Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d98f692-6f32-4fb5-9435-d9e5a9e555bb.roa
File:                     1d98f692-6f32-4fb5-9435-d9e5a9e555bb.roa (raw, json)
Hash identifier:          vt76E3WXnGOObQlT3EzIe2yufS3MqUi+Mf+nZ4lZloM=
Subject key identifier:   12:B2:64:B6:D5:9C:3B:3F:B1:29:74:66:15:40:6D:D2:0F:DA:76:5A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D198C27B0E154A8A29AD88E2AB343690E2045F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d98f692-6f32-4fb5-9435-d9e5a9e555bb.roa
Signing time:             Mon 20 Oct 2025 02:10:03 +0000
ROA not before:           Mon 20 Oct 2025 02:10:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:19:8c:27:b0:e1:54:a8:a2:9a:d8:8e:2a:b3:43:69:0e:20:45:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:10:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=d0ad354752db1bbd9bd4ff236f5247cf751da708725db1f38320e9f927085afd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:4c:3a:08:7a:f0:64:1f:a4:9a:5a:98:6f:
                    95:44:ea:d9:97:9a:8e:46:36:d2:13:ec:94:a5:0e:
                    a5:b8:8b:b3:f1:cb:6e:e7:b1:8f:4e:1e:b9:08:aa:
                    94:e9:d9:14:09:4e:57:2b:92:5c:2c:d2:1b:81:b2:
                    ee:5f:56:25:f9:2e:6d:b4:09:53:9f:5c:21:1b:87:
                    04:9f:72:46:16:c2:25:f9:d9:e5:a9:73:c4:14:dd:
                    12:d7:b6:d8:71:7d:e5:11:cf:71:07:c4:c8:59:60:
                    6c:38:9d:ee:14:d3:68:3d:9d:a9:d3:8c:44:f7:ac:
                    be:ee:2f:23:52:62:25:d9:90:33:0e:d9:d6:5e:0a:
                    56:dd:74:d7:29:17:32:8d:18:15:8d:16:13:97:91:
                    13:20:57:c9:51:a6:eb:db:45:c7:e2:57:a9:52:16:
                    ca:40:29:50:ee:2b:d6:42:3e:35:60:7e:4c:ba:ca:
                    d2:fa:51:b4:f8:b1:3a:26:b7:4b:c0:f5:45:26:4d:
                    25:f0:c3:88:4d:52:e8:2d:a7:a5:89:ff:a9:7f:93:
                    6f:fb:bc:81:da:1e:14:80:96:b1:fd:e3:e1:fe:3e:
                    e7:b3:70:a0:86:f0:8a:03:12:31:ee:5a:5e:5c:89:
                    3f:55:b9:32:54:ce:9c:29:bc:2b:e0:f5:b0:00:ce:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:64:B6:D5:9C:3B:3F:B1:29:74:66:15:40:6D:D2:0F:DA:76:5A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d98f692-6f32-4fb5-9435-d9e5a9e555bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:c2:7e:54:ca:2b:71:d1:05:a0:c4:80:a4:83:df:1d:1f:
         31:4a:5b:e3:2b:1d:f9:64:6e:4e:1c:bf:3e:59:b5:a5:04:cf:
         8c:80:6b:99:5b:54:40:c8:0b:70:79:3f:84:5c:20:90:73:ad:
         77:0d:b9:25:6f:63:a0:d3:25:9e:80:c7:a5:09:4d:13:11:41:
         d0:1b:9b:15:c0:b9:fe:ce:db:ee:57:3e:5d:98:5e:64:ef:96:
         b0:9c:c8:0f:04:8e:3c:f4:41:d3:47:f8:73:54:ec:2b:a5:cc:
         66:ff:1b:92:26:16:b0:8e:13:13:ef:f8:4e:3e:a5:3b:dd:ac:
         f6:5f:47:dc:b6:f7:e2:be:90:f0:28:d2:3d:c6:98:59:6f:ef:
         f7:17:28:cb:a7:b1:52:0d:dd:fc:c5:51:9a:a0:0a:8e:e6:e7:
         8c:72:04:19:a7:da:f1:fe:13:b9:ef:17:e3:fb:c8:3e:8d:58:
         62:a4:29:da:b6:21:7d:be:dd:8b:8f:c9:c6:6a:1f:71:e2:dc:
         55:29:98:fc:30:24:6d:65:0a:a5:9e:bc:1d:1e:ad:24:d3:43:
         4b:39:32:ac:73:28:00:d5:5e:72:fc:b5:7f:85:f5:0c:1a:82:
         23:56:7c:ef:59:52:85:c2:e9:ce:d5:ea:76:53:b8:a0:da:f0:
         a9:9d:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----