Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4639f4-f577-4e90-9916-673b28695dc5.roa
File:                     bb4639f4-f577-4e90-9916-673b28695dc5.roa (raw, json)
Hash identifier:          d5flSu7QkBQuldTFkeUV2SsQ6DhxB7h0/0bPzyJKnFM=
Subject key identifier:   51:06:10:A8:31:29:00:06:C7:64:F5:96:71:DC:12:1D:3C:AF:A0:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7361B7BD22DE63E58F4F2B0C48A7A15886FC5A9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4639f4-f577-4e90-9916-673b28695dc5.roa
Signing time:             Mon 20 Oct 2025 03:32:27 +0000
ROA not before:           Mon 20 Oct 2025 03:32:27 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:61:b7:bd:22:de:63:e5:8f:4f:2b:0c:48:a7:a1:58:86:fc:5a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:32:27 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c7da3bc68c8d5cc98493bed001f5386a2d43be72781ea0de3530d0dc3b35fa22, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:7d:8e:3a:d6:75:fc:fe:b5:4c:37:b0:24:
                    2c:16:34:9f:7f:bb:9e:f3:97:3b:26:43:c7:0e:b7:
                    54:25:e8:00:26:1f:41:ba:80:55:eb:53:19:5f:7c:
                    78:fa:af:4d:92:da:8b:19:c7:45:ad:79:9c:ad:ec:
                    76:b3:b1:62:2d:b6:ba:d8:ec:0a:6b:31:f2:15:04:
                    54:55:14:22:41:c6:ec:9b:20:7b:48:4e:cc:a0:a6:
                    e0:6f:ad:cb:cd:a3:e7:a8:eb:02:d0:a1:00:7a:10:
                    fb:4f:01:30:32:5c:04:8b:07:62:fd:69:53:46:3d:
                    50:dc:cb:29:de:a0:bd:67:d3:1f:2e:f0:0c:32:64:
                    3f:1e:46:75:d0:b4:bc:ed:cf:b2:01:9b:49:5b:62:
                    ed:3c:82:ac:8b:76:24:9c:b5:0d:48:78:fc:40:c1:
                    52:4a:35:14:47:01:69:b0:f1:7f:8e:62:ed:8b:6a:
                    84:b5:34:06:0a:77:87:90:f6:22:d7:c3:5c:80:a5:
                    c5:f8:e0:ba:3e:7b:fe:16:3d:76:a0:30:c7:f9:b8:
                    ec:91:19:84:41:37:f4:44:9d:85:ba:96:4b:f2:7f:
                    83:cd:92:29:48:7e:aa:da:c5:de:b6:9f:0f:0f:4f:
                    c6:26:79:e6:a3:2a:ef:81:25:9a:28:8a:69:1b:f6:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:10:A8:31:29:00:06:C7:64:F5:96:71:DC:12:1D:3C:AF:A0:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4639f4-f577-4e90-9916-673b28695dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:33:6a:ce:53:45:c1:1d:40:6d:a0:a2:97:ee:93:ee:40:61:
         ee:ba:41:bf:3d:1a:9b:36:13:cb:83:fc:35:ff:41:b2:2b:b8:
         cf:8e:c9:26:4c:e6:20:50:6e:b5:c4:5d:f8:7d:c7:56:53:ae:
         1a:79:e4:e1:4e:c9:9b:c2:ac:0e:aa:44:d7:b5:ed:19:e8:fd:
         48:3f:b5:df:91:6e:0c:3f:32:4f:f3:53:c0:cd:d7:cd:be:06:
         ab:ef:01:c2:21:6a:34:c4:b5:1e:88:fd:88:58:20:af:9f:b1:
         d8:6c:05:bc:1f:69:11:ab:02:be:43:6d:f2:26:e9:0c:7f:5f:
         ee:a4:c0:a7:52:c5:b2:9d:b2:c7:c3:0b:fa:5f:0f:b3:3c:f1:
         ea:be:fc:33:c6:56:9b:6e:31:51:de:1e:54:bd:0a:ea:c2:fd:
         67:37:ba:26:0b:ed:82:1e:85:25:51:9d:f2:5e:78:e8:c2:dd:
         55:4f:74:a4:75:84:7f:ae:d5:ba:19:e3:0f:51:68:a7:69:93:
         2f:0c:d4:d1:4c:9a:22:a2:09:ac:9e:4c:6a:ab:a3:45:e8:6e:
         29:78:33:5f:9b:ab:dc:e1:dc:6f:e2:4f:05:8f:e4:8e:d1:bd:
         4b:6a:de:98:16:b3:f6:3f:55:df:80:cd:7b:08:4f:12:cb:09:
         9d:90:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----