Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef958f26-d177-4390-ab98-792859616e23.roa
File:                     ef958f26-d177-4390-ab98-792859616e23.roa (raw, json)
Hash identifier:          7LRZtCSZ/Pktf4BdwnEBZA8rsDfnAVRV5tcnp8KpbNc=
Subject key identifier:   7B:F6:00:FE:F3:02:23:36:3C:2C:76:DF:C6:AF:80:29:47:4F:54:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       255C57D2532E33A440D5ED91478D5CDD03305749
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef958f26-d177-4390-ab98-792859616e23.roa
Signing time:             Mon 20 Oct 2025 00:30:11 +0000
ROA not before:           Mon 20 Oct 2025 00:30:11 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:57:d2:53:2e:33:a4:40:d5:ed:91:47:8d:5c:dd:03:30:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:30:11 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=563b6793e95b8939fef153d4a5eea4d31a0045d91fa58e651ef40f420f4ea6f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:3e:0c:20:01:cd:84:ff:e2:40:4c:e3:6b:
                    7b:08:21:1d:ba:70:84:78:0e:07:59:fe:4f:c2:bd:
                    e1:c6:37:9d:4a:17:d9:ec:21:8d:9f:ed:fd:dc:42:
                    94:04:28:ed:8c:ba:8c:31:55:cb:6e:63:85:a4:91:
                    bc:d0:62:24:28:27:52:0a:5a:f6:06:3f:ea:1d:1c:
                    42:da:a1:40:f6:0a:b1:ec:01:b3:ce:53:04:42:28:
                    29:ec:a6:de:ba:84:e2:af:99:c3:3d:12:b8:24:3e:
                    1a:23:a1:f4:24:07:3d:59:a2:c9:f6:29:2a:e8:7f:
                    49:53:2b:c4:e5:cf:8c:ff:ed:c1:06:ce:f2:fa:e6:
                    36:28:5a:43:cc:fa:79:38:ed:e6:23:46:1f:f4:ec:
                    0a:6e:57:ce:27:6c:c2:18:a2:55:84:5e:89:fc:0d:
                    29:56:00:c9:3b:6c:53:fb:2e:8d:0a:47:44:08:9c:
                    6d:d4:1f:9c:5b:c3:be:7b:f4:3b:fd:e3:2b:d1:1a:
                    c1:8b:25:f2:8d:ab:bf:f4:79:c6:d9:09:4d:c9:d5:
                    68:75:a6:2d:d9:31:9f:e2:2b:37:06:3c:e9:63:74:
                    93:ce:ba:b6:49:9b:a8:fb:f7:8c:1e:16:3e:fb:eb:
                    46:cb:d5:12:f5:89:cf:b6:97:67:1c:2e:35:55:be:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:00:FE:F3:02:23:36:3C:2C:76:DF:C6:AF:80:29:47:4F:54:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef958f26-d177-4390-ab98-792859616e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:92:c1:af:9b:22:a4:66:e1:07:fc:d2:50:7e:86:7c:0e:
         c4:9d:5e:e7:5d:72:c4:2d:5d:6c:b8:7d:d9:cf:53:70:1d:fb:
         e9:3f:d3:17:56:e0:7d:c9:9a:6d:6a:11:41:08:07:17:7e:b5:
         ca:35:e7:73:3d:ba:ca:1b:92:8b:2e:2f:e5:a5:ef:90:1a:6b:
         86:11:9a:6e:49:ab:8b:2d:e4:46:77:ab:41:1f:fe:37:bc:6c:
         ea:ec:7a:d6:f6:89:bb:e9:33:91:58:30:61:bd:36:e7:a4:8b:
         9c:ae:5a:13:49:d9:d5:eb:0f:77:72:47:23:fb:bd:1f:3b:34:
         70:79:92:4d:22:b6:76:b4:53:e3:37:c6:c6:df:a3:d6:42:00:
         af:ef:8a:e1:e8:11:88:d8:a5:b4:72:9a:15:c8:70:18:c7:80:
         fe:cf:97:38:47:4d:00:f2:25:6e:4e:07:63:db:10:6f:30:90:
         cc:30:01:8a:ad:6c:27:14:42:6d:70:4e:c7:2b:60:04:fa:a0:
         9c:7c:ae:53:bb:ff:fc:99:cc:df:b4:7a:d0:ec:23:8b:05:ce:
         fb:73:f3:0f:cd:aa:fc:6a:6c:12:63:93:10:cd:10:9f:63:44:
         84:22:c7:a6:00:83:8a:17:92:88:14:b0:d1:4e:f5:89:ba:49:
         e9:80:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----