Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1d55ea2-6e25-441f-8c2c-64b139343e23.roa
File:                     d1d55ea2-6e25-441f-8c2c-64b139343e23.roa (raw, json)
Hash identifier:          S/zY18DzicXOX/GJEQLnJFs5ZU2uUUVpRPGMzqdgOxg=
Subject key identifier:   28:B0:97:08:A5:AF:71:58:FE:95:A9:1F:D3:92:34:E0:EB:BB:0A:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3247C6FFB77D1732AFEFC03965CEDF9F629BAE01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1d55ea2-6e25-441f-8c2c-64b139343e23.roa
Signing time:             Mon 20 Oct 2025 06:31:31 +0000
ROA not before:           Mon 20 Oct 2025 06:31:31 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:c6:ff:b7:7d:17:32:af:ef:c0:39:65:ce:df:9f:62:9b:ae:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:31:31 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=7f5d0816bd9240b5b6f67ca782665b8be9d420b91d4f4c171c181417e169e0a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:f4:69:9f:d5:0b:98:80:60:b6:2e:f6:f8:
                    6c:8c:79:49:c9:d1:3d:8e:53:1d:54:b5:f1:bf:80:
                    ee:4c:10:6c:4e:65:a0:71:90:27:4b:45:70:78:6b:
                    49:d6:7d:73:ef:25:2e:07:94:79:eb:99:cc:57:c2:
                    4e:ef:75:5c:08:86:1c:76:21:c7:c0:ca:7e:d4:b6:
                    8b:04:5a:97:62:71:1b:64:f6:a3:60:92:1b:73:dd:
                    24:81:b3:ac:1c:08:b3:d9:5c:92:ea:e6:4b:64:5f:
                    81:c4:5d:06:93:65:00:d6:b7:7b:f7:58:72:16:9d:
                    a9:8f:bb:78:97:95:4d:ff:fb:69:bc:01:f6:8f:0e:
                    0b:79:e6:af:7c:de:f3:5e:a8:90:91:b0:1e:0e:67:
                    80:de:c9:4f:5a:a8:4e:0d:23:c4:2d:3b:1a:a0:0b:
                    68:0f:d7:49:32:60:b0:12:48:b7:29:77:51:85:b4:
                    87:9b:0c:94:db:e6:1f:56:7c:04:a0:31:79:76:b4:
                    dc:75:4d:e6:d2:c1:58:26:02:bb:07:0e:a0:fc:5a:
                    b0:cf:e0:99:b4:0f:63:bc:6f:28:9f:92:fd:cb:b9:
                    cc:ff:0d:2d:9a:6a:ec:9e:62:39:93:35:25:c8:25:
                    5c:6e:0d:c1:a4:8d:1d:b1:c9:53:21:64:32:20:f2:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B0:97:08:A5:AF:71:58:FE:95:A9:1F:D3:92:34:E0:EB:BB:0A:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1d55ea2-6e25-441f-8c2c-64b139343e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:50:83:a4:9a:50:c9:10:9e:72:f0:b7:a3:ea:fc:5d:04:
         04:c6:b8:e7:4e:ed:bc:98:fe:a5:94:dc:6c:97:30:75:c0:9e:
         db:37:cb:45:a0:f3:f8:83:45:22:26:13:60:6f:e9:7b:71:43:
         0a:1f:5f:ea:5a:e0:6b:ff:d0:54:27:2f:7b:a9:1a:a3:a6:50:
         79:1b:bd:25:75:af:72:e0:d5:4f:88:7e:f5:e9:c7:62:5c:53:
         90:2b:31:65:96:f0:42:e0:48:29:b7:8d:93:fe:0d:c9:63:f1:
         8e:d8:f2:a7:9a:66:e4:d5:ba:20:1f:a4:e1:a7:2a:eb:e5:48:
         e4:d5:d2:1e:5c:52:b5:2e:49:aa:10:85:48:d3:0c:63:ee:2b:
         d3:46:85:72:b0:5d:74:14:74:8c:8d:1f:49:3a:7c:f6:c0:2f:
         20:55:5f:6c:57:83:a6:1f:3b:c2:a9:a4:14:c8:f5:84:03:49:
         24:b3:ba:af:1a:c5:8d:1a:aa:9c:c9:ee:bd:ab:35:ff:26:96:
         1a:7a:f4:eb:b6:7c:da:f8:36:14:4c:6e:35:2d:4f:29:e6:26:
         15:e6:b5:3b:df:45:cb:39:0d:64:a8:cb:f3:ff:ef:79:33:aa:
         62:a8:e5:ca:b6:5c:9f:15:26:32:16:86:6f:cb:5a:57:0d:b0:
         9f:16:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----