Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea862f-f098-4c3a-8b59-23d6ee15fd04.roa
File:                     afea862f-f098-4c3a-8b59-23d6ee15fd04.roa (raw, json)
Hash identifier:          K4slvO6eDNcmoo/2WSEicDsoaVy7NSg/E2i9HpcurXk=
Subject key identifier:   4F:45:64:EE:70:69:50:37:1A:C1:9E:EC:73:F0:66:FE:71:E9:15:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52910BC7A7E710CA9086308DDD23A267C5144CEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea862f-f098-4c3a-8b59-23d6ee15fd04.roa
Signing time:             Mon 20 Oct 2025 06:00:55 +0000
ROA not before:           Mon 20 Oct 2025 06:00:55 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:0b:c7:a7:e7:10:ca:90:86:30:8d:dd:23:a2:67:c5:14:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:00:55 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c2e8edeab138cd7e23d859f44c767e39793026bca8d561dc9535dc5ae4d9399d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:da:0f:9f:1f:1d:0b:ca:22:b9:49:5b:fc:
                    f1:67:b2:70:15:4d:fd:ea:12:38:49:20:c1:29:57:
                    6a:8e:41:a8:5f:aa:5d:40:0d:60:3e:93:c0:0b:93:
                    2f:c6:a3:2d:58:de:77:d9:0a:fb:f2:c6:0c:78:f3:
                    0d:9e:70:4a:c8:38:ea:c0:b6:e6:b3:01:52:b5:6f:
                    4f:2b:4d:0e:a8:f2:3f:56:2e:b6:a3:c0:0d:52:a8:
                    06:9c:1b:3b:e6:80:43:60:b4:20:2c:b2:3f:04:0a:
                    d1:58:c9:e0:1a:ec:da:d2:4b:7e:39:a9:54:52:21:
                    1f:2d:3f:d4:6b:af:7c:a3:b0:47:0f:b6:db:6f:11:
                    b2:55:b9:f2:a3:45:2b:c4:83:9a:70:1b:c1:c1:97:
                    a1:90:c6:66:7a:c8:b4:3b:1d:04:7c:e2:74:a6:2a:
                    8a:0e:a1:39:e1:d7:cd:30:d6:bb:69:30:fb:97:a8:
                    be:93:0b:62:b6:4d:9a:90:94:48:80:33:43:84:ae:
                    e0:ce:0a:78:89:73:24:9b:b0:04:e6:58:0f:ac:cf:
                    b7:e6:dd:64:4e:fd:c4:58:39:6a:6b:9c:5a:27:af:
                    16:05:85:05:1c:76:b2:29:19:74:e8:3a:be:96:fa:
                    28:38:80:a5:e7:33:1a:aa:b0:5c:61:7a:42:04:6d:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:64:EE:70:69:50:37:1A:C1:9E:EC:73:F0:66:FE:71:E9:15:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea862f-f098-4c3a-8b59-23d6ee15fd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:bd:9a:e4:5a:f5:7e:ec:98:03:b2:12:dc:b6:71:17:e8:
         93:be:21:0b:2b:32:9e:62:fe:99:0e:fb:6c:4d:ff:5e:a8:3d:
         b4:c0:2e:ca:f5:e9:a7:b2:9b:18:a7:08:18:ae:42:21:d7:f8:
         17:cf:75:4f:c4:cb:d2:cd:11:fb:93:65:6d:3d:9c:a0:9a:a7:
         c6:65:15:c5:71:f8:9a:06:6f:75:dc:ae:6d:54:02:a4:bc:ae:
         27:89:ef:1b:d0:ae:6e:69:46:d9:2f:cd:a9:2f:f0:de:f2:30:
         f6:75:68:41:f8:78:5e:ce:47:f0:79:5c:c9:9a:41:a4:f3:ae:
         46:b3:78:14:e7:8b:02:66:74:5d:ed:94:8c:bb:38:66:76:a0:
         59:8c:f2:7d:8b:02:19:b3:16:34:08:a6:29:a9:55:58:8a:6c:
         b7:f9:fc:7d:dc:0a:d7:46:3b:f1:2a:dc:ab:73:43:60:1b:da:
         f0:2e:db:ed:60:9b:2d:ca:95:65:8a:11:ee:09:6b:4a:c2:84:
         06:1a:7a:36:3d:63:d7:d7:37:77:01:ab:5d:8e:e1:47:49:eb:
         90:c6:7e:2b:67:d8:d9:71:60:41:fa:c9:5e:a5:68:47:9e:72:
         1d:e7:a0:e8:53:91:1d:f4:12:12:d5:ec:f9:7e:b2:c0:17:ff:
         06:4c:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----