Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9543b81-4385-496e-a8ac-ccb54f61e6a9.roa
File:                     a9543b81-4385-496e-a8ac-ccb54f61e6a9.roa (raw, json)
Hash identifier:          s5DCLJkgYDT0ooRiDo93fk3NFFxyk102CH/2ZGgfIns=
Subject key identifier:   35:89:F9:D0:7A:CD:B7:16:CC:50:04:0A:3C:18:F9:D5:C6:A9:BE:36
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69012E7D979FF59805C79B27EFC3B8DBA153DE7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9543b81-4385-496e-a8ac-ccb54f61e6a9.roa
Signing time:             Mon 20 Oct 2025 01:40:06 +0000
ROA not before:           Mon 20 Oct 2025 01:40:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:2e:7d:97:9f:f5:98:05:c7:9b:27:ef:c3:b8:db:a1:53:de:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:40:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ad8004fc4eb5eb3ea57accde62611b7fd582ff9ed79700a453bdf4249b453404, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b1:bc:f0:8b:33:7a:9a:50:61:44:65:ef:c0:
                    f1:3a:78:36:f6:c0:e6:4c:f6:77:e4:dc:f9:07:13:
                    6e:53:b3:51:a9:06:3a:aa:b0:b7:07:b1:a4:48:7b:
                    71:69:40:65:f7:de:4e:5f:99:4d:d5:ba:de:94:f4:
                    56:59:d6:96:50:fa:34:e2:7c:82:f4:0e:fb:62:5e:
                    41:0e:90:41:8d:ce:46:57:0c:08:84:e5:f3:46:d5:
                    81:5e:95:e7:fe:8d:23:62:77:a0:09:6c:8e:f7:89:
                    de:a5:89:21:70:78:3c:95:13:43:15:65:c8:27:9f:
                    49:9a:da:e0:fb:b5:4e:51:ad:a5:0a:a2:91:84:c3:
                    94:22:8c:82:e8:8a:74:d4:e1:0e:e1:75:01:45:0c:
                    f3:bf:26:50:2f:73:0f:bc:b6:f9:d5:ff:33:16:29:
                    cc:bf:e4:2f:f7:37:93:12:11:72:3d:1e:22:57:c1:
                    97:46:7b:d3:72:70:62:75:64:e6:93:10:50:9a:7a:
                    d2:a6:62:94:9f:47:db:a7:fe:b0:0b:27:a0:2a:8c:
                    90:95:ad:b3:85:42:d6:20:54:4b:71:7e:44:53:ca:
                    17:11:b4:22:d1:77:6b:4a:16:62:dd:1f:d8:ec:31:
                    06:15:b3:ed:40:72:e5:5b:94:4b:3d:82:79:8c:ec:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:F9:D0:7A:CD:B7:16:CC:50:04:0A:3C:18:F9:D5:C6:A9:BE:36
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9543b81-4385-496e-a8ac-ccb54f61e6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:5c:62:2a:52:37:9f:da:e5:84:f9:07:25:d1:88:ea:83:
         a5:f2:51:e8:9d:69:32:77:c8:db:82:7f:75:0e:56:e7:a2:d4:
         81:92:90:24:55:3c:d7:c7:ef:18:3b:7f:68:37:0d:88:2c:ce:
         d5:a0:e1:e2:9f:d7:2a:9e:29:ec:ed:a7:0b:5b:2e:2a:4d:fc:
         8e:9f:b2:a1:b6:0d:65:f6:76:2a:27:30:17:86:d5:5f:c3:b7:
         51:01:e7:26:98:7c:f7:f9:68:34:ab:6a:12:ec:59:29:fa:f0:
         15:e1:48:10:1a:9e:40:9b:56:cf:49:87:7a:9b:0c:38:57:df:
         60:6b:44:4b:37:ba:e1:8a:59:8e:cc:31:f6:e4:7b:a7:31:b3:
         c3:26:0b:2e:12:3d:9f:51:90:67:2f:bd:87:89:ef:5f:af:26:
         92:64:b9:6d:e7:c3:5a:d5:94:34:03:76:19:cb:d7:b1:97:cd:
         2d:cf:3b:5e:ce:61:c6:7f:de:84:f8:3a:c0:90:c4:6a:e8:08:
         be:d9:3d:af:f3:bb:68:1c:f8:36:af:df:b9:15:17:fb:a6:b0:
         56:80:eb:94:30:1e:3e:db:2c:d2:58:21:be:52:47:85:d7:05:
         19:a5:73:83:7e:a9:74:e8:b2:f8:9c:b9:b3:e9:80:30:64:c8:
         42:a4:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----