Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a305f81-be10-4a9e-b95e-d49a327fa51b.roa
File:                     8a305f81-be10-4a9e-b95e-d49a327fa51b.roa (raw, json)
Hash identifier:          MqyPEGHVZtNnWb7MHX4vF3JjGqHAjbVI8FsPZv/0iiE=
Subject key identifier:   58:66:C8:5C:0C:63:88:AB:26:F7:83:71:44:E1:C6:EF:B3:2F:A6:B9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F41C4CCA260FEB105900D4ADE8FA1B2750A2027
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a305f81-be10-4a9e-b95e-d49a327fa51b.roa
Signing time:             Mon 20 Oct 2025 01:51:51 +0000
ROA not before:           Mon 20 Oct 2025 01:51:51 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:41:c4:cc:a2:60:fe:b1:05:90:0d:4a:de:8f:a1:b2:75:0a:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:51:51 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=490f474b4c943b607287f3db8f45ec1d00a046fcc06fb8a9a0c179a0a6a94c3f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:f3:58:3a:0a:77:e8:8a:41:04:57:2b:5c:
                    c4:54:e0:fa:2f:33:08:4a:4e:fd:0c:bf:b0:dc:90:
                    19:b1:2a:a9:57:24:8e:1e:88:37:3f:ef:93:d6:85:
                    50:c4:75:6a:63:40:b8:3f:a2:a7:b6:ab:a9:94:de:
                    6a:8a:8f:c0:8c:7f:e2:23:76:70:ec:19:a5:36:64:
                    b0:0f:ad:c4:4e:62:7a:e6:81:7c:f0:39:bb:d7:ce:
                    c3:75:61:86:39:06:0c:7c:ab:1b:10:c8:b8:ab:3a:
                    42:41:e6:ce:13:59:c7:e2:0b:6e:c2:07:e6:e1:ab:
                    a2:23:60:29:18:fd:a9:2e:c8:aa:65:f9:73:c5:d2:
                    5d:a6:d8:ad:cf:79:87:9a:a8:44:59:b4:38:59:c7:
                    69:e2:42:6f:43:a9:8e:eb:d3:c4:0b:08:b9:28:54:
                    d5:6a:77:a0:48:4a:d6:d4:ee:00:6e:76:ad:17:a7:
                    60:5b:b0:a9:c9:7b:12:2e:16:b3:ca:11:c1:5d:e0:
                    2d:16:ef:06:9e:0a:f6:77:b6:fb:11:50:32:a0:85:
                    f7:20:4c:be:75:09:0a:b9:e3:30:2a:9f:a7:80:22:
                    0e:42:31:d8:dd:46:0c:88:2e:d9:7c:91:ac:99:9d:
                    ab:0c:85:d3:2a:fe:e4:8a:72:5b:7b:ee:9f:75:3f:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:C8:5C:0C:63:88:AB:26:F7:83:71:44:E1:C6:EF:B3:2F:A6:B9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a305f81-be10-4a9e-b95e-d49a327fa51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:95:bd:7d:ba:b7:53:c8:af:03:66:c6:ba:e2:67:26:de:
         9a:b9:da:95:f4:26:94:e6:80:6c:fe:06:1f:ef:cf:cb:86:84:
         dc:a2:8a:71:5e:45:14:31:b9:75:a1:9e:59:2c:b2:6b:b0:74:
         b3:df:08:45:42:e6:6c:01:e9:ad:50:40:4b:67:84:95:44:0f:
         1a:c1:85:c8:19:e5:20:de:2a:72:a8:e0:9f:e0:23:dd:62:26:
         5d:35:79:bf:ee:d5:a7:52:2e:5c:43:5a:9e:b3:6f:11:9e:01:
         47:89:b6:e2:97:27:f7:25:49:c4:43:82:fa:b2:ea:e2:cf:df:
         f4:cb:37:fb:40:a3:5d:e4:a5:5c:d6:be:26:03:a1:e3:0b:dc:
         cc:48:2a:a4:9d:55:e0:31:52:23:1a:c6:56:06:09:89:2b:91:
         4c:7c:83:e9:dd:d9:13:5d:99:e1:2e:af:6f:cf:6d:0d:53:cb:
         af:e1:97:fc:08:e0:e0:eb:7b:ea:05:eb:5d:cb:f9:ff:3f:82:
         73:6b:dc:d8:01:81:10:5e:b2:bd:d2:48:1b:e2:4c:06:3e:3e:
         7a:e8:9f:37:7b:b7:fe:01:a2:ac:4d:ff:f3:33:e2:8a:9c:54:
         39:db:ae:f8:7d:9a:c6:f3:cb:9a:8c:47:f8:fe:10:0b:9e:e1:
         f4:c6:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----