Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa
File:                     d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa (raw, json)
Hash identifier:          Wtm1lbKunKcmkWU0OxrC1BVjCVTg7ZaNwg/G2TuFz+Y=
Subject key identifier:   51:D7:4B:CA:90:3E:A5:84:43:AC:F0:79:C0:9E:20:2B:A9:B0:7B:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4494791FDC31077432C444DDBA2B065C268F633A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa
Signing time:             Tue 18 Nov 2025 00:10:34 +0000
ROA not before:           Tue 18 Nov 2025 00:10:34 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        108.166.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:79:1f:dc:31:07:74:32:c4:44:dd:ba:2b:06:5c:26:8f:63:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 00:10:34 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=d68f41d99d73bfc8a3c5a6208a41d49c23f289a830a267db7ed2f51fbeeed469, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:cd:96:d2:3e:e4:7e:fc:44:d1:21:e4:23:
                    2a:5b:51:88:20:39:dc:cf:fa:41:cd:7c:0e:0e:35:
                    20:61:ef:9e:f6:b8:4c:51:24:31:3b:d9:6a:2e:81:
                    3f:18:03:ac:e3:ad:5a:99:fe:bf:30:40:85:28:14:
                    5f:13:b5:02:4f:28:ad:4e:b6:7c:9a:66:17:f4:54:
                    85:26:7d:37:79:f2:44:da:83:64:e9:c0:27:f2:46:
                    8f:32:f9:30:f9:3f:2f:a6:65:ea:9e:cc:56:12:6b:
                    13:0e:61:00:69:4f:cd:10:7c:e5:60:b0:86:d0:2f:
                    00:97:29:4b:3f:b0:0c:ff:8d:a2:dd:a7:20:ae:1e:
                    9e:c7:85:bc:7e:66:db:6f:c6:30:08:eb:73:83:70:
                    3e:e3:2b:76:46:5b:54:cd:15:54:dd:48:be:f7:e2:
                    33:d1:1c:49:a8:20:98:9a:e7:b1:88:d1:3f:96:2c:
                    70:6e:a2:07:90:18:47:f3:66:37:b1:96:c4:e6:1e:
                    d3:67:14:f4:8e:24:aa:1b:7b:55:30:7b:a1:d2:76:
                    29:1b:a6:85:b2:1f:69:a4:dd:22:c7:df:f8:29:dc:
                    a8:78:cd:47:01:40:9d:57:c9:44:a2:e7:f7:22:2c:
                    15:cd:e1:8b:87:26:9b:2e:77:01:75:d7:ed:c2:11:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:4B:CA:90:3E:A5:84:43:AC:F0:79:C0:9E:20:2B:A9:B0:7B:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0aecca8-b5b2-4595-9f0a-580808d0a23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:86:86:15:88:b9:0a:42:94:04:87:ea:76:db:85:5c:48:
         0d:f8:f3:2a:6d:7f:9e:f3:18:5f:3c:ff:06:0a:ce:d5:8d:a3:
         ec:ad:cd:02:84:6c:24:88:63:17:e7:9c:cd:6c:67:e1:9a:ba:
         9e:e3:cf:68:34:5e:cf:13:62:a0:f0:c8:f2:0a:69:cc:66:6e:
         9f:7e:85:b8:38:d5:6f:ac:b2:c9:84:c2:ad:94:73:5b:05:dd:
         41:36:8f:7e:a0:77:bb:bf:d9:29:74:c0:85:df:f4:47:c8:8c:
         2d:10:b7:ae:5f:a7:26:56:8c:3a:8c:94:75:c4:5d:00:03:18:
         b7:e7:f6:2b:94:74:fb:0d:40:e7:c7:1f:e9:41:f0:78:b8:f2:
         aa:f4:e8:87:8a:d2:f7:db:af:a4:94:0b:66:7a:e3:a0:dd:e6:
         7b:4c:52:41:48:b8:87:9b:f2:d5:a9:36:ef:f9:07:4a:b9:79:
         56:0d:ef:52:92:15:42:3d:82:27:32:8f:a7:bb:d7:1a:db:f2:
         28:4f:57:25:27:9a:fe:98:86:96:8c:88:13:e7:6f:46:c3:c8:
         ea:5e:5b:4c:fb:e1:ca:06:3b:b9:ef:e4:8a:72:23:1b:a3:f2:
         83:46:0a:c0:4f:19:df:02:02:08:da:b6:6e:ba:68:0f:16:6b:
         c3:df:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----