Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb272b3-a208-4dad-afcb-daeb9ac48724.roa
File:                     0bb272b3-a208-4dad-afcb-daeb9ac48724.roa (raw, json)
Hash identifier:          EQ2dImSy5a0YQ7tEXLhTR/hHkoq3QlQm5CS8ki7m1h0=
Subject key identifier:   17:B2:0A:95:7E:32:98:77:0D:12:47:72:A9:35:58:BD:47:F6:AB:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       294EA8384B82EDD5A50E87A7A38818EF1A03D8BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb272b3-a208-4dad-afcb-daeb9ac48724.roa
Signing time:             Sun 19 Oct 2025 02:20:44 +0000
ROA not before:           Sun 19 Oct 2025 02:20:44 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:a8:38:4b:82:ed:d5:a5:0e:87:a7:a3:88:18:ef:1a:03:d8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:20:44 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=bce27883de98f97f7e1dbce94cda6fb5b6e514a259d54303a595f2abad451184, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:22:f3:2d:60:3e:e9:9c:d9:dc:ca:24:bf:e5:
                    55:09:d6:29:0a:85:b5:b1:19:00:5b:ec:3c:cc:30:
                    bc:d1:2e:f1:96:7e:ea:31:71:1b:4b:b2:ce:43:c6:
                    3d:41:4c:49:67:08:8b:b6:32:6b:17:bc:5d:a1:5f:
                    0b:f4:ad:41:8b:46:87:f7:f8:36:67:10:f7:39:98:
                    78:b5:bb:51:e9:cb:e5:7b:1e:60:e9:f6:c0:51:0e:
                    dc:d5:7d:ec:68:8a:03:ba:51:c8:0e:ac:75:1c:d9:
                    ef:2b:e6:70:73:a1:b4:5c:f7:79:eb:ec:19:25:29:
                    51:4f:49:1e:26:05:ef:d4:33:36:da:3e:52:a0:5d:
                    b2:fb:b4:a0:e2:cf:48:1f:bf:cf:da:f0:5c:fb:0a:
                    2a:eb:ad:09:8d:d2:9b:b4:4c:6e:b8:a6:57:20:73:
                    6f:73:50:b0:3e:04:3c:68:76:22:40:f5:23:7b:16:
                    1a:46:c6:fa:26:2b:2e:bb:ed:91:64:e0:77:b6:80:
                    9b:8e:da:d2:12:7f:bb:f6:77:65:ae:8a:c5:90:b1:
                    fa:b4:cb:64:d8:6b:86:37:21:5a:ed:44:37:ad:c3:
                    6b:ac:ab:a0:2b:fd:0b:69:1e:9c:62:60:46:03:0b:
                    b2:1f:15:d1:a1:a2:1a:bc:9d:95:1d:d7:74:7f:05:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B2:0A:95:7E:32:98:77:0D:12:47:72:A9:35:58:BD:47:F6:AB:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bb272b3-a208-4dad-afcb-daeb9ac48724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:3d:44:99:84:82:14:17:02:5d:f6:48:d2:83:76:e6:bf:
         fd:96:18:7d:37:c6:58:d9:4e:0c:7c:e4:34:35:9a:4e:a3:c2:
         ac:b1:b7:7b:5c:f7:fe:50:0a:b0:c2:e3:fe:cc:26:04:d8:22:
         df:71:3d:98:e3:7a:73:32:a2:6f:6b:2d:98:29:35:eb:d2:a6:
         5f:d6:a1:21:84:5b:5b:5c:c3:df:55:8d:d5:55:52:69:e0:2a:
         5a:ee:0a:08:68:2b:ee:ee:95:02:f6:6f:89:74:bc:3e:b0:0a:
         b9:ee:e8:9b:a5:4f:a4:0e:51:c4:c8:05:e0:78:93:31:6d:4e:
         ad:2c:51:3e:e3:a2:14:1f:d6:cf:52:18:38:14:63:6f:fa:58:
         43:96:0f:8f:3f:9d:0e:c1:54:41:ba:51:b1:29:78:21:5b:81:
         dd:42:fa:80:9f:a4:47:aa:aa:57:fa:6a:f5:b8:24:8a:ad:65:
         8b:65:38:cc:40:df:a4:6e:4e:b2:a7:e4:c8:8a:9c:ca:d9:af:
         62:15:a6:71:d1:f5:26:76:30:78:73:a6:d3:0b:f7:cd:e9:11:
         91:81:31:2e:41:b8:24:15:18:5c:89:97:5a:7a:bb:71:79:80:
         29:7b:0e:b2:29:3e:63:70:90:bb:8f:ed:75:6a:a5:ac:bc:84:
         06:33:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----