Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5979ae4b-7075-4b9d-8129-2d9e75d72dea.roa
File:                     5979ae4b-7075-4b9d-8129-2d9e75d72dea.roa (raw, json)
Hash identifier:          wjq9JVcTC/RrZZli6qbFJovWNMO9DBjgEMbZAErgaRc=
Subject key identifier:   BA:2A:E2:36:10:57:0E:10:B8:58:4C:7A:54:73:19:37:45:D0:0D:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33858C0154FA163F896EA1FCFC333682AC146E88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5979ae4b-7075-4b9d-8129-2d9e75d72dea.roa
Signing time:             Mon 20 Oct 2025 01:40:52 +0000
ROA not before:           Mon 20 Oct 2025 01:40:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:85:8c:01:54:fa:16:3f:89:6e:a1:fc:fc:33:36:82:ac:14:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:40:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5ca0de3c6fe2ed8bd70b3bc53876f73f8e78701bc6d680c797c68dc8cd9bdc55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:44:d1:74:dc:9f:bf:b9:ee:d4:8b:76:17:
                    6a:5c:5e:79:3d:fa:29:67:fb:ac:68:03:98:d1:82:
                    71:09:69:99:ee:80:c4:8f:52:f5:d4:d1:e0:25:f0:
                    8f:9a:58:dc:b0:42:36:b7:aa:af:42:9d:63:dd:8b:
                    e4:19:a3:50:19:ec:f9:3f:87:4e:8a:20:7f:8a:0a:
                    83:7a:da:6a:32:94:e9:08:72:4f:6f:48:01:bf:eb:
                    fc:dd:7d:00:17:6e:a6:f7:cf:ee:7b:83:35:18:38:
                    01:dd:72:c9:db:0f:8f:f7:80:77:9a:fe:6c:c5:73:
                    64:83:47:68:1b:e0:e0:d8:35:e7:34:6d:b4:2a:74:
                    68:98:27:41:04:19:ac:c0:22:ee:69:1e:de:b0:1f:
                    d5:10:34:31:1f:e7:40:af:aa:ee:b6:f8:a1:f8:7a:
                    32:94:0a:94:48:1a:4f:4b:77:04:8e:da:66:78:f9:
                    8b:46:2a:1e:54:11:b2:5e:b8:fe:70:b0:74:b1:80:
                    e0:33:e3:2a:ec:35:34:5b:b3:7c:28:b8:cb:3b:b2:
                    36:42:f7:76:53:37:92:07:f9:08:89:6c:cf:7e:d6:
                    bd:61:93:97:6c:cc:d2:a3:ba:54:73:ad:3f:2b:1c:
                    4e:e6:01:0a:ba:f3:4b:ef:dd:bc:d6:b3:c0:28:68:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2A:E2:36:10:57:0E:10:B8:58:4C:7A:54:73:19:37:45:D0:0D:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5979ae4b-7075-4b9d-8129-2d9e75d72dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:56:3f:38:52:89:41:95:e9:57:d3:67:04:0c:11:b9:a4:31:
         d4:d4:a3:93:39:da:f5:34:3c:5a:01:8d:d2:b2:9c:b0:8a:e5:
         eb:db:8c:d3:a6:42:dd:e5:b2:93:1e:33:f5:93:3e:de:05:5d:
         2a:76:a0:08:36:ba:59:b5:6b:88:23:da:a0:c3:48:1e:78:6f:
         80:c6:08:ce:1a:06:24:c5:29:7c:65:c4:83:fb:3e:2a:9f:3f:
         6e:cd:47:e9:47:25:49:e2:90:d0:de:bf:28:74:60:d0:04:23:
         06:a3:bd:67:44:0f:60:2d:72:79:d6:58:7a:a5:cb:1d:50:fb:
         90:3a:f2:1a:b1:d3:60:e1:34:41:c4:a2:96:3e:53:46:3d:1e:
         86:a9:a7:33:96:33:ae:4a:8e:da:a6:61:32:f0:7f:88:63:0b:
         30:5e:aa:38:9d:ff:44:54:0c:cb:1f:57:ef:65:9a:62:b2:17:
         f5:ad:79:d3:77:68:06:c1:fa:a6:a4:3b:24:20:62:32:10:df:
         fb:32:2a:dc:32:7d:3e:50:2a:24:ed:bc:79:ee:2d:1d:5e:16:
         6a:44:52:64:fb:bc:6c:5c:dc:e4:f3:38:86:d4:8a:ae:dd:26:
         08:78:6d:6e:2e:51:c8:2f:fa:67:31:fc:cb:58:70:c1:01:01:
         c0:e1:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----