Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/badd2827-c686-42d3-867d-d570251bedfa.roa
File:                     badd2827-c686-42d3-867d-d570251bedfa.roa (raw, json)
Hash identifier:          8ztORwY5E7Sq+k9tsm6Rj+b75/K8vsG8rdQq/iNo1eU=
Subject key identifier:   6E:8A:A9:DE:AA:A2:43:67:A8:34:A6:27:BE:7C:3E:30:70:EA:09:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02F2EEB4FA3B2D19920EA9B42D2AD38D35DDA119
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/badd2827-c686-42d3-867d-d570251bedfa.roa
Signing time:             Mon 20 Oct 2025 04:31:05 +0000
ROA not before:           Mon 20 Oct 2025 04:31:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:ee:b4:fa:3b:2d:19:92:0e:a9:b4:2d:2a:d3:8d:35:dd:a1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:31:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ca09fd0d57d09d332a8f7d829b9a78e1a5e1daa7a3bd641ee2850fb194d96fd6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:9c:9c:f3:19:a3:d2:ea:11:cc:7b:03:2e:
                    bc:98:ca:65:51:24:b8:6f:72:63:46:2a:4c:c5:a1:
                    70:2d:23:38:0c:ea:56:86:da:b1:71:da:87:62:0c:
                    fc:e0:0d:42:12:e2:e6:f3:3f:44:a6:8d:61:39:cc:
                    af:d8:28:4c:e2:d0:e2:71:ae:3e:60:78:21:d8:98:
                    d4:68:d5:60:a7:9f:db:43:c5:17:63:69:b7:81:8f:
                    44:43:10:6c:b1:6b:98:fd:b9:d2:dd:5c:b9:14:6e:
                    a9:f4:da:af:4b:17:16:67:56:bf:e7:8b:a5:77:8e:
                    86:23:3c:3f:d3:74:46:49:e6:7b:da:f4:b1:11:e9:
                    f8:d8:66:a8:29:79:a5:81:8f:f1:3d:97:bb:1c:c3:
                    9a:f7:ba:bb:97:b4:3b:8a:fc:fa:d3:d9:e5:38:c0:
                    57:36:53:ec:49:a3:45:fd:64:e3:18:85:ab:fa:ff:
                    2c:d5:9e:3d:bc:33:1c:77:be:a7:aa:4c:8e:1a:cb:
                    2f:b1:d6:a6:27:cd:f0:e7:3d:b5:84:23:71:77:bf:
                    77:3d:7d:b5:f8:1d:f3:45:bf:04:f9:d6:12:11:14:
                    ac:c8:09:43:bd:36:29:02:68:95:70:0e:27:f2:80:
                    02:f1:82:0f:9a:ee:10:2f:ab:0b:7d:7e:c8:85:e7:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:A9:DE:AA:A2:43:67:A8:34:A6:27:BE:7C:3E:30:70:EA:09:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/badd2827-c686-42d3-867d-d570251bedfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:0c:2d:8a:6f:dc:cf:f3:2a:32:bc:15:f2:7a:27:08:32:
         52:07:68:9b:bb:3f:be:3f:8b:56:17:2a:fd:1b:80:13:95:4a:
         fc:43:5f:d7:64:01:12:44:5b:08:ba:a1:d5:7d:87:47:49:50:
         38:19:40:bf:b3:b0:a0:23:f3:7c:ec:9e:60:c9:9c:c8:e8:ce:
         90:68:c9:3b:53:fe:68:fa:bc:01:58:84:1f:43:cf:6d:7d:97:
         97:1a:42:39:2c:b9:24:1d:4c:0f:a3:26:42:46:95:27:9e:31:
         cd:c0:1d:51:46:33:d9:e1:bb:94:1a:ed:13:27:16:9c:5f:b8:
         02:c2:fe:43:37:b6:46:69:ab:bc:b5:47:e0:e3:10:65:b6:ad:
         03:b3:33:72:28:9a:d7:d8:b9:d5:a1:d7:31:89:23:21:49:d0:
         40:f9:c3:e5:04:b8:36:62:a8:81:6c:1b:05:81:d9:14:2f:f5:
         f5:ab:34:17:2d:19:e0:0d:5c:bb:b5:ac:51:02:81:da:4f:f4:
         af:5f:30:c0:a8:7d:b2:f8:a3:c0:4f:ca:8e:cb:4f:44:61:4f:
         42:d8:0c:cb:e4:ed:10:3b:a6:81:e9:26:b5:d2:b9:b2:74:a5:
         a3:da:f0:8a:b7:e2:f9:13:69:f9:ac:93:ec:36:f4:fc:eb:dd:
         76:ad:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----