Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49669fbc-bdc0-465a-ac7c-c099e6d3e81e.roa
File:                     49669fbc-bdc0-465a-ac7c-c099e6d3e81e.roa (raw, json)
Hash identifier:          BLRXsfp6+Vjoi7wtDEHeae85GghXV1KXyneExDLO5Zc=
Subject key identifier:   35:E4:93:B6:82:F0:2D:2E:24:5C:8F:7D:E9:AE:21:B7:5D:AF:35:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0481D021B47DFC7E838078B9E1906598FDEB9BE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49669fbc-bdc0-465a-ac7c-c099e6d3e81e.roa
Signing time:             Mon 20 Oct 2025 02:40:09 +0000
ROA not before:           Mon 20 Oct 2025 02:40:09 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:81:d0:21:b4:7d:fc:7e:83:80:78:b9:e1:90:65:98:fd:eb:9b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:40:09 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=bd102b864c169b79568668b5259b3908bad949f8351299e6fad249404dd98add, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:ec:e4:28:9b:5d:40:55:9d:d6:c4:cc:0d:
                    25:06:3d:fc:0d:2e:c2:5f:e5:1a:c8:2e:47:16:23:
                    0a:8f:46:c5:f1:85:90:de:de:1d:d1:8d:d9:ff:c3:
                    1b:4d:f7:f0:72:41:67:21:7f:14:82:0b:24:94:b1:
                    fb:d1:d0:cc:7a:3e:90:6a:00:c5:f3:18:f8:e1:e3:
                    ab:bf:57:82:12:71:41:4e:66:a4:f6:3f:19:04:2f:
                    51:61:61:1f:d5:42:cd:99:0a:8f:81:d5:fb:87:0e:
                    5a:30:dc:5c:a1:96:e1:d3:ef:42:4b:f2:71:23:f3:
                    32:3e:51:be:33:22:b1:c6:1f:6a:53:30:e5:b4:90:
                    29:01:16:21:2b:d4:77:6a:25:02:72:53:8c:31:2e:
                    43:08:4f:80:09:4e:31:ca:ae:23:74:fc:76:43:d9:
                    29:c4:30:31:e3:6d:9e:7c:b2:aa:f5:c9:4b:06:cc:
                    21:3d:f4:ed:0b:6c:be:2b:8b:6c:29:90:aa:3a:53:
                    38:3d:76:64:9a:89:74:58:aa:66:4d:36:a3:25:5e:
                    6a:97:a4:bc:da:06:17:84:03:70:ec:1a:55:5b:e6:
                    08:1d:88:d8:e0:d6:b1:9f:1d:13:16:3c:5d:53:df:
                    56:34:f9:2e:d8:06:62:bf:d9:5f:0e:4e:1c:9d:93:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E4:93:B6:82:F0:2D:2E:24:5C:8F:7D:E9:AE:21:B7:5D:AF:35:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49669fbc-bdc0-465a-ac7c-c099e6d3e81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:03:00:27:fa:68:55:05:da:83:20:f1:8a:00:0c:99:4c:60:
         17:f6:cb:66:8c:e9:01:f4:c1:d2:17:ff:57:b7:94:04:b0:a9:
         49:b2:05:93:17:98:5a:98:4e:ae:e7:85:67:bd:a1:eb:84:98:
         88:81:7f:e2:97:ee:24:49:72:4d:0d:6f:43:bd:2c:e1:1f:c6:
         90:df:c7:70:38:a7:2d:97:14:ba:81:83:10:a9:ec:e2:35:73:
         50:2d:b2:7c:0a:de:60:f9:8a:2b:e2:ce:c9:74:cc:e3:5b:6c:
         06:70:9e:b3:6f:14:ab:41:a1:90:c3:12:25:b0:b7:fe:86:0e:
         d6:a0:71:00:c8:a8:7d:df:d8:39:97:ad:44:41:bf:09:e1:6b:
         e6:00:55:8c:f0:f6:9a:cc:1b:ad:dd:d3:39:c7:b6:cb:74:4f:
         48:8e:10:bf:22:4a:0e:e5:cf:76:81:22:70:40:b5:9f:c5:b0:
         22:93:a6:c1:79:15:e0:1e:e3:06:75:47:a3:7b:17:c8:02:97:
         47:51:a9:d2:d2:d2:2c:21:5f:9a:9a:44:2e:84:b1:26:c3:80:
         cd:b8:1e:55:7f:76:79:06:2d:14:62:c0:d1:b4:10:d6:e5:8f:
         fe:8e:17:a3:43:ba:33:ea:d5:da:3a:9c:d9:21:fa:94:ee:16:
         14:6f:fb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----