Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/358268b6-ed11-4656-a26a-64e74b2b553f.roa
File:                     358268b6-ed11-4656-a26a-64e74b2b553f.roa (raw, json)
Hash identifier:          2BcCbvQygXnkGTtFADFk0QvGfFdSnfxBbbpCdQOf0d4=
Subject key identifier:   DA:AC:E5:64:30:43:84:88:92:7C:DB:5E:69:4A:46:B9:36:FA:3F:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EE5CDC6AC351B5D908AD02A54F34BCBB0DBF32C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/358268b6-ed11-4656-a26a-64e74b2b553f.roa
Signing time:             Sun 19 Oct 2025 03:10:57 +0000
ROA not before:           Sun 19 Oct 2025 03:10:57 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e5:cd:c6:ac:35:1b:5d:90:8a:d0:2a:54:f3:4b:cb:b0:db:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:10:57 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=99fc400c9ddec2675df633339a0d8f0f56223e5b3fa1bb4a9f28dae75a557f36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:61:fb:37:7e:ac:04:cd:70:98:10:fe:d3:
                    9f:b2:c3:2d:4d:b2:b7:27:e5:6d:34:8b:18:bd:e5:
                    f7:4e:9d:8d:15:c3:7d:a9:65:3f:4a:0e:32:5e:ff:
                    57:4b:72:dd:e2:d5:55:04:10:25:59:f9:99:54:9a:
                    7c:2b:db:3f:54:62:10:47:47:53:85:50:c4:f6:37:
                    45:b8:a1:66:ad:6d:60:78:0c:1c:1c:a2:83:e3:1e:
                    17:91:2a:d9:7b:45:22:7f:1d:48:64:28:4e:18:9d:
                    69:7f:3c:36:1d:f0:dd:19:62:3d:82:54:b9:f6:85:
                    d2:b5:eb:16:b4:08:55:7f:22:b3:72:7c:07:6b:95:
                    56:ed:12:3b:a8:78:e0:13:d9:78:4d:32:ca:11:6b:
                    16:44:0e:27:8a:86:2f:b5:8e:8d:6f:c7:1d:6f:cd:
                    ae:58:00:9b:b9:86:50:3a:3e:d6:d1:d8:7a:20:8d:
                    b2:dc:d7:a4:70:3c:00:5f:ff:10:1b:ed:40:5b:fe:
                    e7:5d:25:65:ac:8a:87:31:e1:c3:37:69:38:5a:02:
                    3f:42:66:ef:3c:4d:91:24:14:ea:24:d2:b4:7e:e4:
                    b8:c6:e1:20:11:ab:7d:a8:f0:ea:50:c8:d7:1d:12:
                    0b:9e:d1:53:d7:23:3b:ce:cc:03:d9:87:db:97:aa:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:E5:64:30:43:84:88:92:7C:DB:5E:69:4A:46:B9:36:FA:3F:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/358268b6-ed11-4656-a26a-64e74b2b553f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:65:aa:a3:0e:f8:bd:eb:b2:75:cc:01:fe:68:c0:5e:2f:
         a5:6c:f4:60:98:d4:2d:36:90:4a:78:1d:03:73:07:9a:39:27:
         3b:95:d9:c6:46:cd:1c:79:db:35:6b:58:7f:b4:18:b1:f9:28:
         c9:e0:aa:99:44:5c:ad:2a:94:4d:9c:f6:b0:67:af:1a:18:65:
         69:d2:13:26:52:6a:94:38:bf:fe:95:e6:47:00:a8:02:34:e5:
         8b:5f:e4:37:54:e4:46:45:2f:8b:18:9b:97:14:0c:10:cc:d6:
         af:f3:f3:ae:18:9c:f6:ed:d0:88:b6:df:c4:b0:98:50:e8:94:
         1e:d5:97:d5:73:c5:03:fc:1b:41:e5:09:75:1d:4e:c7:57:50:
         18:d9:f6:1a:5a:95:67:3e:d2:c6:29:ab:ab:c3:1e:bd:b1:b5:
         2f:09:c5:4c:af:cd:a1:ba:b9:a0:04:d9:23:eb:38:39:28:eb:
         62:81:20:2f:25:83:8e:8d:d6:e3:82:80:ba:81:cd:30:ce:07:
         91:27:59:89:0b:c9:a2:7c:3f:08:8e:3d:e9:b6:f6:f4:ce:7d:
         a6:b4:d9:f0:e9:d5:7f:4c:90:d3:73:fc:ce:ff:5f:eb:e2:18:
         31:e6:f0:16:d3:34:d6:88:cc:50:94:4c:77:ce:24:3a:fb:d2:
         4d:7a:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----