Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61318bd7-edaf-4d14-9eee-c250896b9427.roa
File:                     61318bd7-edaf-4d14-9eee-c250896b9427.roa (raw, json)
Hash identifier:          mYQBesQlA8L64gXwRwVJZMWKydLNUaHSZt+tXJa49xc=
Subject key identifier:   75:96:8B:CE:A3:41:00:39:9A:8C:9C:21:06:6D:23:24:14:FF:74:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17657D635CD27BE9909A4CC581B9D5CDB1F69FDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61318bd7-edaf-4d14-9eee-c250896b9427.roa
Signing time:             Mon 20 Oct 2025 00:21:00 +0000
ROA not before:           Mon 20 Oct 2025 00:21:00 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:65:7d:63:5c:d2:7b:e9:90:9a:4c:c5:81:b9:d5:cd:b1:f6:9f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:21:00 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=c754ac948589c736ee917255cd2989fd9d65a022648b2eb62946b2ef773044c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:53:12:9a:15:b1:94:09:6e:63:ee:af:63:
                    21:7a:b0:2e:34:76:01:aa:75:d0:f6:b5:fe:03:c6:
                    2e:73:d1:f8:5b:94:6d:c4:2e:8b:3f:12:ef:35:4d:
                    9e:2f:82:0c:c3:73:45:70:26:2a:cd:56:2d:1f:1c:
                    57:30:99:ca:4b:65:4b:e6:76:f5:83:0c:f5:59:78:
                    b3:65:ff:a1:b7:2e:76:38:b9:77:94:4c:a6:fd:ed:
                    a5:3d:52:8f:d0:4b:20:9d:42:b2:ae:42:b2:04:98:
                    5e:e2:0e:28:a8:04:c6:7d:8f:87:31:38:bd:cf:5c:
                    db:5a:5e:26:da:5d:a8:bb:cf:cf:eb:ac:bf:76:00:
                    3d:48:3e:16:f8:ac:79:e0:d1:54:a6:86:3e:90:af:
                    26:7b:af:a8:29:40:13:bb:67:0f:96:c7:c0:5c:b5:
                    14:ab:08:0e:e0:a9:0b:80:84:22:1d:24:8b:ef:a5:
                    ca:2a:c3:f9:aa:05:7e:fc:de:f7:20:0d:cd:23:f0:
                    6b:ce:30:b7:b6:15:41:23:2c:a1:2b:8d:d3:d2:e0:
                    9e:78:b8:31:06:42:0a:81:f8:b5:de:e5:71:8a:ec:
                    6a:01:58:84:a4:09:a2:0a:89:0c:04:b5:b8:99:2f:
                    d7:75:8d:1a:2c:85:b7:a7:da:19:65:f3:4e:82:33:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:8B:CE:A3:41:00:39:9A:8C:9C:21:06:6D:23:24:14:FF:74:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61318bd7-edaf-4d14-9eee-c250896b9427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:df:7d:3e:9a:ce:8d:8b:5f:d9:96:58:6f:51:65:ca:79:
         a3:24:5c:27:63:c3:35:a9:f4:f7:b3:c7:c8:e4:29:56:33:29:
         8d:df:87:75:8a:cd:88:17:98:f6:0b:58:62:d3:21:57:bf:83:
         53:18:3b:1e:84:5a:5c:d1:0b:e4:d5:65:bf:cf:4f:e6:a9:47:
         b0:f6:d6:d7:30:cd:9a:cf:22:ee:0f:98:11:07:f1:a4:62:ec:
         2d:f0:b6:de:29:9b:1e:78:3c:ff:72:e1:74:c8:2c:b8:e4:0d:
         64:91:e8:d1:64:85:c6:0f:c8:71:78:43:fb:91:f5:2f:18:f0:
         98:9b:1e:26:8b:bb:78:a0:b5:8b:0f:8d:88:67:a5:0d:9b:e0:
         62:ad:1a:86:70:ec:4d:0c:c7:42:58:2e:f6:e7:3b:25:b6:03:
         c6:12:dd:07:d4:5f:d5:ef:13:26:05:7e:0b:a3:4e:d8:17:e7:
         de:a4:73:b4:43:f6:f2:b9:41:de:4f:7e:7d:6f:94:8d:48:b0:
         6d:a3:d8:f2:9b:e9:fe:fb:fd:b8:60:6f:90:f9:27:a4:a8:cb:
         ed:77:8b:d3:32:5c:9b:f7:bc:fc:5c:41:1a:b0:a7:c2:a3:2c:
         ea:5a:1f:1d:5d:ce:61:fc:4c:3e:66:41:85:37:82:96:b5:f2:
         e0:4c:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----