Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40b8d-7071-471f-9534-ec6686c693eb.roa
File:                     d8b40b8d-7071-471f-9534-ec6686c693eb.roa (raw, json)
Hash identifier:          8pl9nntcoevReXc9VWNIGGlTwfQy8xwgQMoIhwpDSY4=
Subject key identifier:   07:2B:8B:E5:93:03:39:77:E1:6A:BF:50:83:17:90:0D:5D:1D:A3:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A59E0EC30BFA79303F38C040F8C9D574173757C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40b8d-7071-471f-9534-ec6686c693eb.roa
Signing time:             Mon 20 Oct 2025 00:41:52 +0000
ROA not before:           Mon 20 Oct 2025 00:41:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:59:e0:ec:30:bf:a7:93:03:f3:8c:04:0f:8c:9d:57:41:73:75:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:41:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=50436f099c5d127f7331b51a674fdb788fd1b93bea69575e7ac5b0aa70b3475d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:d4:78:33:08:b5:09:e2:ea:a7:b4:56:79:
                    bf:83:38:ef:77:02:73:9b:52:36:c7:dd:75:34:5c:
                    a5:4c:76:1b:78:6a:89:7a:a3:86:71:15:5a:ff:c4:
                    73:ae:4b:06:c7:2c:c7:33:6f:7d:74:b5:16:76:83:
                    70:f2:db:26:a2:fc:c5:dd:23:df:92:23:eb:1a:4b:
                    c9:b2:8d:93:60:47:91:a3:ce:bd:89:39:84:d9:3e:
                    ea:1c:21:74:e5:a7:6b:1b:f7:29:68:15:a9:13:19:
                    30:73:59:f5:29:4b:57:51:01:ea:3e:9f:71:8a:8c:
                    2d:a8:e2:60:87:66:7d:1f:9d:cb:78:ac:8e:b9:9d:
                    2f:a6:77:0a:39:e9:a9:19:55:2f:7b:60:33:b7:b7:
                    20:ec:19:12:9f:96:3f:be:93:d5:1e:b5:2c:bb:0a:
                    53:cc:c1:f5:33:9f:cc:5a:33:17:eb:1a:e6:c4:c8:
                    51:31:e5:92:03:4e:cd:3e:48:f9:65:22:4f:d6:8c:
                    ac:47:f4:15:ab:83:b6:76:86:70:23:ef:3c:0b:b7:
                    21:2e:40:81:bb:58:76:ec:97:ba:f1:af:4b:cb:b9:
                    6f:7a:85:f7:9a:60:6e:fb:4e:f9:e9:4d:20:10:53:
                    35:3c:f7:e6:2a:e9:43:75:c4:a9:54:ab:9d:58:68:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2B:8B:E5:93:03:39:77:E1:6A:BF:50:83:17:90:0D:5D:1D:A3:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40b8d-7071-471f-9534-ec6686c693eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:25:8e:14:36:d1:65:41:55:35:05:18:d5:58:5a:39:21:
         fa:16:dc:f8:38:68:0f:cd:73:b7:48:84:ae:8b:e3:ec:d9:52:
         5a:85:29:c2:04:b7:4a:55:56:4a:c2:94:1f:29:13:7f:d0:af:
         9f:5e:8b:22:82:7f:f3:7e:d7:d7:29:b5:a7:94:a4:17:1f:95:
         b0:34:20:a0:88:19:62:03:1f:69:1b:23:8e:f2:43:47:53:a8:
         01:aa:26:14:96:0b:a3:24:92:03:a9:cd:ab:25:93:e5:55:6b:
         65:17:83:cc:19:22:1c:47:3d:20:b0:63:66:6e:fc:b1:6e:f5:
         90:09:62:78:f4:b4:36:9d:77:45:12:8f:f5:1f:94:af:5c:86:
         fc:c9:da:35:a7:c1:ee:76:9c:4b:99:07:3e:c7:dd:30:95:d0:
         84:9f:54:d8:9c:09:d8:ba:7a:55:b4:a0:75:89:07:0e:a0:12:
         54:98:fe:7a:a4:89:4a:f9:30:11:c3:e1:47:60:8c:f8:72:61:
         ca:19:63:d5:f3:6b:8f:3a:23:ad:6a:63:d1:3b:58:a0:2e:71:
         5c:4e:86:23:1c:8d:a4:86:05:95:e8:1d:0a:bf:b7:5e:fe:5d:
         4f:1a:38:22:82:00:cf:1c:5e:bb:2f:a9:96:ec:af:2e:bd:2a:
         73:00:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----