Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b46c875-89fb-4811-9d86-3c6105dd8bfc.roa
File:                     3b46c875-89fb-4811-9d86-3c6105dd8bfc.roa (raw, json)
Hash identifier:          vlB+2P446xzyWBYSMNYA0Pi43UArdNprN648265y65g=
Subject key identifier:   ED:70:02:FB:DB:43:4D:12:34:63:8B:C2:AA:87:1A:77:C6:30:F1:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       276D58D1CA94FCC60F90EB4EDE3F6A3B23261F0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b46c875-89fb-4811-9d86-3c6105dd8bfc.roa
Signing time:             Mon 20 Oct 2025 01:11:09 +0000
ROA not before:           Mon 20 Oct 2025 01:11:09 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6d:58:d1:ca:94:fc:c6:0f:90:eb:4e:de:3f:6a:3b:23:26:1f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:11:09 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=96f7442ce2fcb6459ebe72404f7cdb0b14d1f88428fa9bc52b3e5f3ff0411aa2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:3c:2a:40:58:37:ba:6d:e7:f8:d1:32:9c:
                    d5:c2:2a:e1:ce:55:02:c9:a6:1c:d3:86:4c:d0:f9:
                    26:33:48:b9:da:25:09:c0:1c:e6:68:8c:b6:f5:92:
                    fd:61:48:71:f2:95:ff:6c:a5:40:51:e5:e3:cd:98:
                    27:3d:3e:a8:da:3a:a8:6a:7b:2b:c6:fd:bf:60:a3:
                    80:f4:59:12:84:71:06:50:13:90:60:16:56:89:76:
                    bf:db:69:58:f0:15:f6:82:dd:ac:c9:c6:05:ad:cb:
                    c4:03:66:d0:74:dc:6a:5b:a3:9d:18:03:5a:22:4d:
                    94:e0:62:7f:a9:ae:3a:2c:d3:67:53:3f:ef:b5:c5:
                    6e:ef:30:c2:85:5b:18:80:e5:ad:d9:b6:c8:43:02:
                    cc:d4:3f:57:bf:08:4d:11:0b:77:7e:59:fe:ab:ba:
                    ae:74:25:20:df:30:13:bc:80:4b:56:bc:9d:f8:19:
                    06:33:8d:0d:0a:3d:b9:f4:e6:39:3f:11:af:28:a8:
                    9e:6d:51:cc:2e:b3:9a:b9:72:9c:30:40:23:74:a2:
                    e9:20:bc:5a:4b:bb:31:92:a7:cb:70:eb:b1:64:12:
                    43:c2:0e:87:d1:1f:a7:33:eb:8d:16:21:00:06:b1:
                    e8:03:f5:9f:a7:b1:8f:ae:52:f1:21:46:cc:5b:fd:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:02:FB:DB:43:4D:12:34:63:8B:C2:AA:87:1A:77:C6:30:F1:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b46c875-89fb-4811-9d86-3c6105dd8bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:8a:69:1f:30:da:4f:c5:d3:d5:ae:b0:9d:84:6c:dd:36:4e:
         c8:d0:db:83:a2:eb:9d:fa:2b:31:3a:63:1e:fb:5a:d3:65:ef:
         35:e5:55:3d:3c:cf:85:60:62:2c:c9:7b:af:8b:99:7b:de:82:
         bc:48:5b:a5:ce:1b:95:f3:bf:f8:6c:e7:8f:cd:78:50:e4:03:
         a5:56:63:44:ba:35:2f:47:ce:1d:85:a7:2c:fa:55:ce:bf:67:
         4c:db:ff:d8:21:7e:e2:2a:ed:08:da:2c:e9:0b:15:24:d4:00:
         02:5a:d8:1d:e8:7f:e6:ee:7a:08:49:e6:cd:0a:37:a7:7b:24:
         93:9b:2f:60:e3:23:d7:89:55:82:71:b2:71:e0:e6:19:90:13:
         35:9b:0e:33:6f:37:a9:32:a8:69:d5:b9:f1:f6:4e:75:70:ae:
         e7:b0:2d:7e:7b:15:5f:e8:f6:47:83:ec:1c:42:2e:85:d9:56:
         bd:67:7c:20:5f:40:2e:67:29:55:02:d4:15:8c:cb:ff:52:57:
         4b:94:df:3e:15:7b:9e:f8:4d:40:fb:31:1b:89:2c:bd:3b:2b:
         c2:cd:8d:26:64:38:5e:32:12:e6:73:fc:02:56:20:6a:7d:0e:
         f6:b6:e1:2f:28:c2:be:c6:64:bd:fc:ee:55:58:17:ac:d9:4a:
         14:e9:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----