Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1969c789-b0b2-4ad7-8755-e3ec081fd5b1.roa
File:                     1969c789-b0b2-4ad7-8755-e3ec081fd5b1.roa (raw, json)
Hash identifier:          T8ed43Dgl+9ergy4j7hwh5tOFbtippSewWmDN9N52PM=
Subject key identifier:   FB:BC:92:60:4C:AA:1B:4A:51:85:7E:4B:74:AD:D2:8A:55:A1:8F:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35F634A1326A9BCBA2087155A8EC08BEF7159A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1969c789-b0b2-4ad7-8755-e3ec081fd5b1.roa
Signing time:             Sun 19 Oct 2025 00:11:20 +0000
ROA not before:           Sun 19 Oct 2025 00:11:20 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f6:34:a1:32:6a:9b:cb:a2:08:71:55:a8:ec:08:be:f7:15:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:11:20 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=b37cf2122a6507df8f22d2eaa7bd498906961ba9fd1fb6a7749c5b29a9d76bc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:20:09:83:15:a9:5e:f4:65:9f:15:f5:70:
                    2e:b5:ac:2a:18:fc:be:05:f5:4d:08:74:c0:4c:4f:
                    30:96:77:78:b6:3a:5a:eb:9b:31:e7:f7:5f:09:7e:
                    fa:64:b0:08:9d:7d:f8:e8:ab:52:cd:6d:29:91:47:
                    47:eb:5c:35:d6:62:2b:75:42:c2:56:32:33:40:72:
                    a3:4a:f8:e0:d1:af:d4:83:67:86:f2:85:c3:9d:74:
                    9d:f4:bd:8c:05:98:1c:e5:c7:b1:f5:d8:fe:68:2c:
                    55:5a:01:c9:47:7a:eb:25:f0:27:cd:4b:64:57:7b:
                    22:4e:9c:de:a7:73:d4:5d:6d:5a:40:ac:2b:87:b0:
                    bd:18:56:78:17:54:fc:41:e4:ff:15:f0:e2:c4:7c:
                    c1:68:e9:65:a0:f9:21:69:9f:c7:09:52:56:84:64:
                    2b:54:41:83:09:a7:62:0e:c5:e4:64:fd:01:c1:6a:
                    41:89:cb:2a:95:74:7c:e0:31:c6:75:94:09:35:db:
                    82:1b:26:a4:8f:f6:3d:5d:c8:3d:31:ef:38:e4:a7:
                    1a:c7:11:e4:69:ab:8e:74:d8:91:84:84:36:b4:b3:
                    a3:fd:17:75:9d:a0:d6:10:dc:c6:fb:9d:72:7e:67:
                    c8:09:5e:8d:8b:41:7a:26:4d:e1:5d:5a:e4:4d:9c:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:92:60:4C:AA:1B:4A:51:85:7E:4B:74:AD:D2:8A:55:A1:8F:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1969c789-b0b2-4ad7-8755-e3ec081fd5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:0d:7d:8b:63:25:e1:36:75:65:b4:97:6b:0d:f6:bf:ae:
         d8:0d:f4:30:92:b2:8b:b6:fc:50:2c:c1:9e:ae:2c:73:f0:fe:
         4f:ae:5a:1f:dd:f1:76:01:9d:32:9d:70:d5:18:8b:d4:2a:f7:
         78:73:04:cd:4d:c3:97:16:a8:76:a1:e4:77:d6:76:55:a2:63:
         c7:1a:a2:59:61:e7:b5:1d:9d:31:ab:69:de:22:00:17:05:88:
         55:4e:08:36:1c:d3:85:33:5e:fd:53:58:a8:9f:ff:59:c4:f0:
         c6:5d:07:72:69:b8:f9:bd:7b:39:65:d2:16:45:2a:2f:f5:3d:
         7f:ec:f7:da:42:87:41:91:d5:35:d0:61:f1:20:8d:89:56:14:
         72:58:82:91:7f:63:2b:d7:9e:1c:be:46:37:b8:25:fd:54:a0:
         e7:2d:ff:c9:c6:71:ba:d2:c4:b4:e7:73:02:28:21:ca:43:ca:
         67:1b:ab:8c:81:73:1a:11:18:92:7f:4c:5f:22:23:7e:b4:ed:
         13:3a:d7:2f:96:fd:48:b2:3d:bc:d1:69:a5:29:4a:a4:da:52:
         37:6a:f5:c3:9d:23:e8:18:6d:87:9d:cc:a4:11:18:17:5d:f8:
         1f:54:33:2d:71:61:0b:55:f5:86:e9:10:e3:67:0c:26:5d:e0:
         87:db:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----