Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5a9eaa5-1bbb-4f37-b32b-8e36e90ff733.roa
File:                     c5a9eaa5-1bbb-4f37-b32b-8e36e90ff733.roa (raw, json)
Hash identifier:          kepztzlW8fZqJF5zIUMfzwR7DwCSxN8Ie65ZaF/74mM=
Subject key identifier:   E0:E4:FD:08:50:D3:4F:A0:C4:7C:4B:8A:A2:34:0C:7F:A4:CD:19:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E078C8A2A16A8E2DB90B1C2688ECD42599559CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5a9eaa5-1bbb-4f37-b32b-8e36e90ff733.roa
Signing time:             Mon 20 Oct 2025 03:41:34 +0000
ROA not before:           Mon 20 Oct 2025 03:41:34 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:07:8c:8a:2a:16:a8:e2:db:90:b1:c2:68:8e:cd:42:59:95:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:41:34 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=da8422c4e7c2dad74b057f22a2562c8ab4133a955620a6fc2c12d4c94b5c038c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:61:57:58:31:80:2c:36:3f:26:1c:d4:88:
                    59:51:28:8a:d1:4a:7b:c0:07:51:f9:95:d9:bd:59:
                    15:fe:7e:0e:a8:5d:9a:97:a2:9d:f5:da:7b:43:e2:
                    65:c7:3d:99:da:ec:41:36:ab:c3:81:a9:89:ed:05:
                    b0:0c:4f:0f:a9:bc:11:9c:26:28:d9:ee:0b:3e:f6:
                    fc:6c:53:cf:a7:88:1b:44:36:c4:cb:5a:ca:66:f2:
                    d5:0b:9d:9a:ca:27:61:da:ba:8d:af:ef:6b:7d:cf:
                    ca:ae:e2:44:68:15:6c:b0:4c:66:c6:b5:f1:90:0e:
                    bb:02:aa:6b:f1:19:58:18:d7:97:71:f8:81:6d:6f:
                    f7:20:12:c7:bd:e4:b7:49:26:bc:c5:2c:4d:25:69:
                    8e:5f:f1:d1:77:30:d6:dc:03:b6:0c:e5:92:a8:bb:
                    b5:55:be:b6:d6:8c:09:48:54:db:62:4b:1b:84:66:
                    3d:57:ca:4c:d2:04:b7:91:e1:75:96:7e:dd:05:a2:
                    09:96:1c:d5:27:55:b4:bd:cc:e9:fa:21:cc:db:7f:
                    4f:88:27:33:fe:4c:8f:6f:ae:4d:f7:e4:75:34:2b:
                    82:a9:5d:9b:f2:03:8f:6f:b7:11:9f:77:5a:6d:f6:
                    a3:be:fc:69:35:e8:8c:ee:fe:bc:b0:5c:50:29:ae:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:FD:08:50:D3:4F:A0:C4:7C:4B:8A:A2:34:0C:7F:A4:CD:19:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5a9eaa5-1bbb-4f37-b32b-8e36e90ff733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:95:16:82:2f:be:ff:cb:a4:7f:34:ab:23:14:fe:76:e1:98:
         d7:17:51:b9:bd:c4:d0:48:03:a7:f3:d7:48:2b:af:65:bf:94:
         48:67:1f:a7:b3:57:a7:f3:dc:52:03:02:68:5d:09:c2:e8:54:
         51:3f:53:18:d0:bb:f2:f5:b0:d3:3b:5c:69:d7:9a:5b:d3:cc:
         2d:c0:ec:95:99:d0:42:c3:5e:9d:80:d7:5a:e8:57:6f:9b:70:
         37:68:09:83:b2:36:2d:b7:fd:4b:95:2a:37:b9:3a:eb:11:96:
         03:7e:4a:67:a6:58:aa:7e:ad:ae:c4:fc:11:3a:5d:7b:53:17:
         b9:f3:a0:c3:95:e2:f5:de:e7:10:92:89:de:d3:65:67:da:14:
         3d:6f:39:1f:7f:a8:a3:0a:4b:03:4b:9e:25:05:2d:49:ac:e7:
         60:08:12:c2:da:ea:c6:a8:82:44:89:ed:03:ba:4b:e1:cd:d1:
         a3:05:44:a8:f1:68:a7:f5:4a:ed:55:27:35:58:55:cf:0b:3b:
         1f:f3:3a:98:50:fc:ef:a3:7d:a6:95:34:b3:88:c8:3f:6d:e8:
         ab:b5:9e:d8:c5:35:6f:30:ca:b5:de:ff:b6:6a:79:45:ee:17:
         6b:8a:6d:df:e7:ad:c5:ef:a7:08:61:72:38:a0:fa:0c:5c:86:
         66:a1:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----