Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d6b316f-c8f8-4e7e-9f9c-9e280f43e107.roa
File:                     9d6b316f-c8f8-4e7e-9f9c-9e280f43e107.roa (raw, json)
Hash identifier:          aTvRayg3OPLD1x+KwVe0ewPFQS78Llk/llSkpckHOyg=
Subject key identifier:   1E:5E:C1:33:21:73:AA:6B:74:FA:3A:7A:D0:E7:67:C3:89:E9:4F:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       13967520BB220A60BF4DF0D86756100779745829
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d6b316f-c8f8-4e7e-9f9c-9e280f43e107.roa
Signing time:             Mon 20 Oct 2025 05:21:27 +0000
ROA not before:           Mon 20 Oct 2025 05:21:27 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:75:20:bb:22:0a:60:bf:4d:f0:d8:67:56:10:07:79:74:58:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:21:27 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=fb46e023502935081e6de3d0d034fa57cf8ebf3384631ea22d70b7c3e0a3a543, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:8b:cb:a5:0f:74:12:cb:95:c6:ea:f3:90:
                    c6:d3:fb:4a:e9:d6:77:86:5a:85:6b:d7:66:d0:df:
                    57:48:27:40:f6:a9:ef:9d:7a:6d:9a:c2:99:e3:c8:
                    4a:77:6b:18:09:d5:33:2f:b0:ac:37:1a:a5:21:69:
                    64:2b:e3:63:33:53:3f:14:f9:47:cb:ec:52:c1:5e:
                    f8:36:ed:8c:86:36:6e:d2:9a:24:6a:e6:cd:a3:3f:
                    4a:a9:35:01:ec:3b:ef:98:0d:f1:f8:71:52:82:61:
                    49:c3:d3:de:dc:01:74:01:bc:7a:b4:c6:35:23:f3:
                    dc:ac:4b:9c:2e:e5:9a:68:61:5d:34:b6:1a:f9:84:
                    17:7c:62:7b:5f:47:c5:ad:8a:a6:b4:f1:18:81:f5:
                    a5:bc:39:64:c2:18:74:db:db:c9:e7:e6:9a:84:34:
                    66:41:40:e7:07:ac:9a:52:a6:43:4a:d4:9f:76:05:
                    56:24:6c:12:73:30:62:cb:a9:fb:c7:fd:f9:4c:6d:
                    9c:73:c6:b4:6e:d1:a8:4d:a2:7a:b5:04:71:ad:05:
                    10:b2:ad:1c:ca:53:47:8d:aa:68:57:d0:16:e2:8a:
                    01:d7:f1:87:62:dd:ac:45:7b:66:51:e5:5c:63:65:
                    bc:81:67:8a:70:76:2e:86:26:d7:77:fe:b1:ac:a3:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:C1:33:21:73:AA:6B:74:FA:3A:7A:D0:E7:67:C3:89:E9:4F:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d6b316f-c8f8-4e7e-9f9c-9e280f43e107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:00:73:62:c0:c2:78:5c:e7:75:e0:e3:c0:c3:6d:ac:8c:
         4c:37:7c:70:fb:8f:37:67:18:9b:ef:38:0d:14:9d:c3:e1:86:
         77:ed:c1:6b:ae:63:6a:b1:29:b8:66:0e:27:b8:2d:f8:bb:95:
         fc:37:b4:a9:35:54:cc:27:83:f2:28:05:76:a5:8f:6f:1e:52:
         17:7f:32:ac:f6:59:4a:9e:67:f4:4d:ba:9e:c6:d3:e2:d9:8a:
         c5:a9:78:f9:54:cd:0b:60:ea:40:b9:14:f4:ac:1b:8a:59:c7:
         58:5d:20:29:5f:9b:3f:d1:b7:0b:4d:23:ff:38:7e:63:06:9c:
         f6:41:14:9d:77:7c:c5:ad:a9:ce:4e:3c:b9:e4:16:7a:18:87:
         8b:b9:8a:cd:4f:32:61:3f:55:f9:70:e2:26:10:08:5e:d5:f8:
         2c:2a:c3:56:2c:0f:6d:43:62:10:4e:7f:5a:21:82:7b:47:c9:
         fe:a1:7c:0a:a3:f6:14:cf:50:57:e2:d0:28:45:93:60:50:0b:
         72:f3:f7:00:27:27:04:9f:37:a5:dc:2d:6d:e0:69:ad:d0:2d:
         f7:b5:90:a1:0f:91:fe:78:5b:19:21:89:ed:7a:bb:6f:77:e2:
         cb:45:e1:31:00:04:d3:98:84:a6:bf:37:aa:95:53:4f:33:13:
         ba:d0:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----