Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1f088-a35d-43fa-9394-2baf02cc0e9a.roa
File:                     43e1f088-a35d-43fa-9394-2baf02cc0e9a.roa (raw, json)
Hash identifier:          nHu5YABfiRQ40HrsjhNHITU/4ToeAmd6BMtG26/wUCA=
Subject key identifier:   10:91:8B:5A:20:0E:44:02:70:8B:4F:B3:A9:99:CF:07:62:8D:B7:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       470272286138BE6D491E406A70E0FA5F87841C9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1f088-a35d-43fa-9394-2baf02cc0e9a.roa
Signing time:             Mon 20 Oct 2025 05:42:18 +0000
ROA not before:           Mon 20 Oct 2025 05:42:18 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:02:72:28:61:38:be:6d:49:1e:40:6a:70:e0:fa:5f:87:84:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:42:18 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=820e962d1dec3b0ab7af13256a36c5763a26efeba510ffdee4965eccc257d4bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:f0:7b:48:6d:8f:2e:e5:e8:ac:ca:2a:54:
                    48:49:8d:d4:74:e2:6c:e3:b2:98:f5:4d:04:d1:a3:
                    3c:0d:02:a9:04:af:a3:39:7b:2d:dd:f9:e2:bd:b1:
                    aa:08:52:66:c3:ac:ee:f6:2c:ba:c2:92:2b:35:52:
                    0b:25:dd:83:55:58:a2:cc:8c:5a:11:e3:1b:11:7a:
                    b8:53:5a:75:1b:21:e6:0a:4b:77:bd:ef:71:30:4b:
                    23:e9:13:86:ca:94:af:92:04:49:db:3e:00:d0:a0:
                    d5:b7:ed:8d:a2:e9:7d:ff:ec:bf:8c:1f:16:27:c0:
                    9c:e3:ba:df:0c:bc:d7:be:09:26:a4:b9:99:35:f4:
                    ac:80:8e:51:af:68:af:02:c9:9e:c9:ad:94:9c:a0:
                    8c:93:aa:75:35:52:a1:f2:7f:ed:b6:a2:8a:63:00:
                    88:10:9c:c7:9a:70:0c:4b:06:28:12:8a:d3:a4:a2:
                    58:ca:b9:b7:c3:01:85:1a:88:40:45:56:5e:9c:e2:
                    16:35:8c:b3:a2:20:66:44:0e:a0:ec:8e:b8:6e:3b:
                    56:0e:4b:ca:19:95:13:c4:0c:0e:b9:c8:54:b4:16:
                    aa:f0:bb:bc:4e:cd:4b:b6:bc:87:69:5c:ed:ad:9c:
                    95:b8:2e:b2:fc:da:ef:7a:54:36:4f:79:3d:7a:9f:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:8B:5A:20:0E:44:02:70:8B:4F:B3:A9:99:CF:07:62:8D:B7:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1f088-a35d-43fa-9394-2baf02cc0e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:e1:04:59:58:8e:b3:a7:c5:6f:cb:9a:54:09:89:1a:ab:
         f2:64:e0:03:31:02:4c:e8:c4:b4:d4:c3:5c:35:f1:58:cc:81:
         60:9d:e5:25:ef:0e:77:a6:83:3b:08:64:80:1c:34:76:89:a3:
         3f:fd:b4:cd:e4:1e:fd:df:7d:38:ac:eb:b7:30:49:c7:d9:a8:
         bf:81:69:dc:73:1c:3b:11:7d:14:2d:c4:79:cc:5b:cb:dd:54:
         cc:3e:23:2c:90:d5:5e:e2:0a:0c:64:39:3c:8d:a0:b4:e6:65:
         0f:7c:2d:22:7e:32:02:26:2c:dd:e3:78:e1:8e:fe:4c:f2:a0:
         14:7b:bd:e8:78:b8:2f:3e:3e:55:09:b0:fa:91:35:99:1a:45:
         91:07:93:a5:9f:91:22:2f:62:dc:5a:90:ae:f3:eb:b7:09:e0:
         e1:c4:23:cf:c7:04:03:60:e5:f3:c3:82:5c:13:95:47:fe:8e:
         d9:b4:2c:66:75:7c:87:ff:ad:3b:0d:48:d2:63:33:20:47:d8:
         43:3c:07:db:6f:52:8e:cb:ad:f4:27:c1:6d:78:73:5b:7d:9d:
         1b:eb:49:b5:71:bd:47:a1:03:42:60:9f:00:8b:e4:99:dc:26:
         2d:cd:d0:2a:9d:fd:b8:a9:e5:6e:12:d5:b7:21:5a:4a:1b:cf:
         19:01:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----