Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdd0ac63-0c71-44d4-a28e-9ae8496bc57a.roa
File:                     fdd0ac63-0c71-44d4-a28e-9ae8496bc57a.roa (raw, json)
Hash identifier:          Up6y6uEZn4H8j1NWppULUP6WGWAG4DhvuY0FWEtdZHk=
Subject key identifier:   56:67:45:FD:30:CC:05:25:91:36:72:11:6C:26:81:3A:79:51:8A:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1140C068C76481D3E33BE56195BF1D4B5EC4A0DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdd0ac63-0c71-44d4-a28e-9ae8496bc57a.roa
Signing time:             Sun 19 Oct 2025 02:50:05 +0000
ROA not before:           Sun 19 Oct 2025 02:50:05 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:c0:68:c7:64:81:d3:e3:3b:e5:61:95:bf:1d:4b:5e:c4:a0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:50:05 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=2c84d367147f23a7b34dec5e1a5b4c4975cc8325767fd0efac992e18345929c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:f7:2d:68:92:8a:9b:94:25:3c:43:40:b7:
                    8b:77:80:ef:c1:1a:27:c6:4b:08:8c:b6:a0:88:1d:
                    38:c3:8c:ae:0d:40:e4:4e:c7:c9:39:dc:9f:0d:a1:
                    4b:d1:a5:01:03:93:21:85:e0:7f:e0:8a:45:19:0a:
                    33:6c:ba:53:0d:71:8e:89:eb:4f:81:8c:25:d9:e3:
                    ee:91:03:f1:79:58:27:af:df:40:2b:ac:26:41:8b:
                    b4:b3:50:b7:66:01:c6:49:f4:a9:47:ef:9f:16:3c:
                    62:0d:b0:37:91:65:f3:cd:db:ef:a1:3d:ad:fa:15:
                    7c:63:ec:6b:84:da:ad:c2:a5:e1:38:96:00:75:91:
                    77:33:d5:20:20:ed:0a:36:eb:79:a3:b7:59:9a:45:
                    87:56:7c:3f:99:a1:e7:1e:75:4b:c7:3b:60:12:e1:
                    8e:26:d2:0a:1e:de:de:6b:c0:78:fb:e5:4c:e5:34:
                    88:5c:78:2b:b3:cb:69:94:bc:8a:a2:09:ba:d0:81:
                    49:d8:98:86:69:65:56:fc:2f:f2:bf:3d:8a:30:f4:
                    cc:45:c2:cc:9b:ae:60:45:29:b7:c1:fa:3f:27:62:
                    c2:04:64:68:a8:d8:b3:70:a2:4e:8c:e8:65:e9:a6:
                    ef:8b:bc:8a:cc:d1:9d:ab:ea:a2:11:57:aa:ca:90:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:67:45:FD:30:CC:05:25:91:36:72:11:6C:26:81:3A:79:51:8A:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdd0ac63-0c71-44d4-a28e-9ae8496bc57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:00:a6:98:a8:a4:1a:e7:28:72:d8:83:24:8a:84:79:43:
         94:69:88:05:be:a5:08:11:28:e4:f9:a3:c0:d0:0f:6a:d2:c7:
         18:0c:fa:35:be:fd:fb:67:a7:8b:9e:e7:ae:22:a9:26:b6:00:
         88:15:3a:3b:82:10:14:fb:f4:3a:6b:1b:f5:36:7f:8a:7e:ef:
         fc:c8:6b:a6:b3:5f:4b:a6:d8:4c:a3:7d:49:70:96:4b:88:43:
         e4:1a:e3:5c:4d:d1:9e:1d:2f:b9:a1:dc:f8:09:04:39:ce:28:
         c0:68:32:19:a7:c1:76:53:89:5a:74:26:2d:03:57:ab:9e:42:
         1b:08:8e:c3:c9:5c:c8:2f:af:5c:d7:da:9c:aa:0c:7f:d1:fa:
         5d:3c:d4:80:42:64:ed:99:fc:cc:bf:e1:45:b0:11:2f:f5:fe:
         e7:20:2a:e6:fc:4d:f1:6e:ce:f7:56:a2:d7:01:2b:8a:d5:2c:
         f2:fd:fe:1b:ea:db:66:29:ee:a1:5e:70:e3:42:98:1c:19:3b:
         bd:24:d4:e2:43:02:68:0c:08:2a:ba:7c:33:09:cf:4d:d9:8a:
         25:de:a9:77:08:90:7a:d1:b3:e4:65:07:aa:92:40:89:b0:5c:
         20:90:89:93:b3:9e:fb:ef:67:19:a2:e1:85:f9:7a:3a:f3:fd:
         75:e0:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----