Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4023419e-a5eb-46ad-b027-e202c72f5ffc.roa
File:                     4023419e-a5eb-46ad-b027-e202c72f5ffc.roa (raw, json)
Hash identifier:          7+mpLNgBkbKel4itTLv4VGPJAlpFDp4NybnLpRNdkDs=
Subject key identifier:   CD:BB:F2:D3:D2:90:CA:1B:E0:0D:0A:63:D4:78:D4:04:69:F7:F8:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       704DE9D9893AC3979C225D60E8F3A58198AFCD21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4023419e-a5eb-46ad-b027-e202c72f5ffc.roa
Signing time:             Sun 19 Oct 2025 02:11:00 +0000
ROA not before:           Sun 19 Oct 2025 02:11:00 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4d:e9:d9:89:3a:c3:97:9c:22:5d:60:e8:f3:a5:81:98:af:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:11:00 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=9086b683a2198c7c80827faef16ed75c50e0d28dde46a77176ff519355291729, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:b7:f2:50:e7:6f:00:b7:42:ad:ce:9c:11:
                    9c:d8:c7:7b:dc:4b:54:96:c7:4d:ce:b2:e4:9c:81:
                    5c:62:ce:33:65:eb:e2:7a:48:31:4b:ac:a5:cd:99:
                    c9:11:01:11:3e:4f:dc:74:1c:a3:a9:5e:99:a2:fd:
                    0d:bb:14:46:1f:b0:3c:41:8b:9a:4d:8e:3c:0b:a4:
                    d6:f8:65:d2:98:d4:45:8d:c2:e0:8d:0c:c8:c3:3c:
                    60:af:fc:23:0c:4e:d7:23:29:e5:28:e5:60:6a:20:
                    9d:4f:46:32:2b:10:3e:73:27:9a:1c:ea:09:81:f8:
                    db:0a:e3:55:df:ca:0e:16:b9:e8:b8:f2:a1:bc:b2:
                    c9:52:25:56:91:f6:c1:5b:a2:5e:9f:6d:13:43:6f:
                    c8:ee:17:e3:66:74:e2:69:55:19:67:17:7e:7d:96:
                    6b:70:de:00:fd:33:77:21:1f:e5:a6:f3:36:9d:31:
                    41:1d:4f:69:c2:fc:6a:03:20:1f:e5:30:95:02:2c:
                    a9:fa:17:47:94:e9:3c:30:55:d8:13:90:d1:fc:53:
                    ab:5a:06:00:53:90:6f:da:93:3c:a1:eb:a5:01:47:
                    29:a8:4a:0b:e6:4e:ef:b3:bf:06:e7:19:ff:b5:ef:
                    79:91:89:f6:84:87:34:2d:d2:06:ce:3e:09:b9:15:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:F2:D3:D2:90:CA:1B:E0:0D:0A:63:D4:78:D4:04:69:F7:F8:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4023419e-a5eb-46ad-b027-e202c72f5ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:08:02:d4:a0:29:49:1c:36:12:66:7a:0b:69:27:a4:58:
         ca:0e:92:fb:a3:2c:55:75:73:d7:95:40:18:03:6a:d6:92:26:
         0e:8f:aa:24:4d:ae:26:0a:95:e8:8f:65:41:ac:d2:58:37:12:
         53:4d:8b:d0:10:2d:b6:f5:35:9a:2b:1c:ce:5f:15:ac:71:ba:
         17:c1:8d:21:eb:05:3d:1a:1f:38:3c:1e:cd:a3:c9:d3:eb:5b:
         d9:23:f3:7d:89:2a:a6:30:01:83:e1:34:19:b6:7b:38:35:8e:
         b3:e0:1d:8b:f3:08:d3:2c:15:2a:0d:02:56:f1:2d:c3:05:9f:
         f0:4a:59:fd:47:a0:e9:50:b6:ee:c0:3c:00:9a:9b:cd:1e:ed:
         80:09:33:26:2e:ff:7f:82:1e:7b:17:52:59:93:5d:aa:2f:35:
         d4:3b:87:0f:22:55:2e:5d:0d:f9:cb:1a:c5:15:40:4e:20:c5:
         2e:43:d0:65:47:fd:0f:fa:f7:ad:72:af:1d:ff:98:c2:06:c1:
         24:02:bd:6b:96:17:0e:f9:d1:3d:20:da:3a:ec:6e:96:ad:ed:
         93:db:ee:e7:82:21:5d:54:62:3b:c1:7c:06:e6:e3:69:72:91:
         01:f2:4b:25:a7:f8:2d:32:d8:f7:6b:76:35:e9:a7:c9:58:73:
         43:76:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----