Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d7963-3dad-4eaa-bfb5-2333d10d34df.roa
File:                     705d7963-3dad-4eaa-bfb5-2333d10d34df.roa (raw, json)
Hash identifier:          ba/yEjOiz+6RjfT+HsjiwEzHpaN57RO95rTSI/bkwQU=
Subject key identifier:   C1:5B:B2:6C:CC:EA:41:28:8F:3F:94:02:F0:53:E6:72:C5:D3:8B:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0BFD27619962B856A5C2311ABCF287B07779F7CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d7963-3dad-4eaa-bfb5-2333d10d34df.roa
Signing time:             Mon 20 Oct 2025 02:41:56 +0000
ROA not before:           Mon 20 Oct 2025 02:41:56 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fd:27:61:99:62:b8:56:a5:c2:31:1a:bc:f2:87:b0:77:79:f7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:41:56 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=897728e48f9680e54f556a4f97bdb6dd26b6b1f2396137e7ae1eaed5b8a0bee5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:de:0a:2a:d3:b3:af:20:0b:29:44:0a:72:
                    50:01:fb:66:d9:86:aa:13:30:d9:3d:4a:b3:b7:40:
                    8e:3c:68:c8:0f:00:02:77:4c:09:5a:46:e9:46:ee:
                    d1:cd:d6:a9:8f:69:ce:7d:09:90:ff:12:ff:f4:5d:
                    39:20:c8:8e:d3:97:b8:04:26:7f:c9:ac:c5:82:ca:
                    0b:2b:7f:6b:78:54:cd:00:39:d1:b2:1e:6a:f2:6c:
                    41:e0:b3:11:c1:88:28:54:59:70:87:46:f8:12:0d:
                    5c:64:ca:cb:1b:37:10:60:a1:c7:c0:74:08:23:76:
                    0a:d6:4d:5e:39:bc:2a:dd:fa:d9:74:9f:16:e6:5c:
                    e8:93:42:0d:e3:26:dd:93:aa:a6:a5:b0:5a:a5:7b:
                    31:d8:ec:9a:d4:c4:cc:8f:48:7b:1d:0c:28:30:ef:
                    65:1a:76:00:f1:17:be:58:60:16:84:90:29:2e:0f:
                    ec:73:ec:f5:ad:8c:79:65:57:0d:be:67:ca:3b:95:
                    69:d7:60:b0:2a:97:3f:07:e8:b7:0d:78:c6:ff:b3:
                    c5:43:94:5c:90:0c:97:a8:c2:43:72:90:cc:62:f0:
                    80:55:6b:71:1a:e0:b0:c0:1f:6e:7a:a4:1c:c7:ea:
                    a6:35:87:05:97:95:85:e8:67:61:7b:bb:f6:16:7c:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:B2:6C:CC:EA:41:28:8F:3F:94:02:F0:53:E6:72:C5:D3:8B:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d7963-3dad-4eaa-bfb5-2333d10d34df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:76:50:00:c2:11:78:6d:74:7d:10:c0:2b:a6:61:be:b8:
         65:85:e7:0a:dd:b3:6d:3d:70:99:9e:02:d4:af:cf:ee:75:fb:
         07:c3:08:38:19:4d:3e:c4:ae:3a:18:3f:ec:4b:a9:e6:ca:e5:
         2e:c5:9c:88:39:b6:0c:a6:a5:b1:0e:d1:1c:4f:2b:c2:43:59:
         41:bf:91:24:c9:01:24:01:0f:82:73:45:1a:88:95:65:ac:a5:
         88:af:41:44:5d:1c:b4:e1:43:1e:f6:71:5b:d3:ad:eb:a9:47:
         c1:6c:13:87:bf:9d:c6:0b:e8:25:32:2a:16:60:60:79:75:a1:
         0e:d7:c5:8c:7d:10:39:70:0f:a5:c3:9c:73:02:26:b0:c1:15:
         9f:d7:02:a5:cd:db:30:b8:fd:25:8e:ce:9d:dd:4c:c6:de:a5:
         bd:d6:88:ed:69:31:e1:15:90:44:79:eb:13:d4:79:21:39:7c:
         63:52:f9:2c:f4:54:43:08:18:9f:7f:88:99:45:27:87:f1:13:
         34:28:93:35:18:b0:72:c6:7a:55:54:36:e2:8f:27:f1:1f:d4:
         17:3f:52:34:cc:5d:3b:64:9c:81:5f:05:53:8e:f9:dc:93:91:
         f1:25:1c:df:e2:be:bf:26:44:af:13:ca:b3:ce:99:2a:83:69:
         d4:e0:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----