Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e191932c-93ac-4a9c-bab9-6ba932f5794d.roa
File:                     e191932c-93ac-4a9c-bab9-6ba932f5794d.roa (raw, json)
Hash identifier:          DZ3RHRsHRAvRPy91lmuqgqYrZlSlAyrfVB8osf6SeHU=
Subject key identifier:   2F:BB:15:2A:F3:1E:0D:CE:F3:2D:61:D7:A5:96:2E:FF:CA:50:FC:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4132C73F73C2BF75C15FCD353894F21DF425347F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e191932c-93ac-4a9c-bab9-6ba932f5794d.roa
Signing time:             Mon 20 Oct 2025 05:21:27 +0000
ROA not before:           Mon 20 Oct 2025 05:21:27 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:32:c7:3f:73:c2:bf:75:c1:5f:cd:35:38:94:f2:1d:f4:25:34:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:21:27 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=7e993694b16b107cfbe5723f67ed16b37148022418ad62cd6cd9b52f41e4f036, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:03:65:0b:ae:c4:04:00:3f:0b:60:15:bb:
                    5a:a8:e7:8b:bd:a8:11:f0:5a:f3:d9:62:47:2b:54:
                    ad:6a:14:5e:10:48:46:19:9f:0d:b7:0a:95:c1:58:
                    dd:6e:50:2e:ce:89:3c:63:7e:12:5a:59:58:d9:c8:
                    eb:c5:c9:7c:e5:53:be:3e:e2:36:18:27:8e:dd:8c:
                    0c:c8:13:0e:45:88:ee:ab:35:56:41:82:b5:54:ea:
                    c6:26:19:34:c5:fc:9a:9c:ed:84:90:f8:f2:21:0a:
                    d7:f5:39:f0:df:11:13:94:d4:1b:06:36:1b:22:09:
                    d6:88:ad:41:5b:3f:36:80:84:60:76:7f:ca:3a:01:
                    e4:e9:5a:6a:e9:4d:d9:53:75:ba:71:8f:3d:88:b4:
                    f6:0c:63:4c:11:0b:34:59:b1:28:b0:aa:ec:2f:1c:
                    95:a5:25:54:85:5f:1f:17:82:7b:a6:6b:bc:d0:ba:
                    57:94:9f:c1:58:fe:f5:23:51:df:fc:e6:ef:b5:34:
                    25:25:2f:34:4c:2f:5c:48:39:c9:c7:9c:db:af:bb:
                    6c:a9:8f:96:5e:35:0f:29:f7:f8:df:d7:4e:b0:ac:
                    0b:84:bc:88:d5:e0:7c:68:af:65:fc:84:e5:1c:77:
                    4b:51:0e:5e:a0:3b:f3:a8:bb:21:f9:19:60:00:b2:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:15:2A:F3:1E:0D:CE:F3:2D:61:D7:A5:96:2E:FF:CA:50:FC:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e191932c-93ac-4a9c-bab9-6ba932f5794d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:4d:c9:b9:20:52:84:d3:55:50:81:a1:53:ea:be:61:e8:89:
         93:6d:57:42:94:5d:50:8e:59:09:ee:41:06:2d:e9:d3:74:8d:
         1b:27:e2:19:db:bc:51:7d:b4:b2:4a:69:76:6b:c1:85:3a:9c:
         08:75:6a:33:5b:23:77:7e:91:c9:a6:07:4c:38:09:6d:42:60:
         f1:10:53:79:01:b6:6e:a9:ff:ec:27:c6:e8:2a:22:5d:61:fb:
         16:8e:c2:2a:75:01:54:d9:2c:b7:50:b1:42:e9:98:84:c5:e3:
         89:24:9f:78:63:63:18:bd:ca:7e:c9:2a:78:6d:25:aa:21:49:
         25:6f:59:ca:e5:fd:cc:c5:4b:cd:29:4d:ce:2e:56:a3:46:73:
         f3:a8:f5:ec:1c:c3:ca:f4:50:e3:a9:3f:ab:51:67:08:06:dc:
         01:a3:7e:fd:2d:44:4f:31:e9:e6:cd:91:d0:2a:de:e9:5c:52:
         c0:50:9f:ba:96:9a:ac:5f:b4:39:b9:b4:25:57:ca:f4:de:45:
         60:ba:78:ce:43:45:44:7d:32:a9:3b:15:27:f3:ad:5e:93:a9:
         b6:b8:a0:03:96:fb:2a:ed:c1:15:6f:f1:7c:e7:d5:2f:23:b6:
         53:6f:ce:0f:4f:00:0b:ad:07:50:c7:19:79:23:12:e2:69:94:
         7f:21:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----