Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35643d61-52dc-4644-88d2-76a4993fa651.roa
File:                     35643d61-52dc-4644-88d2-76a4993fa651.roa (raw, json)
Hash identifier:          NKVEE6ouVhUd9g+fUBr7h9iobgVAMItvfbXt/YbFlR8=
Subject key identifier:   61:C1:02:AA:C2:EF:24:E9:2E:7D:2D:EE:AB:00:19:B4:8B:06:13:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       775CF4688102754852396194643A4B3C47C9C037
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35643d61-52dc-4644-88d2-76a4993fa651.roa
Signing time:             Mon 20 Oct 2025 01:40:48 +0000
ROA not before:           Mon 20 Oct 2025 01:40:48 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5c:f4:68:81:02:75:48:52:39:61:94:64:3a:4b:3c:47:c9:c0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:40:48 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=698097d92e19db579980afaa02768e5101cd80c4e6c314a56d03a695e6897774, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:bc:74:22:0e:b1:3d:bf:e0:22:cc:74:f1:
                    68:5c:bb:eb:1c:d4:7d:8a:18:c1:f4:e0:0f:30:f3:
                    d2:1b:a8:2c:15:c9:4a:57:fa:d5:ff:43:16:aa:f0:
                    df:1b:1a:03:a2:4a:bc:ff:39:f2:3a:26:c4:a9:16:
                    24:05:52:10:3a:ce:db:dc:8d:35:12:54:82:9e:f7:
                    ea:d2:34:c0:3b:cd:95:03:be:dc:2e:57:36:80:c9:
                    f0:16:6d:e0:c3:af:06:34:0d:bf:a9:c8:68:e7:ce:
                    e0:3f:b1:f4:24:c1:9d:de:d0:0d:a2:48:6e:08:a1:
                    f9:b5:d3:3c:58:97:25:6e:73:b8:23:c8:bc:37:e9:
                    03:76:4f:e6:d8:8c:4b:ef:57:23:8b:13:22:cf:7b:
                    11:08:d4:7e:9e:12:27:93:a3:eb:83:12:0b:2e:e3:
                    a1:11:78:0a:49:dc:bc:7b:bd:58:58:c2:14:50:a6:
                    6f:cb:e4:1c:2a:85:73:2b:3d:ff:cd:e1:fb:d1:73:
                    3c:f8:c2:7e:2f:03:96:4b:55:aa:cc:99:5e:84:db:
                    ef:ad:bc:03:8a:68:fd:42:5d:b6:29:14:d4:60:47:
                    eb:d1:4f:03:ca:66:50:3a:bc:cc:41:54:72:20:bf:
                    65:a6:25:2a:f4:64:63:db:d0:82:aa:2b:6e:b8:4a:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:02:AA:C2:EF:24:E9:2E:7D:2D:EE:AB:00:19:B4:8B:06:13:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35643d61-52dc-4644-88d2-76a4993fa651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:af:80:a5:82:8c:ae:c4:1c:3f:73:81:d6:fd:a2:22:82:7a:
         20:df:fa:17:00:1d:14:d5:15:a4:6a:36:69:98:c6:98:2b:fc:
         01:9b:0f:02:a5:df:d1:63:1e:61:a3:05:80:b4:7a:db:4c:8f:
         22:c3:17:86:0e:75:94:97:e2:7a:53:41:bb:8a:ce:bd:46:ed:
         66:71:fd:bb:fc:a2:00:59:f4:5d:7f:a0:a5:24:e7:21:65:be:
         34:52:cb:8b:5f:a1:fc:6e:0d:89:0f:45:0c:15:45:bb:b0:15:
         b7:36:90:29:34:66:46:52:d1:5b:d5:47:33:1a:d0:06:ae:b6:
         16:a9:82:b1:0c:21:a7:93:aa:cd:c1:50:7f:34:64:39:0b:56:
         55:7f:7b:38:81:82:f1:56:15:4e:ec:d4:ea:17:c5:0c:db:7a:
         13:e1:13:4b:9c:87:1a:a6:d6:85:b9:e4:7c:49:c6:6b:7c:ce:
         cf:99:ee:d0:3e:01:a1:03:ca:29:19:e2:87:08:25:10:fa:84:
         fb:e8:c9:ff:73:1c:8c:4f:97:39:e4:3e:1b:db:11:de:e0:66:
         eb:2f:3c:3f:bc:26:1e:ca:6e:11:1a:8d:c7:b2:09:63:fc:42:
         ca:01:cf:45:46:f0:1c:c4:fd:51:ee:ef:d8:3b:e2:04:94:8e:
         ae:ea:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----