Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93daed8c-2413-42b1-83ad-9d0fe9f1ede3.roa
File:                     93daed8c-2413-42b1-83ad-9d0fe9f1ede3.roa (raw, json)
Hash identifier:          9EIqfUsFgvEFXBbMjYnoTi+4wC1nV0o1I7e078mjwBk=
Subject key identifier:   31:CB:F1:2F:F1:5B:74:25:7B:A1:83:90:25:5D:A9:55:DC:BB:B0:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EA556F30B996A9FA7C2B44813EF842ACEB19782
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93daed8c-2413-42b1-83ad-9d0fe9f1ede3.roa
Signing time:             Mon 20 Oct 2025 03:50:41 +0000
ROA not before:           Mon 20 Oct 2025 03:50:41 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a5:56:f3:0b:99:6a:9f:a7:c2:b4:48:13:ef:84:2a:ce:b1:97:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:50:41 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a0254ba249bee93a564ebce341c82a7ff30f0b3b6108e19d4df3bdb608532257, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:7e:68:99:41:cf:ef:9d:ea:18:44:55:a4:
                    26:34:b9:4a:27:77:7a:44:ad:0a:6e:ab:9d:96:4d:
                    0a:c3:09:02:14:34:a7:f8:d0:36:ed:14:d1:51:f8:
                    de:0a:6a:25:ab:59:75:6f:73:4b:c9:01:55:da:cc:
                    64:28:41:b0:d5:1d:2e:88:ce:37:3e:a9:39:00:a8:
                    c9:0e:65:2e:15:38:53:8b:63:cf:59:e8:8e:ae:9f:
                    5a:63:67:71:96:80:ed:b2:e3:86:ec:b9:b4:4a:03:
                    39:1a:23:28:79:6c:2e:5b:f8:1c:ae:c6:1c:c0:6e:
                    bd:ab:f5:bc:48:62:89:7f:f2:c7:10:ce:30:25:ae:
                    ce:aa:45:6f:c5:c4:ca:6d:24:c6:87:4a:37:10:99:
                    94:c1:85:da:4a:9f:5e:11:b0:9d:79:72:48:bb:91:
                    81:95:30:36:7c:ea:bd:d4:4f:8d:a2:8f:80:4c:94:
                    b5:7a:84:f2:86:78:04:17:ea:b8:84:13:24:ae:89:
                    09:d6:57:b8:d4:1f:70:0a:1b:cf:c5:a2:4c:1f:35:
                    b6:46:8e:39:8a:70:73:75:46:ec:4a:db:11:65:a5:
                    0a:8a:e1:fd:a6:d9:84:a4:57:f5:4a:36:19:b9:6f:
                    3d:1a:ec:01:0a:59:71:87:81:ec:64:91:f5:90:9e:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:F1:2F:F1:5B:74:25:7B:A1:83:90:25:5D:A9:55:DC:BB:B0:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93daed8c-2413-42b1-83ad-9d0fe9f1ede3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:71:fa:11:0b:42:b8:84:4b:95:31:a5:aa:f9:57:b9:c5:
         33:7e:c0:1c:22:97:15:50:5f:61:62:ac:df:96:6d:a2:2e:93:
         7d:5e:01:2f:3d:ee:51:ab:a3:e6:d6:7d:3c:54:26:86:d1:7d:
         bb:4e:b3:cf:7f:af:58:64:ec:51:43:49:12:8d:b9:16:60:e8:
         eb:55:0f:fd:af:5d:6f:cf:8f:34:94:e0:83:a9:fc:e3:ae:f2:
         4d:6b:c9:1c:a1:6e:a3:3f:21:ed:1b:7b:2b:34:42:22:0e:26:
         cf:b3:03:38:2f:cf:e7:6f:19:82:10:a0:2f:1d:47:64:b7:e2:
         0a:c1:cd:80:d2:27:c0:53:eb:3c:d9:cb:c4:a9:08:3d:7d:cc:
         7e:fd:97:9d:d2:36:cf:44:7e:85:8d:03:f4:bc:f8:4a:20:d1:
         97:52:e9:d3:d0:1c:73:c8:cf:40:86:8c:d3:08:80:38:fa:88:
         45:bd:97:0d:57:67:2a:56:44:dc:18:f7:bd:ba:7c:f8:c1:0f:
         7e:88:dd:c1:b5:96:9d:91:d0:10:39:09:21:bc:47:0e:54:39:
         43:10:d4:4e:73:1c:9d:06:bd:1b:2b:ae:64:3f:09:09:d0:d6:
         f6:c0:a2:60:2f:4d:44:31:5e:20:0d:dc:83:da:be:54:85:a6:
         6e:37:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----