Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa
File:                     f608eab0-8121-4d92-b066-221899ce5193.roa (raw, json)
Hash identifier:          SvSlcP75oRCTzp8LODd+Kd3eNgVE0vbF5/CF2RTLXC8=
Subject key identifier:   8C:C5:8B:BE:65:96:1C:D1:95:66:44:72:90:18:9A:AD:AB:FC:44:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77C84821B139E4345B7AA0E79F0FA667618B1917
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa
Signing time:             Tue 11 Nov 2025 00:41:26 +0000
ROA not before:           Tue 11 Nov 2025 00:41:26 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.136.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c8:48:21:b1:39:e4:34:5b:7a:a0:e7:9f:0f:a6:67:61:8b:19:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:41:26 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=41195b93edb864c7dfd16008d2a7ad17622b1de0763a10d6d53c89768f859555, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:64:dd:3e:4f:e3:45:3b:c2:a8:2c:f5:38:
                    9b:d3:03:97:3b:bf:2e:33:17:60:94:fd:0e:ae:cb:
                    e4:f4:bd:90:7d:21:0c:3f:1c:a0:3a:d4:32:50:0c:
                    ea:a5:30:5b:0d:1e:e4:49:3b:73:1f:36:9f:51:94:
                    0a:98:b9:80:04:e2:97:5f:de:66:af:bb:f9:b0:98:
                    4a:8c:18:27:54:55:bd:c7:72:35:bc:57:26:75:08:
                    9a:6c:d1:58:fa:80:0d:91:d8:46:94:12:d7:80:4c:
                    10:9a:69:dc:16:86:5e:b3:bb:4b:0b:9f:70:0f:93:
                    0f:92:ff:e2:a9:fa:77:54:7c:80:08:39:cd:05:57:
                    ce:9b:1f:3a:1d:ca:28:9e:9d:f6:0f:6a:34:58:ee:
                    6a:c5:9a:4e:04:bb:b4:a0:e7:6b:af:2a:63:13:bd:
                    c1:4d:36:e2:89:4e:01:fb:78:f0:ea:eb:de:c8:c8:
                    e3:fc:19:92:56:a8:26:bb:89:a3:aa:59:32:31:8d:
                    0f:3d:c5:89:43:97:87:02:ee:c2:8d:8e:23:b8:3c:
                    c4:6f:ca:01:22:26:3f:a2:40:a0:f2:5c:bc:49:15:
                    e8:c3:5b:2e:09:ab:dd:9d:08:20:11:87:4f:42:bb:
                    e8:7e:64:46:db:0a:b6:d5:57:be:e8:7d:e1:94:13:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:8B:BE:65:96:1C:D1:95:66:44:72:90:18:9A:AD:AB:FC:44:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:d6:58:a0:81:5a:76:73:a5:97:f2:04:aa:16:35:4b:5a:
         7d:27:3b:d5:f0:4d:00:0f:18:65:ee:9b:66:b7:68:da:3d:7a:
         78:4f:86:68:1e:48:30:00:27:ff:9a:1b:11:2e:63:1c:6d:2a:
         9f:33:b6:c4:f0:97:d8:24:cc:d7:05:e5:da:26:34:e8:87:f6:
         36:57:e5:ef:26:33:1b:44:ae:d1:fd:19:37:0a:e0:35:4d:a6:
         94:7a:12:92:ee:25:44:2d:b7:5a:73:78:48:a7:1e:a4:83:bd:
         ee:22:2a:80:ac:01:51:d0:5b:2b:fc:3e:cb:97:61:f3:91:0e:
         71:5a:70:a7:ff:35:b7:fd:bd:9e:0d:2d:58:0a:9f:c4:ec:28:
         1e:e2:70:6b:f7:3e:73:07:80:cf:90:bf:96:36:d0:c2:6b:2d:
         48:7c:a1:27:c7:79:7a:0c:ca:c7:74:5d:b8:00:1e:e2:58:6c:
         bd:23:ae:c8:42:65:ef:bd:ea:a5:45:57:90:09:ca:ef:bc:fa:
         31:df:d7:c1:35:11:b1:e8:87:ae:a1:f4:5e:39:7e:94:0b:6f:
         bf:b1:92:ad:2b:ef:89:7b:9c:28:66:cf:5c:c1:b0:a0:5c:e1:
         d6:d5:c5:cb:d2:f1:f2:ed:be:5b:f3:c0:17:96:49:5b:b7:06:
         3c:04:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----