Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc34e329-a9f8-4c86-a359-0bc3d64f0db6.roa
File:                     cc34e329-a9f8-4c86-a359-0bc3d64f0db6.roa (raw, json)
Hash identifier:          1YQPCGbfKCeFz8/p5CFIGUpUhbj62nLPN8NcOTGsjcQ=
Subject key identifier:   FF:EE:F0:28:1A:D0:BC:F3:E8:82:77:F3:08:2A:12:A0:3D:C4:B5:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BB705518C37F977FD74CB4270303687E011C39D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc34e329-a9f8-4c86-a359-0bc3d64f0db6.roa
Signing time:             Mon 20 Oct 2025 01:12:37 +0000
ROA not before:           Mon 20 Oct 2025 01:12:37 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:05:51:8c:37:f9:77:fd:74:cb:42:70:30:36:87:e0:11:c3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:12:37 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=abae88dde5842c697997335714bdb05f9a6abf39a743edc273bc15e553d84c5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:84:12:ec:10:41:cc:d0:12:37:26:84:6b:
                    de:df:7a:b7:f1:d0:72:ac:c7:ef:03:1f:f9:4f:d2:
                    b7:19:70:24:af:29:b6:1e:df:a0:4d:79:94:82:ea:
                    3b:2c:84:07:d0:3c:de:c0:27:bd:fa:9b:3f:5d:78:
                    1e:ab:46:18:a0:a0:6e:1e:8c:9f:bc:55:65:51:1a:
                    59:0d:db:fd:45:db:69:80:87:ce:47:1f:50:a8:bd:
                    6d:a7:d7:27:84:98:3d:46:3d:3d:0a:c3:59:ce:58:
                    3f:84:fb:a4:39:c7:2c:26:c5:44:75:04:0e:5e:ed:
                    15:01:bd:f8:68:6a:7a:1a:ea:48:a5:42:f3:df:99:
                    5f:2d:d5:d9:ce:4d:27:4d:b0:09:cb:02:5e:11:e2:
                    02:ff:71:87:17:dd:de:1e:c0:64:26:81:ba:dd:ac:
                    64:8c:e5:8e:9f:f2:04:86:69:cc:c2:e7:dc:f2:de:
                    93:4f:b5:60:31:9f:fa:19:d4:b4:f2:ab:a6:c0:c2:
                    25:ac:09:0b:ab:e8:8a:2f:e3:42:b6:d2:08:d8:4f:
                    cb:63:c2:03:4f:91:f2:88:70:b2:c3:ec:e9:67:c4:
                    33:af:34:b9:85:5e:4b:e3:4d:37:be:51:92:df:3d:
                    8c:ce:46:67:00:26:24:70:a3:39:56:64:a9:78:8c:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:F0:28:1A:D0:BC:F3:E8:82:77:F3:08:2A:12:A0:3D:C4:B5:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc34e329-a9f8-4c86-a359-0bc3d64f0db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:e1:8e:6a:5b:27:41:b1:8e:65:55:57:52:12:89:4b:dd:
         94:d2:e7:42:73:fa:3d:bd:b6:8a:40:72:4a:6f:45:69:fa:b3:
         29:d1:7f:8c:38:61:d5:da:2a:33:66:5a:9a:07:78:90:70:51:
         cb:2c:e6:b9:6d:64:67:45:05:5c:16:67:67:53:62:25:30:40:
         55:ec:b6:ba:44:0b:e2:47:74:51:83:28:ce:bf:8f:09:39:58:
         20:b5:4c:4f:e9:9c:98:17:a3:36:ee:37:d8:11:95:2c:e1:d4:
         7e:e5:6a:56:13:69:72:43:11:62:07:bd:bb:34:37:cb:72:e3:
         51:c1:e3:74:10:f4:19:74:07:29:73:73:db:c3:ce:4e:cb:ef:
         c0:2f:f4:60:ef:55:f2:8e:07:bf:b7:6b:bc:4f:c0:f4:d4:33:
         cb:b5:c3:9c:ce:af:dd:89:ee:34:96:f2:b3:1f:02:3d:9a:a0:
         0e:19:93:8c:d5:f8:36:df:21:15:47:50:c1:12:67:51:a8:23:
         d5:80:43:d7:98:a0:b0:36:b9:60:21:b8:3f:34:26:ab:5c:e4:
         60:8a:4e:a8:9e:51:88:ac:1f:17:ec:3e:e4:ff:32:0e:6d:27:
         dd:96:26:c9:66:a8:e6:80:99:f2:c8:75:b1:80:e1:39:ac:b9:
         2f:ff:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----