Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531e4e9a-8d3d-4058-a48c-92a81b86a133.roa
File:                     531e4e9a-8d3d-4058-a48c-92a81b86a133.roa (raw, json)
Hash identifier:          koru/iAumHymcApXSyPLJKXHmjn58JbZykOW/cFdN7M=
Subject key identifier:   42:7E:E3:CF:64:26:82:09:4D:C5:D1:B6:AD:EB:F7:49:D7:2D:10:A1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C21B835CB14E7A88EF2EEB1DC183B54CAF7C0E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531e4e9a-8d3d-4058-a48c-92a81b86a133.roa
Signing time:             Mon 20 Oct 2025 02:20:06 +0000
ROA not before:           Mon 20 Oct 2025 02:20:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:b8:35:cb:14:e7:a8:8e:f2:ee:b1:dc:18:3b:54:ca:f7:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:20:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9bacdbf17066e45f566225e94c8b55aa41cf4fb16028d19404b915e4bbe50143, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:fe:20:b8:f5:f0:44:b8:8f:f2:4b:6a:5d:
                    9d:71:95:df:6c:69:ce:38:d1:bc:82:69:07:51:40:
                    95:ba:de:d2:1d:7c:45:27:10:0f:75:7c:4b:95:1b:
                    76:c5:89:2a:8c:8c:c4:37:56:51:e7:a2:f1:be:98:
                    61:a8:0d:f1:0a:86:16:88:62:1f:9b:9c:39:90:a9:
                    cd:ad:b0:22:88:cc:40:76:80:e1:53:bc:73:98:8e:
                    34:9f:a0:0d:12:31:9f:f0:22:a4:c5:b1:49:39:35:
                    cd:e6:90:62:26:6b:47:e8:2c:6f:a8:7b:cb:70:38:
                    79:ec:2e:ee:74:08:9c:b3:09:32:91:19:5b:32:d5:
                    ac:39:e9:e1:3c:60:c3:72:c2:54:d0:d0:3d:80:24:
                    2c:4d:3d:ab:ea:1c:32:f6:0a:0d:91:60:7d:ec:e8:
                    49:fc:5a:62:b5:dc:9e:5e:ab:93:ed:52:d0:53:9f:
                    f7:6d:22:c2:01:ea:31:82:12:56:9e:e2:c8:76:7e:
                    ad:0f:41:16:b5:e6:17:f9:9c:74:6f:93:d1:c9:26:
                    db:a2:fb:55:08:b8:4e:4a:26:7d:9d:d4:9e:78:5b:
                    56:a8:71:62:05:df:37:80:38:3f:e5:c0:d7:ce:ea:
                    71:7e:bd:02:ef:10:38:6e:25:ac:99:0f:97:82:37:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7E:E3:CF:64:26:82:09:4D:C5:D1:B6:AD:EB:F7:49:D7:2D:10:A1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/531e4e9a-8d3d-4058-a48c-92a81b86a133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:5d:32:93:b4:d6:4a:18:35:db:72:7b:94:b6:f5:2f:38:
         fe:67:ad:37:7d:4e:48:36:8a:59:6f:e4:2b:37:fe:9f:8a:87:
         d0:f3:40:60:44:98:20:3b:49:6a:32:e8:82:84:ff:af:6a:20:
         d0:b8:5d:07:d7:80:43:f1:87:45:c1:e3:31:8b:9a:26:ed:d8:
         aa:68:c8:d4:9d:00:0b:fb:e4:e9:94:90:56:88:20:2c:82:9d:
         5a:e3:65:06:db:c5:84:19:b6:98:2c:f7:4b:02:77:39:63:45:
         5b:e2:6f:36:fc:92:77:a4:81:a7:06:21:fd:28:8f:aa:05:f2:
         2b:5e:5e:b7:70:d0:56:33:25:9d:ee:5f:6c:0b:be:29:7a:b9:
         11:15:11:82:4b:66:1c:db:b9:29:f9:d1:b4:5f:47:b6:35:13:
         8a:f0:76:4b:45:2a:77:62:94:44:a0:39:e5:56:7e:f5:e1:47:
         aa:13:d2:21:ef:3b:24:37:a4:0b:a8:a5:bd:01:2f:de:56:08:
         52:e7:ef:2f:c9:d7:f0:e9:db:db:2c:b5:8d:5d:a6:37:d7:6d:
         7c:48:d4:61:11:2e:95:fc:e7:a8:a1:e5:17:b9:e9:87:cf:92:
         18:c1:de:dd:75:d7:bc:7f:e2:7f:ca:1e:36:06:ff:d0:5f:25:
         28:d0:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----