Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c7da5c-a303-47a9-9868-4e80dc42ba17.roa
File:                     54c7da5c-a303-47a9-9868-4e80dc42ba17.roa (raw, json)
Hash identifier:          CHEUQQ8nYqT5zzpFbxWLXf/588Cj8LOgHHNE9HHwElg=
Subject key identifier:   ED:86:9B:FF:9E:93:7A:FC:4B:7C:B0:91:69:51:67:58:C6:93:75:5D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30FC833838536924B4ED03771C13FAE8FB2FC300
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c7da5c-a303-47a9-9868-4e80dc42ba17.roa
Signing time:             Mon 20 Oct 2025 04:01:43 +0000
ROA not before:           Mon 20 Oct 2025 04:01:43 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fc:83:38:38:53:69:24:b4:ed:03:77:1c:13:fa:e8:fb:2f:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:01:43 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=e3bdf47f59299ab91276c6a3bf8bf84d3f863387df83d2d6af51af5a2fce286d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:60:b4:49:2c:f2:e7:5d:84:f4:20:62:07:
                    bb:bc:b9:01:15:65:43:ec:76:5a:32:f3:a2:41:eb:
                    2a:8e:df:55:1e:ef:40:5c:4b:ac:2f:8a:3b:ce:5c:
                    ec:28:b5:7d:ec:df:d3:89:f4:16:5e:3a:ad:f8:7f:
                    e3:12:40:b3:20:34:b4:88:32:6b:2d:44:6c:7a:98:
                    17:69:45:99:3c:7b:09:89:11:b4:26:b8:be:4f:20:
                    44:9f:6b:36:68:1b:41:73:80:38:a0:a2:02:00:db:
                    3c:74:bc:16:ee:92:33:73:e2:56:28:c6:25:f8:cf:
                    15:4a:a8:b3:09:73:97:e4:ed:48:e3:bd:57:7c:08:
                    e2:78:5b:d7:ab:8a:9f:b7:b9:a1:17:c7:46:a5:58:
                    d4:d2:c4:60:7c:b9:72:5f:d9:ae:cc:08:8f:c1:f5:
                    55:13:2b:75:b9:c7:5d:34:14:60:bd:7b:8e:6f:8d:
                    65:27:83:0a:74:f9:75:a6:81:fd:40:4b:2d:44:af:
                    a4:c6:90:98:37:12:e2:0c:ca:39:15:e1:53:10:a8:
                    7a:e4:1e:a9:70:55:9c:d5:94:61:d0:3d:f5:9e:b6:
                    7a:52:4f:36:4e:27:99:72:52:0f:d4:0a:6a:69:e4:
                    70:5c:b6:59:e1:b8:14:73:96:51:63:7b:94:03:cd:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:9B:FF:9E:93:7A:FC:4B:7C:B0:91:69:51:67:58:C6:93:75:5D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54c7da5c-a303-47a9-9868-4e80dc42ba17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:a6:12:de:58:df:c9:c9:46:a5:25:88:96:d0:4c:15:17:
         70:5d:a9:35:99:8e:87:18:69:f0:35:c1:57:f9:eb:f4:32:00:
         cc:7c:9a:b5:fa:e5:82:2a:da:4d:66:31:d8:cf:cc:8e:0f:16:
         c2:09:01:02:52:87:73:4e:59:6e:76:d6:79:29:27:d0:b7:9d:
         97:d4:f0:df:9f:1a:8c:9c:5c:f8:9a:99:3e:4c:cc:2c:4d:16:
         3e:7b:e8:6b:1d:a9:a1:5d:40:27:8d:c6:14:8d:41:4e:16:a3:
         e2:76:b1:fb:1c:c8:8e:87:98:3b:d6:88:43:7c:34:aa:ae:14:
         fb:7c:e6:71:66:59:8f:a8:fa:23:11:18:e0:56:1e:6f:0c:36:
         d1:61:cf:8d:e0:21:30:bf:69:09:af:7d:da:20:6c:b5:32:23:
         96:2a:0e:25:b9:c9:04:d1:0d:31:e6:fc:10:28:7a:dc:e6:8b:
         4a:7b:d3:d8:f0:78:f3:9c:05:8d:c5:47:b2:82:15:9a:74:aa:
         f2:3d:d2:a9:56:4c:48:ad:63:a4:52:11:d6:eb:05:6e:32:38:
         de:6e:d9:80:f6:56:1e:88:ae:53:b8:03:9e:a1:76:9d:da:c7:
         b9:69:a4:96:81:aa:17:e1:f4:ff:9d:38:04:3c:d2:d4:1a:ca:
         06:8e:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----