Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d632a6a-06ee-4207-a30e-310393ddaf3b.roa
File:                     8d632a6a-06ee-4207-a30e-310393ddaf3b.roa (raw, json)
Hash identifier:          Ytc9tKUF3U1tyc/mzdasj6otgT+aUHevPo4FPTRiE38=
Subject key identifier:   57:7C:96:EA:CC:3F:53:71:BA:75:F9:4B:B7:A9:26:FF:41:CA:0E:96
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6C76689F72F53C7F0CEA57EDBF2E8CC951747CB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d632a6a-06ee-4207-a30e-310393ddaf3b.roa
Signing time:             Mon 20 Oct 2025 03:32:30 +0000
ROA not before:           Mon 20 Oct 2025 03:32:30 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:68:9f:72:f5:3c:7f:0c:ea:57:ed:bf:2e:8c:c9:51:74:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:32:30 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2228b38c5da9c4cc38948424896776aabec9523eec6260467d77fa8fd0df0e63, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:97:57:bf:63:c9:bd:11:57:e9:54:a7:2e:
                    eb:88:82:39:77:26:b3:31:84:de:07:b5:9e:b9:86:
                    9a:c9:03:58:62:6c:e8:1b:7f:5d:7b:05:85:65:0f:
                    f6:cd:ac:cd:b0:73:5e:c6:05:d0:aa:42:f5:08:d5:
                    86:e5:c1:5c:8d:08:7e:9a:3b:74:e5:8e:c2:7a:c8:
                    99:9b:2c:cc:b5:96:0d:82:77:d2:48:1a:93:b0:2e:
                    c0:17:66:3e:31:9d:34:1b:97:ae:42:91:42:88:d8:
                    fa:d4:2b:44:c8:b4:4d:1f:fa:68:2f:5a:a1:82:8e:
                    d0:9a:d4:24:c5:21:cd:8b:1b:0f:c8:ce:52:bd:df:
                    20:46:19:b4:24:1c:4d:25:0b:46:72:dc:d8:08:3a:
                    ca:90:77:01:d2:1c:e9:98:8c:5a:c6:1b:07:cd:47:
                    55:da:8d:4f:3f:87:a9:7d:f4:3d:67:5a:43:2e:f4:
                    df:e3:34:b3:65:dc:f7:5a:b1:67:f7:1f:22:cb:54:
                    c1:06:c2:32:e8:a1:7c:37:5c:1b:32:86:c5:1f:9a:
                    fb:71:7c:ef:b1:fc:0e:8f:fb:2c:06:52:ed:5f:4b:
                    5a:66:27:84:fd:99:8f:e2:76:e5:13:69:35:3c:84:
                    a6:43:fd:4f:d6:ba:da:ab:d9:0c:f7:3c:0c:fd:81:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:96:EA:CC:3F:53:71:BA:75:F9:4B:B7:A9:26:FF:41:CA:0E:96
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d632a6a-06ee-4207-a30e-310393ddaf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:2b:8d:28:f4:8c:46:05:64:d9:a5:66:f9:6a:eb:b7:a0:
         53:5d:9f:33:ad:01:62:22:53:60:1f:f4:a4:21:3f:cc:f0:18:
         c6:70:06:9a:18:fe:fa:4f:4a:4a:8d:9c:2c:54:83:f4:a1:4c:
         e6:aa:1c:fa:ae:3f:5b:b0:b1:59:25:4b:1b:73:92:7a:f5:87:
         1a:2d:9e:b3:ba:e2:f8:14:e8:a0:76:0d:bd:c9:89:e5:75:cc:
         82:e3:c6:18:d0:3a:db:59:26:cc:41:0a:fc:e7:0e:dc:4c:82:
         a3:93:80:26:70:d6:88:e9:da:57:71:12:78:e8:6a:4e:59:74:
         ed:84:dd:30:41:22:9c:b6:61:41:d8:46:38:94:01:2e:5a:93:
         17:78:73:9a:93:9d:b5:a8:b4:1f:70:e1:7c:78:d3:74:f9:68:
         90:1b:ad:66:d3:a2:a8:2a:ee:e9:36:72:21:f2:69:a4:2a:58:
         f3:be:6b:a8:55:b9:84:2a:cf:eb:b7:a7:43:0e:ee:24:78:8c:
         0d:82:18:61:1e:97:cc:e1:b7:5d:26:62:56:80:dd:d8:72:7d:
         3b:31:9e:db:e2:de:23:b5:1e:4f:e4:bd:66:0f:f3:f0:23:76:
         73:69:56:89:91:06:d0:dc:3c:c3:7e:a0:2f:1c:81:aa:c4:e9:
         9d:20:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----