Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a156002-b997-46c3-986b-389cf7f08fee.roa
File:                     5a156002-b997-46c3-986b-389cf7f08fee.roa (raw, json)
Hash identifier:          nju9k6TnceB13jFX+Dl5plzZyLEFloaBWdnhJeYqQWc=
Subject key identifier:   48:26:61:E7:53:44:24:15:4C:63:26:8F:EB:39:49:B8:AD:FA:D7:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       353179020AE9046C088C5FEF6BAAD188E67215A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a156002-b997-46c3-986b-389cf7f08fee.roa
Signing time:             Mon 20 Oct 2025 01:10:10 +0000
ROA not before:           Mon 20 Oct 2025 01:10:10 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:31:79:02:0a:e9:04:6c:08:8c:5f:ef:6b:aa:d1:88:e6:72:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:10:10 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=aa69c0e4205ce87a4d19b54a668f214fcdd1695c48b457ef8b9ebd95166f2e98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:2f:83:86:1d:35:c6:04:51:54:87:00:e1:
                    68:7a:9c:ae:7e:9d:da:56:c7:d3:96:40:b0:76:ef:
                    70:3c:78:3d:08:0e:d7:b2:67:be:21:d1:8c:ef:d8:
                    6e:7a:60:9f:37:d9:bb:78:4a:b4:0f:fa:d3:57:6c:
                    35:a1:c7:65:99:23:ec:dc:6d:0b:98:3b:ec:23:e0:
                    0d:68:6c:0b:83:71:a9:7b:b3:a5:3a:8f:91:b1:ea:
                    a4:14:81:a6:93:af:4b:86:66:db:a2:fb:f2:41:bb:
                    2b:9c:8e:2b:f1:e7:1d:43:8e:03:a3:bc:0f:3a:22:
                    dc:5b:47:4d:48:88:54:01:b7:37:56:dd:3c:87:c0:
                    70:52:8b:34:2f:6c:7b:f1:4b:67:31:6b:42:b4:c3:
                    dc:d7:1c:60:df:47:96:e0:33:31:4c:8c:5e:b9:b0:
                    c3:88:fc:17:b2:0e:50:00:12:c8:3d:ae:40:b2:4a:
                    66:f3:c8:62:f6:d2:b2:a3:fb:c2:e0:26:7f:f4:8f:
                    66:5f:0d:2b:71:81:a0:ec:64:0b:6c:4f:48:be:2f:
                    58:27:eb:a5:11:36:64:bb:62:62:ff:01:64:a4:c1:
                    3f:f6:d3:14:7c:5a:7d:58:4b:03:72:3a:25:d2:b7:
                    86:b5:03:db:10:a7:0d:08:0e:b2:1f:dd:c1:1b:31:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:61:E7:53:44:24:15:4C:63:26:8F:EB:39:49:B8:AD:FA:D7:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a156002-b997-46c3-986b-389cf7f08fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:a5:2f:35:99:0b:f5:79:71:b7:3d:d1:d4:63:e9:b2:35:8c:
         45:b4:f7:6e:e7:0d:43:f0:db:8e:a0:b4:5e:d2:8b:17:90:ba:
         62:75:d5:c9:40:f4:09:1d:9b:24:5c:74:16:9f:30:e3:17:33:
         14:15:bc:fe:5d:bc:5b:38:7d:61:e1:9d:ae:eb:2f:fa:fc:45:
         99:3d:cd:b8:9a:2c:aa:8c:db:7b:04:8d:0f:64:38:18:43:2f:
         73:7c:c5:13:74:b6:56:d8:b8:9f:d1:9a:03:87:cb:3f:fb:d1:
         f5:f6:7d:5f:92:bd:ec:8b:6e:f8:07:ac:24:3a:9a:13:11:52:
         f3:36:a9:57:57:55:a3:5d:2c:de:98:c0:b2:65:bc:fe:78:a5:
         8e:54:60:20:df:c6:6a:21:0c:07:e5:2c:de:83:e4:f1:bb:d3:
         d6:40:97:1d:43:c3:a2:0b:e0:58:67:7c:4d:9e:3a:bd:ee:7b:
         aa:6b:66:f3:87:de:d2:71:a9:e0:cf:ce:55:a1:be:40:36:24:
         f2:a4:7e:d5:7a:75:a4:0f:25:6c:13:26:6a:0c:f5:1e:d7:d6:
         00:c9:9e:c4:03:f0:b1:f5:cc:fd:10:51:53:26:81:b9:4d:5d:
         0f:05:29:b9:07:f0:15:6f:24:8f:75:ec:c2:53:f7:69:77:4f:
         1b:d1:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----