Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f75db5a-bbb3-4c81-a0fd-e2046335d357.roa
File:                     0f75db5a-bbb3-4c81-a0fd-e2046335d357.roa (raw, json)
Hash identifier:          S2Gm/Nb8r1qL4aY5/QBAKZO0T+nS+XnMGPdukfoB3Kw=
Subject key identifier:   10:A7:80:CD:31:DA:76:0A:EB:3E:F6:D1:CF:20:EF:03:53:ED:27:9C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       08252D670DE70542900A1A52E8203E2D3D07B168
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f75db5a-bbb3-4c81-a0fd-e2046335d357.roa
Signing time:             Sun 19 Oct 2025 03:20:03 +0000
ROA not before:           Sun 19 Oct 2025 03:20:03 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:2d:67:0d:e7:05:42:90:0a:1a:52:e8:20:3e:2d:3d:07:b1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:20:03 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=639dbfa4301018918b8695326639fcd023fa8294796895b9c59ec3d17710ba7f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:4e:1e:e6:1b:2d:53:66:3c:16:63:da:8e:
                    14:0c:39:7e:9a:90:36:c4:12:e5:9f:8a:d4:00:b8:
                    94:2f:08:12:01:d3:1a:b2:c7:77:15:92:89:e8:8b:
                    28:51:c9:16:f3:c9:ae:9b:08:4b:09:ee:78:25:1b:
                    ea:0c:e7:b0:4b:aa:cc:7d:66:ab:42:2f:28:8a:63:
                    29:9b:89:d2:de:61:cd:56:2a:ad:b0:5e:91:ad:24:
                    94:de:42:04:c5:4d:b8:bf:c7:cb:55:e0:27:df:88:
                    ee:ea:81:26:ea:18:22:ce:12:cf:7e:56:1b:47:a2:
                    a6:ce:53:67:54:16:32:0c:de:19:e3:51:fa:4d:1d:
                    41:bc:62:36:5f:9a:5f:c8:e8:13:c3:33:13:97:15:
                    6e:35:4c:85:b1:36:55:84:b3:ab:17:96:db:53:21:
                    24:62:92:0b:b6:5d:bf:e4:c6:4e:90:37:a3:11:12:
                    74:38:d6:8a:57:9b:5f:af:00:5b:be:95:57:48:e0:
                    72:43:69:5e:a1:7f:b9:ec:83:56:c8:17:f8:ff:98:
                    06:e5:5f:8a:22:69:a1:5f:fd:f6:b2:af:bd:c1:21:
                    62:12:d4:6b:19:c0:a9:8e:37:04:b9:44:4b:09:93:
                    d5:2c:09:e4:46:a8:69:7d:fe:8b:b1:16:b4:30:7b:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:80:CD:31:DA:76:0A:EB:3E:F6:D1:CF:20:EF:03:53:ED:27:9C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f75db5a-bbb3-4c81-a0fd-e2046335d357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:5f:a4:c0:a3:af:36:78:71:b7:ad:64:f4:24:f4:89:80:
         a2:84:4f:35:b9:e4:a8:dd:96:72:39:33:1d:53:f8:93:80:a5:
         74:3e:3b:33:89:50:fa:dd:4e:a0:46:f9:d3:0f:fe:b8:d9:3e:
         6c:a6:e7:ef:d1:07:71:f8:53:b8:69:92:8c:d3:91:f3:a5:97:
         21:df:b3:56:73:bd:61:c3:77:d6:4c:20:a7:b9:6d:f9:e1:1e:
         1b:94:87:a2:67:0a:05:11:4a:a5:4b:db:2e:e7:9b:8f:50:2f:
         07:7f:b6:57:4b:53:0a:9e:a8:b9:b7:9b:e3:cb:62:94:53:f1:
         73:cc:24:2f:1d:d1:e7:ab:07:ae:88:4a:2b:2c:b3:22:e5:18:
         d6:82:9f:a3:18:0c:8d:48:b8:4a:77:7c:92:99:e1:46:ef:df:
         7b:e0:ca:84:2e:c9:b1:f3:35:21:62:84:95:f4:20:11:dc:99:
         64:a1:ed:18:bb:72:e0:14:0b:66:e8:76:56:31:9e:56:f0:2f:
         b0:c2:c4:01:6c:91:48:eb:b1:18:c2:4a:8c:25:08:3c:2e:0d:
         91:e9:3d:11:84:25:28:57:d7:a6:fa:5f:61:2f:07:bd:27:68:
         bc:09:f1:13:4b:a7:28:11:76:3c:b3:ef:48:96:e9:39:fa:7d:
         36:9a:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----