Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a40fe-d199-4109-a539-66ff9f9db707.roa
File:                     429a40fe-d199-4109-a539-66ff9f9db707.roa (raw, json)
Hash identifier:          a1eYMQabpNBbio2WWzqqXSyJZ+RD86prlTmhx5xqrtw=
Subject key identifier:   DF:B8:66:0A:F4:5B:C5:54:B8:A2:27:C5:1F:29:A9:FE:4C:76:E7:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27DCAB47B56846740B2C3EF4DA856A85E6620D2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a40fe-d199-4109-a539-66ff9f9db707.roa
Signing time:             Mon 20 Oct 2025 01:30:19 +0000
ROA not before:           Mon 20 Oct 2025 01:30:19 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dc:ab:47:b5:68:46:74:0b:2c:3e:f4:da:85:6a:85:e6:62:0d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:30:19 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=b4c517054fa48553d7c66834364e0cb31263267d5e0e9960f9b73dbea05fda0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:1e:4b:6f:2b:da:59:80:82:88:4c:15:ab:
                    08:2b:98:de:e3:9e:b6:7d:c0:97:a8:e8:44:9c:d1:
                    8b:de:68:07:c6:96:b8:18:52:0f:ef:eb:c0:f6:e6:
                    d8:2a:6c:df:df:43:94:1c:30:7e:5f:f2:a6:83:3a:
                    e1:35:70:0a:87:52:bc:65:06:f7:19:06:31:71:8e:
                    78:05:28:3f:a8:32:51:8e:2b:22:91:90:70:13:a1:
                    2d:40:2b:66:2d:64:68:2c:b4:d2:9b:b7:fa:6c:bc:
                    e8:9f:6e:46:2b:d6:08:9c:9f:ee:65:63:05:75:bb:
                    bb:02:ee:f4:70:ac:92:0c:c3:c6:5f:a8:59:a6:2c:
                    c9:a8:85:f2:d5:a0:ff:f4:53:87:4a:0e:b8:8c:21:
                    b1:e2:3f:e1:be:e9:f3:4f:d4:fa:d7:4c:ab:24:6c:
                    77:c7:5c:0b:83:3e:4d:f1:6c:d9:18:7e:85:81:2d:
                    54:8f:d0:dd:c8:d5:a0:00:f9:1b:d0:56:b0:11:54:
                    b1:0f:5f:4c:15:ff:c5:3c:a8:ee:9c:dc:72:69:d8:
                    96:5d:76:4b:22:a7:2b:bb:8e:96:ec:f1:12:e4:fa:
                    eb:76:0c:7f:99:b8:27:29:ca:62:88:66:e8:28:10:
                    49:97:ea:be:d7:de:96:49:fa:df:13:f3:f7:8d:cf:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B8:66:0A:F4:5B:C5:54:B8:A2:27:C5:1F:29:A9:FE:4C:76:E7:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a40fe-d199-4109-a539-66ff9f9db707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:92:b7:ee:ba:56:18:ae:f4:b5:9c:91:98:66:b6:57:2d:cb:
         4a:d0:e5:4c:d2:1c:f8:cf:e9:70:f7:ee:ac:6f:a4:6a:6e:ee:
         af:3e:d4:ac:3c:9f:e6:db:f2:5b:e7:3a:c9:9b:cf:05:37:e7:
         91:f5:1f:6c:9c:24:97:f9:a3:36:aa:05:65:91:d5:17:42:69:
         6d:c1:81:d4:84:92:dd:59:b7:b5:b5:8f:ca:dc:a2:fc:d2:16:
         82:d9:23:f4:e0:dc:9f:8e:64:84:a9:96:cf:d9:14:ab:8e:ea:
         6a:67:07:8f:ee:70:fa:f4:16:f5:ce:95:a7:bf:b6:39:28:20:
         80:d2:de:dd:df:9f:6e:60:a8:6d:59:06:1b:44:dd:6b:2e:12:
         c2:fe:c3:08:d3:c2:b7:86:62:34:98:dd:ab:70:e3:be:f6:f3:
         75:e2:cd:f6:e6:29:97:37:28:12:0a:af:fc:3c:4b:90:19:c1:
         6e:73:25:7b:f3:82:4f:7e:ad:bd:e4:d6:f3:3f:41:c1:5e:ae:
         e6:e0:92:c1:0f:8b:60:49:36:e5:65:60:40:d0:39:f1:e2:8b:
         cc:bc:2f:30:db:f3:c9:a7:23:5e:db:3c:e1:3a:ac:7b:62:dc:
         de:90:d3:2e:2d:d3:c8:43:eb:4f:67:1a:20:3e:ea:6e:ab:e8:
         dc:92:59:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----