Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca03a78a-b0bd-4e54-8bfb-00996fe6c796.roa
File:                     ca03a78a-b0bd-4e54-8bfb-00996fe6c796.roa (raw, json)
Hash identifier:          wLLATFa5wfVq/Biqn1BnvXfCwO1v9QC3L8LSGzgX1LM=
Subject key identifier:   56:16:B4:A4:0E:E0:F7:4F:8A:30:D2:AF:96:47:11:B6:9F:96:6D:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E2E0CC77D699A8C5EC53A4F51A0ED25BC4F1DE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca03a78a-b0bd-4e54-8bfb-00996fe6c796.roa
Signing time:             Sun 19 Oct 2025 03:10:06 +0000
ROA not before:           Sun 19 Oct 2025 03:10:06 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2e:0c:c7:7d:69:9a:8c:5e:c5:3a:4f:51:a0:ed:25:bc:4f:1d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:10:06 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=71895979cea66b99070fd6beaf7e40bfca4d0a501110cef24f20073046d81d3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:46:8a:7e:41:9d:33:af:06:12:47:55:07:
                    90:a3:c8:c6:d8:68:aa:2b:83:b2:26:34:8e:38:63:
                    5b:9f:7a:fe:c5:b1:49:27:08:c5:04:f4:9f:7a:6a:
                    3a:39:3c:12:25:80:c4:67:f1:44:34:4b:80:dd:08:
                    89:da:49:9f:2c:a8:a1:64:12:80:29:c7:29:bd:33:
                    79:30:69:ba:60:b3:7c:11:2a:a0:d2:f6:ae:00:b8:
                    73:f8:25:a3:e8:4f:af:b1:0e:4c:ef:0e:26:23:c5:
                    a1:cd:c1:af:50:27:26:26:6a:7f:d1:22:7a:a0:2b:
                    d0:49:c7:1e:ec:00:8b:c5:3b:4d:5e:6b:2b:b2:e5:
                    12:f9:cd:7c:c8:c4:71:f0:bc:06:d8:cc:22:00:2e:
                    61:3c:d1:2c:97:01:fc:d4:ef:04:9c:21:ad:49:3e:
                    d2:ed:78:85:de:ee:1a:8b:ff:4a:09:c2:9b:10:10:
                    fe:20:ef:6b:d1:b8:29:c5:e5:63:53:da:5b:b6:4b:
                    de:19:b5:e1:31:8c:d7:5b:83:a0:cb:61:3e:36:6e:
                    29:03:73:43:44:ac:c5:f9:71:1c:70:17:bc:aa:3e:
                    a4:7a:1f:e5:74:88:c2:cb:c9:19:b3:9b:4e:be:16:
                    48:9c:76:c3:6d:1f:0b:9f:94:db:90:8f:f1:dd:e5:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:B4:A4:0E:E0:F7:4F:8A:30:D2:AF:96:47:11:B6:9F:96:6D:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca03a78a-b0bd-4e54-8bfb-00996fe6c796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:8b:c3:7a:8e:c5:7d:94:b8:34:2a:3a:6d:eb:bd:e8:97:
         32:0a:72:83:23:7d:ae:66:8d:0c:1a:1e:39:93:35:72:f8:6c:
         da:fa:69:7b:ef:4e:46:e1:66:cb:ce:54:27:6c:50:df:4f:d5:
         c8:b0:d8:c8:70:d3:cc:82:fb:c2:4a:78:ba:2e:07:93:ca:8d:
         c8:aa:16:2a:3a:e4:d7:40:e2:51:11:fb:1d:0f:0e:fc:a5:d7:
         ab:a6:cf:f8:fb:6d:41:05:53:6b:22:a7:8b:9a:f0:29:ea:b5:
         ea:14:7d:c3:4d:33:66:8d:19:bc:ca:f0:36:fb:71:4c:f6:44:
         ce:0b:fa:52:e0:4a:76:0d:d4:70:38:6c:aa:aa:49:72:ce:87:
         d1:f9:34:ee:95:53:9b:2e:af:db:b0:b9:30:bd:4f:4a:42:6f:
         f9:26:f1:ef:a7:6b:ea:0d:cc:3d:b0:c0:20:a6:26:78:cd:15:
         c4:d6:88:28:0b:96:e4:49:e7:62:cb:c5:c7:01:e6:da:1d:eb:
         31:da:24:c4:63:34:d7:c8:1e:33:04:6b:b2:32:fa:48:49:97:
         ce:66:5f:24:3f:c3:ee:03:d1:57:83:8a:81:23:df:af:b4:cb:
         2e:ae:ee:21:21:5c:07:76:1a:ba:e1:f7:cc:74:35:59:fd:82:
         fd:b5:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----