Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67ff299-4390-43c0-996e-cc1792cb68e7.roa
File:                     a67ff299-4390-43c0-996e-cc1792cb68e7.roa (raw, json)
Hash identifier:          O8M27r6hk8fGfQJUV6OwUgkALUctTInu6dHcPOmmZ5k=
Subject key identifier:   BF:DB:F5:12:57:3F:C0:53:42:9C:E6:92:D7:F1:BD:55:31:30:A1:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       528948F4F6D58391D3FA5F1988506D95540D11CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67ff299-4390-43c0-996e-cc1792cb68e7.roa
Signing time:             Mon 20 Oct 2025 01:52:29 +0000
ROA not before:           Mon 20 Oct 2025 01:52:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:48:f4:f6:d5:83:91:d3:fa:5f:19:88:50:6d:95:54:0d:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:52:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=42f73b81080c14134c07488c231c70025bcd5a40774de4a85d89ec86ba92ce45, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:b8:48:22:8a:87:87:88:28:7e:e0:e5:3f:
                    68:1f:1d:9b:c9:19:3a:49:24:db:00:fa:e7:11:b2:
                    72:07:1a:c8:b8:0c:f9:66:6b:dc:b8:6c:1d:6f:56:
                    5e:7d:a0:ba:62:7e:3c:17:31:67:e1:89:fb:66:12:
                    6e:44:b6:28:04:bb:fc:65:29:d1:c5:99:d0:ec:05:
                    ee:b8:a3:76:94:87:66:b9:fa:e0:8c:60:56:45:83:
                    9d:32:2f:10:4b:1b:53:c5:06:e3:2d:26:31:65:4b:
                    dd:75:21:87:ae:e1:84:f4:0d:d9:a9:ef:93:db:7b:
                    15:f7:75:8f:e5:5c:b1:a5:88:71:0a:43:d5:3f:2c:
                    14:72:44:86:4d:ba:92:c3:08:57:9c:53:6e:04:36:
                    a7:ad:b8:f0:82:fc:ba:be:d6:02:5d:b9:55:49:c2:
                    5d:d8:4a:da:2b:ee:e5:c4:4f:57:e3:83:2b:c3:9a:
                    cc:57:88:ab:16:08:6a:3a:1f:61:5f:af:1e:02:91:
                    67:f1:ed:9b:c6:84:02:cc:c7:58:35:53:6b:d6:bd:
                    75:9a:ef:a9:4f:e6:60:20:c6:f0:46:8b:82:29:80:
                    aa:58:67:b3:e3:81:8f:31:73:f4:1a:09:cd:a1:01:
                    ed:ef:17:33:f6:b6:bb:63:35:76:b1:af:aa:07:96:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:F5:12:57:3F:C0:53:42:9C:E6:92:D7:F1:BD:55:31:30:A1:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a67ff299-4390-43c0-996e-cc1792cb68e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:33:6d:f8:7f:f2:5c:03:93:c4:28:c9:79:04:45:0b:9d:1b:
         ee:2c:c9:f4:dc:ea:41:b2:30:1f:53:2b:ee:5a:44:fd:a4:18:
         b8:7e:5a:dd:be:83:8c:42:b6:28:0d:c3:b6:23:04:82:d3:0e:
         ec:ca:a5:80:37:51:67:9b:1b:e3:b6:f4:0d:ab:a1:56:5c:f7:
         59:a3:29:c9:ea:d3:7b:b7:fc:f1:5b:6b:14:07:48:bb:ee:2f:
         8e:e1:da:1d:ea:00:7c:68:59:2e:04:0b:5b:52:f2:43:0b:31:
         50:db:b0:66:3a:5a:8f:9a:86:53:ab:d8:7c:f0:60:21:06:83:
         b2:fc:09:ab:83:37:f2:56:7f:c2:79:27:0f:fc:1f:aa:b4:a8:
         30:b1:b5:3a:8e:a2:3e:54:0a:70:43:23:ba:17:9a:40:c0:07:
         22:6d:be:2f:5d:fd:1c:bb:89:3f:e1:84:ce:92:89:9c:cf:55:
         85:c9:ea:0b:24:57:49:a8:89:c8:07:33:3d:20:06:76:30:99:
         17:f8:86:6e:a4:4f:45:4c:37:56:60:60:59:03:e0:87:02:f7:
         cf:56:ae:72:1e:5a:24:21:65:b8:45:5d:bc:39:fb:ed:f2:25:
         2b:62:11:b5:ce:a1:2d:1b:34:91:d1:60:c9:ae:f3:dd:6a:c8:
         06:c4:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----