Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a2d1c4-bec6-480e-b788-d1a6897a4e59.roa
File:                     83a2d1c4-bec6-480e-b788-d1a6897a4e59.roa (raw, json)
Hash identifier:          59HNg0iqVZZJIQCIp9cKR8Sl4/n+n4OcQZm2MUhDnAw=
Subject key identifier:   80:67:F6:B2:32:F2:86:BF:EE:C0:8B:E1:0C:05:9B:D6:0D:FB:FE:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4446F226960BF52F680FBFF23B64D1DE82B4BC37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a2d1c4-bec6-480e-b788-d1a6897a4e59.roa
Signing time:             Mon 20 Oct 2025 03:00:03 +0000
ROA not before:           Mon 20 Oct 2025 03:00:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:46:f2:26:96:0b:f5:2f:68:0f:bf:f2:3b:64:d1:de:82:b4:bc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:00:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=81f7fac3c0fd3474aeb106c6d3a99522ff5e3be4804ec13efffba7c67b4d2bf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:67:25:61:7f:66:30:3b:02:9b:28:e6:03:
                    6f:96:64:e3:5e:ce:e1:f7:8e:c3:86:5b:b4:f6:00:
                    3a:2c:7b:87:61:ce:18:1d:1f:9a:22:47:b5:62:8a:
                    29:91:31:1c:0c:ed:3a:71:35:65:1f:d7:56:f0:e3:
                    80:cf:df:af:4a:2f:3d:13:58:8e:15:5b:88:c5:14:
                    1d:31:ba:ac:49:d9:4b:2e:99:91:38:81:26:f8:f6:
                    12:11:54:ad:75:d6:16:2f:13:f3:54:60:24:63:dd:
                    07:92:e3:9c:b2:89:c9:bb:af:44:ca:bc:73:9e:44:
                    8e:f9:91:7c:94:58:1f:a1:8d:2a:37:9b:63:ef:0d:
                    74:2a:6d:85:69:5b:70:a6:47:97:97:54:ff:ab:a1:
                    2c:7c:bd:c9:9b:b5:67:04:97:f2:b8:07:32:38:12:
                    4f:02:1b:cf:8b:2e:5f:6d:27:e4:5c:7a:ad:c7:d3:
                    b1:51:9a:e0:38:51:35:d4:89:86:e3:9f:8b:ee:81:
                    8d:79:f9:5e:00:0f:6a:5d:26:53:11:e7:10:4a:bf:
                    2f:3b:4f:8c:7f:5e:c3:d7:c6:24:af:c9:fc:e0:53:
                    55:3f:35:7f:79:c0:5a:b4:86:f8:63:d6:c3:74:a3:
                    07:ce:86:75:df:8e:05:b6:79:5b:db:a3:ca:f5:e0:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:67:F6:B2:32:F2:86:BF:EE:C0:8B:E1:0C:05:9B:D6:0D:FB:FE:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83a2d1c4-bec6-480e-b788-d1a6897a4e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:93:77:0f:19:fa:27:ae:e5:f7:75:0c:c0:cb:fa:d5:e4:b4:
         93:a6:e1:95:47:57:dc:2a:f6:73:95:14:7c:03:4c:56:4b:8c:
         c6:97:b5:96:8f:07:f3:ba:83:f8:c9:fd:e9:44:95:fa:1a:d3:
         c4:95:ba:df:51:61:a3:cc:8c:83:3d:4f:b1:62:7b:87:21:1b:
         32:34:af:1e:60:73:b1:ec:a5:5f:c4:84:2c:46:15:a4:c7:ea:
         37:80:aa:12:c7:5c:26:50:32:94:30:39:e2:a3:c8:eb:3c:3b:
         8a:dd:74:b0:da:f1:37:cb:b2:dc:15:4c:5c:58:57:4e:67:9f:
         77:5e:ca:3a:02:b9:58:cc:bf:b5:69:51:49:fb:9e:0b:7c:ae:
         cc:22:8b:b1:cf:ec:05:93:5c:cf:55:c7:55:0b:af:22:df:d2:
         f5:7a:ab:f2:30:e1:01:a0:1a:06:ee:8e:ab:ba:67:15:e7:5d:
         b1:23:f5:70:79:b4:72:32:8e:99:74:79:b4:4c:23:c1:9c:9d:
         aa:99:e5:12:81:15:b2:d3:27:5f:75:0c:4f:47:1e:f0:9b:2a:
         a1:bb:8f:34:7e:9f:18:2e:53:4b:c9:f1:a4:9d:cd:76:fd:44:
         ab:34:fa:56:91:e7:33:33:e4:f1:2d:36:59:2c:01:6d:4d:a8:
         a8:58:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----