Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0316fed-07f2-45f7-a3cb-db2992afa1fe.roa
File:                     c0316fed-07f2-45f7-a3cb-db2992afa1fe.roa (raw, json)
Hash identifier:          NzmLqKUAV13RV++RZFLTc1yvt8fLq6LqzT8TIptzXtk=
Subject key identifier:   B1:77:82:35:C3:55:11:7D:71:5C:EB:70:7C:D4:6E:47:80:81:B9:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       744FC9759995A4EE841FA78249B0793BAACB6D58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0316fed-07f2-45f7-a3cb-db2992afa1fe.roa
Signing time:             Mon 20 Oct 2025 02:32:27 +0000
ROA not before:           Mon 20 Oct 2025 02:32:27 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4f:c9:75:99:95:a4:ee:84:1f:a7:82:49:b0:79:3b:aa:cb:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:32:27 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2dacf0740e51c313fe9ac5f702490f6b4f922f718bea03706978318843795bf7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:5d:5a:bb:df:82:15:b3:55:df:6a:33:99:
                    9f:86:43:f8:dc:6e:26:fa:21:e0:2b:24:0c:d1:15:
                    77:2b:4d:fc:56:64:c5:0f:dc:8a:16:2c:24:89:39:
                    3a:20:1a:d1:6a:80:5b:b3:0f:87:9f:84:2b:6f:a1:
                    8c:e9:c3:16:39:5b:f2:66:0c:2a:60:3b:ea:c2:87:
                    d5:1b:62:f0:db:70:11:d5:f5:52:38:c2:2a:74:2a:
                    60:46:cf:8c:91:25:47:99:dc:e0:cb:85:a9:e9:98:
                    88:6b:7e:a3:b6:86:50:ac:d9:7f:c4:ec:61:96:8a:
                    73:42:a2:ec:73:89:ce:21:22:14:96:41:fc:a3:ac:
                    cb:d4:ba:c5:bd:44:87:41:dd:b8:78:3e:8e:be:25:
                    cc:a6:fc:f5:9d:74:b8:1a:b8:75:fe:6f:fb:79:03:
                    95:ce:1e:c8:e1:95:54:e7:36:28:0d:e0:e5:23:7e:
                    72:e9:a0:52:5e:f3:62:ae:2b:b2:4f:06:17:cc:52:
                    ca:76:5b:76:5f:3b:34:a9:07:6a:96:f0:21:2b:c7:
                    25:ba:fc:2f:e8:cb:0f:c6:51:44:b3:8a:fe:de:b3:
                    6e:fd:67:fa:dc:46:a6:5b:2f:7b:62:ff:23:9c:b1:
                    0f:69:ef:a5:e4:b1:28:9c:5f:7f:82:7b:40:ef:3e:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:82:35:C3:55:11:7D:71:5C:EB:70:7C:D4:6E:47:80:81:B9:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0316fed-07f2-45f7-a3cb-db2992afa1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:b6:9a:cd:61:f2:51:54:48:f2:25:a2:e4:90:8a:4e:a6:
         9a:94:a8:45:ff:aa:7e:85:8f:b1:29:8a:af:c0:2d:da:85:bc:
         81:ee:5e:cb:09:af:c5:07:2d:93:fa:32:a5:9a:d5:8e:c9:a4:
         99:84:b7:b2:2c:23:66:75:56:ee:d5:50:ce:b5:74:35:61:b7:
         15:53:97:4e:51:0a:39:85:b0:eb:ba:71:a2:29:02:ba:39:7d:
         a3:8a:75:de:c6:0b:a4:2d:6e:72:19:56:15:38:30:a9:d2:1a:
         a7:3e:e6:40:7a:30:bf:c2:7a:20:59:49:49:8c:b4:7b:56:95:
         8a:c9:b1:f5:c8:6c:7e:92:d5:6a:5d:0e:f9:31:1d:1b:d1:c9:
         db:d1:51:c9:83:fc:4d:63:e6:93:19:36:4d:36:68:ca:f6:d9:
         ee:ca:bc:3d:6b:a2:a1:b0:1f:1f:5f:2d:0c:3f:ac:fc:12:dd:
         e0:f0:60:45:cb:08:81:ff:a9:e5:60:77:20:f3:f7:34:07:e4:
         63:6e:a6:33:77:6e:ab:ec:30:20:9b:2c:d8:12:48:d5:00:55:
         61:bb:7b:82:37:8d:7a:5c:94:f8:c2:c3:e0:ad:fe:02:0f:e9:
         e2:35:37:98:37:7f:3a:75:04:c8:13:aa:40:e5:bf:5e:6b:c9:
         51:c4:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----