Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ed8e2b-f1d0-4c43-bc64-27ea32d4d108.roa
File:                     44ed8e2b-f1d0-4c43-bc64-27ea32d4d108.roa (raw, json)
Hash identifier:          k5fx+MRCA5w760ZRs5a5vBf95Xv20JrZnYU5ddxDx80=
Subject key identifier:   CA:1E:BF:A9:17:D4:B4:50:01:47:56:2C:1A:44:AB:6B:3C:0F:4A:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79D550F9EA70FB3E8C200683E6D78541353E6859
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ed8e2b-f1d0-4c43-bc64-27ea32d4d108.roa
Signing time:             Mon 20 Oct 2025 06:00:59 +0000
ROA not before:           Mon 20 Oct 2025 06:00:59 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d5:50:f9:ea:70:fb:3e:8c:20:06:83:e6:d7:85:41:35:3e:68:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:00:59 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=81c5352b65f01318f9dc4f4fd0bbd8453550607ee67eaf59590cbcd02e92bb53, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:95:77:97:af:dc:71:eb:29:00:c4:c0:1f:
                    f9:58:46:0a:cd:06:66:70:84:8e:1f:b2:9f:76:20:
                    b2:69:94:89:af:32:41:03:de:d5:be:08:00:db:9a:
                    ff:a1:74:00:63:cc:9d:34:bb:98:65:65:d7:b0:52:
                    bb:d5:3d:5f:f0:e2:72:52:8f:b1:b7:ac:85:4b:b5:
                    66:36:cb:0c:c1:19:d3:82:ee:bc:b5:ee:84:73:dd:
                    cd:5c:1e:e3:ba:55:aa:9e:2e:b0:31:0b:fb:83:e9:
                    c0:fa:b2:38:3e:97:10:13:41:71:2a:f3:09:52:f4:
                    46:e9:a8:65:38:aa:d1:d7:84:09:e7:85:9e:27:99:
                    2c:55:54:9b:43:55:0b:2d:cc:27:f4:1d:db:00:82:
                    9d:04:04:6b:62:2a:3d:42:b8:5c:1e:13:18:cf:40:
                    b5:b4:1d:9a:68:08:fe:59:27:8e:da:2f:87:dc:ac:
                    e2:fb:a5:69:3e:26:27:b7:83:ab:cf:8d:d6:ec:8c:
                    e6:aa:87:31:ec:25:bd:d8:a9:05:42:ee:1b:78:1f:
                    1b:d6:b9:05:6a:7b:ea:38:6b:ee:91:37:6e:a2:bc:
                    32:f2:92:fa:c4:59:d2:37:1c:d9:5f:89:30:6d:f9:
                    9c:f5:07:ab:54:6c:b8:15:ca:33:ae:45:fd:46:63:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:BF:A9:17:D4:B4:50:01:47:56:2C:1A:44:AB:6B:3C:0F:4A:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44ed8e2b-f1d0-4c43-bc64-27ea32d4d108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:0f:00:2a:04:86:12:4c:34:b9:37:3d:bb:ad:2b:bd:a4:62:
         44:4f:47:bd:22:62:67:e9:93:0d:87:73:66:2d:10:fc:d1:1d:
         28:c5:11:c0:6d:98:11:97:0f:16:11:78:0d:ca:56:b7:78:63:
         01:fa:38:04:9e:47:0d:fa:8c:b8:81:94:9e:d5:dc:3d:7a:13:
         63:f2:79:22:77:3d:95:2a:e2:78:a4:46:31:48:53:0a:e1:1e:
         e8:e6:3e:bd:05:90:9c:18:99:64:ee:49:6e:a2:5e:57:af:07:
         c0:96:87:9b:f0:14:1d:83:f7:a8:56:b4:a7:e7:ff:e5:2f:47:
         21:8a:91:eb:60:da:3b:c4:55:42:b6:2a:30:a2:4b:79:c1:32:
         e7:86:d6:8f:a7:bf:af:62:90:bf:6d:29:0b:98:94:71:5e:68:
         3d:b7:1f:63:3b:f7:b8:ef:48:96:b4:a4:3b:97:55:d9:38:16:
         5e:19:7b:28:ce:06:7e:4c:c1:cc:f1:ce:d9:60:da:b6:5e:60:
         8f:b3:30:44:d8:01:17:70:c3:6c:81:d8:6d:c8:0d:f2:3a:f1:
         7b:b5:f5:2c:47:3d:af:16:ca:9e:92:33:f1:cc:a4:39:63:ac:
         73:11:d4:4c:6f:60:6a:23:ac:a6:48:18:7d:2d:34:34:2d:79:
         b6:df:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----