Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c865981-a92f-4b4a-8075-3b519e3f56bd.roa
File:                     3c865981-a92f-4b4a-8075-3b519e3f56bd.roa (raw, json)
Hash identifier:          LVQhTecfpjuS9TZzRcY+ki1h+wXTxtBWGbNK0vPkDOg=
Subject key identifier:   6B:BD:90:14:D4:57:59:61:F5:9D:63:39:75:DA:DA:35:E2:45:5A:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02D4E397CDBF057805B85BB5A2D4B6A332573337
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c865981-a92f-4b4a-8075-3b519e3f56bd.roa
Signing time:             Mon 20 Oct 2025 04:20:11 +0000
ROA not before:           Mon 20 Oct 2025 04:20:11 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d4:e3:97:cd:bf:05:78:05:b8:5b:b5:a2:d4:b6:a3:32:57:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:20:11 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=331be632895caa2fbf8594675d0af15f421fd54affdc58d5e0dd012b10b17049, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:d3:bb:f8:ff:1c:ea:96:d5:53:18:3b:7c:
                    c1:50:99:ec:44:f4:5c:56:03:54:c5:4a:68:bf:ad:
                    63:87:ec:37:a9:e5:21:3a:06:37:a7:01:31:a1:e7:
                    9b:67:5f:34:23:b6:b3:be:6c:ec:6e:45:91:b8:6c:
                    94:af:a3:ad:4a:16:84:92:8b:c9:f5:ee:63:20:71:
                    e8:91:3c:34:98:be:de:c6:64:c3:93:f0:c2:16:79:
                    5b:44:08:1d:6c:dc:d3:c9:82:c6:59:4f:3e:0a:d9:
                    09:7a:1a:4a:63:0f:3c:4e:73:11:41:1f:fc:8c:ab:
                    85:02:31:28:4f:ff:f1:b2:48:04:42:5e:26:64:5b:
                    34:f7:e5:19:45:1a:2b:1a:26:0c:5e:54:f0:9b:ed:
                    a8:05:6f:45:bb:67:64:76:28:83:fa:aa:08:58:f4:
                    e4:83:a7:fd:ec:be:eb:b6:03:08:78:eb:d5:ea:6f:
                    db:a0:46:87:52:5b:04:ae:97:c1:6b:e5:1b:c1:2d:
                    1e:30:32:1b:6b:60:4b:44:47:0f:0c:79:88:ad:c6:
                    ca:67:d8:b7:c3:3d:e4:82:c7:94:c9:eb:a2:19:b7:
                    94:a7:ed:9c:b4:f2:4d:ce:f9:4c:d4:c4:0e:2f:66:
                    57:8c:39:a9:72:00:01:8b:21:f2:fc:ef:0c:91:2b:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:90:14:D4:57:59:61:F5:9D:63:39:75:DA:DA:35:E2:45:5A:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c865981-a92f-4b4a-8075-3b519e3f56bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:a0:83:6f:79:eb:81:bd:c2:7d:e9:7d:a0:53:38:07:b4:
         f9:ab:69:6f:f5:3f:c4:36:53:10:0c:3e:53:0d:5f:25:e1:0d:
         81:68:45:8c:08:cb:71:7c:53:e7:77:fa:0e:89:26:d3:cc:c1:
         c4:87:09:06:93:02:b1:6d:7e:2c:97:4e:b0:a4:2c:ee:31:ad:
         60:8e:fa:01:dc:81:d3:e8:89:71:26:9a:a8:ca:cf:9d:e6:d1:
         d4:00:dd:39:57:c0:e2:e2:86:47:58:57:4f:c1:09:6a:13:87:
         25:ef:5d:54:24:7d:d7:6d:e3:3a:b3:1e:8d:ae:ea:4d:f2:93:
         aa:f0:10:9a:df:9f:70:9e:a2:ee:91:63:4a:ea:d8:b9:22:1c:
         39:0a:54:1f:ff:03:7e:99:0f:92:61:b7:6f:c9:ed:0c:12:46:
         9e:e9:2b:27:e6:fe:c1:3e:cb:65:2f:c4:69:2b:68:ae:e4:dd:
         6e:0c:4f:35:a3:cb:2e:88:06:bb:94:88:64:66:b6:21:b6:2a:
         02:7c:c2:6c:85:1b:d9:a9:77:34:08:7b:73:7f:df:69:d5:eb:
         9a:50:19:70:e1:2b:c3:d5:04:ff:0e:a9:e9:b2:f9:c8:9c:d9:
         88:25:9f:fe:ca:52:fa:20:27:c2:fc:64:48:53:c9:dc:a6:51:
         e7:ef:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----