Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa31f415-9517-4def-bfe1-b8e55c9d032a.roa
File:                     fa31f415-9517-4def-bfe1-b8e55c9d032a.roa (raw, json)
Hash identifier:          rGfFiGwe+5gvkH6NeYQabunt6TFu/IJQwJVKuJixxz8=
Subject key identifier:   6D:AE:44:08:F4:13:AC:0B:0B:02:6A:C3:F2:A2:E2:23:71:4D:AA:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12DF5E6988A94F2A409E4E4E4EA9C66F1B4D6CBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa31f415-9517-4def-bfe1-b8e55c9d032a.roa
Signing time:             Mon 20 Oct 2025 06:21:37 +0000
ROA not before:           Mon 20 Oct 2025 06:21:37 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:df:5e:69:88:a9:4f:2a:40:9e:4e:4e:4e:a9:c6:6f:1b:4d:6c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:21:37 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=fd86d1de44e24377d0c35b7d1a66279cc8b54d46a5c550413d9e187d97605c7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:ed:e9:42:54:61:4c:81:aa:dc:a9:c3:56:
                    65:6b:7b:ec:cd:cb:4e:4d:2a:bf:ec:b8:81:89:30:
                    62:79:e6:5a:c6:59:e2:64:e2:65:10:d3:24:8f:e1:
                    ec:e7:37:f9:7d:d6:bf:ff:54:29:e6:c8:b0:fb:c7:
                    7d:29:57:f1:cf:dc:fe:d2:d5:08:d5:32:f4:df:59:
                    cd:10:28:88:51:df:d4:8f:a2:1e:f7:68:e6:9c:97:
                    9d:80:3c:7f:d8:bb:f7:46:66:3a:de:44:f9:ec:67:
                    a1:b1:18:f4:1c:b7:df:cd:26:78:5c:f5:53:97:49:
                    11:49:98:ba:cb:78:db:1c:3d:d1:51:0b:2d:92:d4:
                    99:90:aa:3c:53:86:4e:fd:0b:98:9d:03:5e:6a:76:
                    24:8f:52:e0:ac:16:ee:fc:40:e4:50:35:83:11:9c:
                    43:f1:13:44:c1:1e:a8:2b:30:2e:3b:ef:69:fa:8e:
                    9d:f6:4a:c5:08:45:6a:5f:68:11:2a:7b:31:62:de:
                    42:57:23:46:62:6a:7d:6e:30:31:e1:6b:52:92:ab:
                    28:45:52:83:d6:5e:8c:f1:2e:c4:92:9b:21:42:ba:
                    6d:ea:8a:c8:ba:78:46:22:ea:b6:cc:39:c4:8a:5c:
                    f5:51:9c:fc:fb:44:19:2b:42:84:73:2a:1a:a5:6e:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:44:08:F4:13:AC:0B:0B:02:6A:C3:F2:A2:E2:23:71:4D:AA:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa31f415-9517-4def-bfe1-b8e55c9d032a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:95:55:2d:11:a8:a9:26:f3:8c:8d:6e:b2:f0:66:d9:36:01:
         fc:2d:97:d7:32:31:47:3b:4e:0e:60:c2:9d:1d:b8:a6:25:b7:
         44:59:6d:4e:ab:1f:d2:8a:0b:4e:be:d9:97:ed:a0:78:f4:ae:
         5b:f0:e7:78:0c:91:2f:35:34:fb:2f:be:40:8c:2b:0c:0c:e0:
         21:dc:00:c5:3f:0b:ae:f0:7b:76:1c:5a:0b:61:35:92:08:73:
         7f:be:1b:98:e2:90:43:26:c8:c0:00:8c:88:cf:8e:ab:d0:b6:
         c5:0a:85:ab:f2:1d:d5:64:d3:7a:a9:4e:3d:26:90:ad:6f:df:
         71:4e:57:66:d5:d3:ab:d0:f7:e5:8e:89:a5:8c:91:e6:f5:3d:
         ef:e5:f8:63:d0:85:7a:56:2f:f9:02:cd:6b:bb:ca:61:16:95:
         85:4b:70:6b:c3:c9:61:fb:96:dc:d8:f9:fa:2d:88:84:5d:ec:
         42:df:a7:35:68:c1:93:b5:d8:02:b2:9d:fb:00:95:17:46:de:
         e7:91:34:e7:f1:d9:17:47:d0:81:cc:72:25:b7:07:2c:d2:7b:
         74:f9:61:2c:75:99:46:5b:52:96:08:da:2e:4d:78:60:70:6e:
         88:1e:f0:c7:30:5d:93:09:60:97:e0:f8:ff:dc:9b:86:48:db:
         02:12:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----