:c1:e4:b7:33:b6:51:33:b7:46:84:fc:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:40:8D:45:1C:AC:AC:55:FF:E4:E1:3D:C8:D0:E3:D4:D1:8C:8F:52
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c2ba44e-2ac9-48e0-8373-89f6e35facbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:89:58:f7:d1:b0:28:b8:4e:75:47:8c:4a:c7:ca:1f:b7:
         49:be:6f:8c:71:20:4a:5b:69:f6:09:64:0b:9c:dd:af:84:77:
         f5:b7:a8:74:6c:c9:84:0e:3a:f5:0f:b6:c5:bc:ea:e0:7f:a8:
         ca:ee:6a:67:aa:ce:60:8c:6c:0c:d2:eb:f3:b9:fd:96:4c:99:
         f3:2e:cd:a9:6b:f2:4c:53:c9:c2:b9:19:f9:65:4d:a7:cd:4b:
         69:79:fe:d4:95:74:67:1d:53:0d:98:a9:5a:f0:d4:ad:53:07:
         21:73:18:f1:38:0e:32:a9:88:30:92:92:55:64:85:e4:91:14:
         65:95:2c:8b:fe:bc:9b:54:2b:b2:90:7a:94:1e:bd:04:6d:76:
         b7:69:5d:37:f7:2e:9c:f8:db:4f:1f:5d:8f:f6:52:18:ff:03:
         00:bd:0a:bd:98:0e:9c:f2:8b:36:56:0f:c5:28:04:c4:59:8d:
         2a:32:ba:1f:04:92:eb:e7:f1:b6:a7:30:c4:19:db:0d:3b:2c:
         e5:49:8c:3a:f1:47:14:da:41:73:b3:63:eb:60:b0:8b:4a:d6:
         9b:c0:69:ec:11:d9:14:07:5a:f0:29:bf:b7:7a:f1:20:24:de:
         4e:da:63:c9:3c:b3:26:bf:6e:11:5d:94:1b:c6:43:6c:95:dd:
         cc:32:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----