Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aafd252-64f8-40f8-a2b4-79502493dc4a.roa
File:                     3aafd252-64f8-40f8-a2b4-79502493dc4a.roa (raw, json)
Hash identifier:          S5WEVo1YZA9RQlj0m5hsyN3MY/dKCA8tc91Un2xchk0=
Subject key identifier:   5E:89:7F:DF:FD:1D:EB:FE:84:4B:AC:4B:87:45:94:7B:46:22:42:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       272E688A38E535145C8B9ABEDC8284CF82B675C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aafd252-64f8-40f8-a2b4-79502493dc4a.roa
Signing time:             Sun 19 Oct 2025 01:40:04 +0000
ROA not before:           Sun 19 Oct 2025 01:40:04 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:68:8a:38:e5:35:14:5c:8b:9a:be:dc:82:84:cf:82:b6:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:40:04 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=6006b3f52eea790a0c5d4874133e26dc99005194cbcd4855f443986179db6777, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:eb:5c:ed:1a:61:35:62:f7:da:be:a7:75:
                    68:74:6f:90:9e:83:d9:2a:81:ce:14:06:22:68:df:
                    f8:35:16:d9:d9:a9:58:b4:fa:c8:31:32:99:c6:b4:
                    94:e4:5d:58:f2:1e:fd:47:27:e5:60:57:4a:d6:59:
                    50:58:c8:e0:7e:ad:4f:3f:c0:0e:3e:e6:9c:68:ad:
                    71:43:99:b1:95:43:39:9e:43:8c:3e:a7:d8:31:ad:
                    79:b6:b5:86:9d:19:0e:c9:6e:ee:df:dc:32:a1:ec:
                    11:01:55:81:b0:7e:35:d4:71:f4:75:80:83:dd:a3:
                    c1:a3:85:63:89:3a:67:86:8e:79:3a:8a:0c:04:b5:
                    a0:49:77:0b:d8:97:30:bb:03:a7:ba:ad:c1:fe:c9:
                    42:21:2e:0f:59:e8:46:f1:4c:36:60:3e:fc:83:b7:
                    c6:d6:a8:a5:40:34:29:11:08:75:d5:de:51:c8:2f:
                    9d:d9:7d:eb:ea:b7:cc:de:99:4a:fa:19:49:09:25:
                    f3:34:0c:9e:7f:22:45:db:13:f2:17:7b:bc:12:cd:
                    38:7b:bf:9a:8d:38:61:a6:14:03:2e:2b:19:0d:b5:
                    f6:4c:31:90:30:cb:81:43:6b:f3:4e:7a:da:23:63:
                    76:10:16:98:57:24:b7:dc:db:9b:65:b8:c1:2d:a5:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:89:7F:DF:FD:1D:EB:FE:84:4B:AC:4B:87:45:94:7B:46:22:42:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aafd252-64f8-40f8-a2b4-79502493dc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:fa:6c:ab:df:e0:ef:98:77:fc:42:d3:97:af:ae:fe:96:
         2e:31:f8:4b:96:ad:21:4a:f2:db:ec:9b:5d:16:95:6b:f9:b7:
         1a:f9:72:19:e5:36:01:c6:26:34:e6:d8:a3:eb:3f:65:3a:4a:
         c2:c8:50:ac:7f:a7:4a:2c:3b:ee:22:f1:0d:9a:7f:9e:7c:6e:
         a6:06:c2:97:f9:0d:80:99:d9:a8:01:26:8b:f2:6d:dd:c3:b1:
         d8:4e:14:4b:a1:f2:13:bb:e4:c5:c3:88:90:9f:40:a5:5f:73:
         af:ab:08:e0:15:8b:26:bd:6e:a7:4b:53:ca:94:b1:94:93:d7:
         f1:9b:c2:ba:5b:d1:10:5d:02:4a:1f:db:23:b5:02:ba:75:3e:
         cb:48:f0:27:3f:6d:ef:fe:e2:25:74:52:22:dd:48:3c:5f:56:
         cd:a6:0a:cd:6f:01:d1:46:1c:da:a0:44:0a:65:94:0d:6a:05:
         69:fd:39:aa:9e:e9:ba:61:e0:5c:62:1b:0a:9c:4d:a4:0e:e7:
         e1:ab:57:9e:f1:ef:0a:c3:47:35:fd:d1:bc:13:cb:db:84:8a:
         43:d0:c0:9b:2e:2a:bb:cb:20:df:e5:85:55:73:9f:8e:20:33:
         3e:2f:a8:65:5b:48:3a:12:7f:70:9e:2a:ec:e5:6b:1e:78:ee:
         7f:c9:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----