Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a33e2361-4e9a-4e38-ba6f-13ec5f2e8b2a.roa
File:                     a33e2361-4e9a-4e38-ba6f-13ec5f2e8b2a.roa (raw, json)
Hash identifier:          KelJVNm7VH4k4/hUP8di7QCEjK/CU099dfVoI3WQnzw=
Subject key identifier:   0B:99:25:6F:2A:DE:2F:2F:CC:D0:17:2F:28:73:BD:9C:28:BC:7E:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3179C9067BD45382846D7B5C51052F28FAC1E8BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a33e2361-4e9a-4e38-ba6f-13ec5f2e8b2a.roa
Signing time:             Mon 20 Oct 2025 01:21:26 +0000
ROA not before:           Mon 20 Oct 2025 01:21:26 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:79:c9:06:7b:d4:53:82:84:6d:7b:5c:51:05:2f:28:fa:c1:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:21:26 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=69db0b395b878b41fad372d923bb3946b7458bf33185706fb11682630bab0609, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:fb:5f:34:03:a6:31:d0:48:57:59:7c:4b:
                    bc:94:4b:8b:f7:4b:9f:56:22:d9:ce:d5:c1:c1:42:
                    0d:96:b8:19:6b:f4:97:3e:c4:8a:55:80:fe:ea:46:
                    52:81:37:05:23:85:b4:fc:cc:c5:54:bf:58:7c:ea:
                    5e:74:b2:4b:da:bc:87:f9:43:a5:ce:c5:b3:c1:40:
                    f3:14:f9:b1:04:09:d4:ef:fa:c5:32:f3:2d:6f:ec:
                    0c:52:b2:16:d8:56:60:e7:5e:29:28:a9:be:18:1a:
                    db:28:a6:18:fd:55:33:c9:44:f9:37:50:50:27:10:
                    ba:b2:6f:c8:db:8b:d6:c9:83:95:37:6a:d3:7d:7d:
                    1b:84:75:f6:ac:ed:d8:69:a9:b2:a9:33:85:76:07:
                    11:1a:e3:a4:7b:1a:fe:b4:f4:81:85:ee:a7:1c:27:
                    4a:32:6b:b5:93:2c:57:77:ab:6f:4a:4b:08:c7:84:
                    09:2a:c7:2e:e2:58:e6:1d:84:6e:83:66:eb:79:11:
                    fb:7f:fa:ca:af:b7:c3:b5:ab:e0:ac:88:55:cf:fe:
                    1f:c9:e6:4b:5e:d4:d1:8a:e8:df:b9:ec:fb:70:b0:
                    f1:26:af:0e:98:ae:6c:ed:b6:b1:18:0b:ae:56:8c:
                    4f:a0:df:dc:2c:62:bf:66:27:85:2f:e9:04:fb:85:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:25:6F:2A:DE:2F:2F:CC:D0:17:2F:28:73:BD:9C:28:BC:7E:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a33e2361-4e9a-4e38-ba6f-13ec5f2e8b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:42:0a:81:4d:f0:48:e2:ed:f0:9b:99:c7:6a:04:38:68:
         a2:47:74:87:d1:67:5c:d1:74:c9:29:c7:96:5e:29:37:78:54:
         08:e8:fb:f3:3c:36:6c:f7:4d:e1:62:08:f5:d5:c2:a7:3c:52:
         9b:dc:76:84:22:d5:0b:3f:77:65:f3:5f:d6:57:99:32:ca:8b:
         d2:ee:3d:34:56:06:59:68:d9:c3:8d:0b:5b:fe:6b:a5:0b:87:
         f4:63:8b:2d:2b:8d:a4:e5:ac:5d:38:a8:e5:1f:ca:25:72:0d:
         d8:a0:23:1c:61:29:e8:a4:4b:82:38:4a:38:85:e1:f1:f6:0d:
         02:2e:4c:af:83:df:97:31:9a:11:9e:dd:26:a1:00:3d:be:1e:
         0e:13:0c:0c:80:c8:6c:f0:5b:b8:1e:2f:84:12:4d:c0:34:96:
         6c:4b:b3:2e:7c:2d:58:07:80:5e:f2:0f:a8:a1:9a:d7:40:3d:
         3d:bb:d2:f3:d1:db:3e:44:28:8f:6a:c0:c4:23:69:ab:ff:b2:
         b1:3e:f0:d8:dd:19:05:c7:80:e5:7b:96:c3:64:76:8c:7a:95:
         2c:69:ca:5d:e6:aa:f5:2d:f4:90:5e:ba:4f:70:7e:0a:0d:e3:
         5c:f3:89:99:bd:52:51:f7:e8:2a:d2:a3:4f:24:95:df:c1:f7:
         0f:63:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----