Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78fab278-8916-4a0e-a38b-63488824dbe8.roa
File:                     78fab278-8916-4a0e-a38b-63488824dbe8.roa (raw, json)
Hash identifier:          OYY0NqfxMBUycUAXY3lWbv53ruoIfMR9YDm6i0J8JMs=
Subject key identifier:   98:AC:44:CD:A6:DF:3A:67:72:B5:12:EB:8C:1D:54:68:D4:72:DA:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4F9D1CCB875BC2BFC3CB1E598521D7256601E06C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78fab278-8916-4a0e-a38b-63488824dbe8.roa
Signing time:             Mon 20 Oct 2025 00:50:52 +0000
ROA not before:           Mon 20 Oct 2025 00:50:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9d:1c:cb:87:5b:c2:bf:c3:cb:1e:59:85:21:d7:25:66:01:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:50:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8b5f8989923079fd37100b0490a8fbffbfbcbbd729e1aff15def57d3f329c862, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:83:21:86:35:03:b3:3d:4b:d4:fe:aa:be:
                    7c:b7:1e:09:20:fe:d3:77:4f:f6:e0:56:66:71:7c:
                    3a:cd:7a:c0:2c:08:b5:74:51:a9:a3:b4:21:6c:cc:
                    ba:49:83:f8:dc:fc:41:4c:67:00:d4:9d:a0:30:71:
                    2d:04:f7:7e:08:4a:1f:82:64:8b:ab:96:e0:54:6c:
                    b3:e1:01:92:16:4e:c2:30:a2:b2:d8:58:92:ae:9a:
                    0e:11:d1:95:c1:0b:8a:37:82:a1:7c:7a:93:cb:94:
                    3b:95:04:45:31:23:91:60:56:f7:10:5c:0d:1d:73:
                    54:95:81:fb:87:96:0e:77:2c:0a:ef:4a:60:aa:ac:
                    48:e5:d3:02:1e:c1:9d:ea:88:34:4e:49:6a:d9:27:
                    a8:f4:7d:c9:ae:cd:03:ac:50:59:b2:64:08:55:ae:
                    fd:95:95:8d:5f:35:41:e8:c6:8e:a9:62:c8:7d:fc:
                    10:5f:2d:c9:ca:f8:13:4b:ef:0e:1f:0c:76:b9:51:
                    e2:08:0e:0a:bb:8c:c1:0b:fb:68:e9:ac:ed:13:c9:
                    14:8d:e0:dd:28:15:c7:d3:0a:62:10:09:2b:31:ab:
                    fc:57:76:e9:95:0d:d5:93:be:05:fc:f0:ad:83:00:
                    45:62:4f:7e:98:3d:a2:10:57:95:6a:f0:ac:5f:94:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AC:44:CD:A6:DF:3A:67:72:B5:12:EB:8C:1D:54:68:D4:72:DA:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78fab278-8916-4a0e-a38b-63488824dbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:7f:c0:95:f2:62:8d:71:16:5a:fb:35:b7:c1:08:ce:42:
         39:e6:2b:73:dd:20:72:4a:88:a8:99:1d:97:e7:7a:0e:40:f3:
         bb:cc:fa:96:8b:75:ac:d6:33:6e:40:11:5f:f1:ad:87:8b:7a:
         08:0c:2a:64:d9:09:ea:29:b3:d7:96:84:0e:46:38:f3:cd:61:
         39:e2:52:13:b5:ef:83:37:54:50:5f:85:91:b1:6f:9e:64:93:
         d0:ba:fd:e9:a4:a2:92:bf:cd:f7:69:ae:3e:59:33:47:ae:2e:
         69:a5:dd:4d:b4:8e:4c:ff:84:fa:c0:1d:44:67:c5:0a:cf:c9:
         30:3e:b1:54:b4:be:13:03:6b:5d:c3:3c:fa:2e:85:b0:40:f0:
         9a:88:81:c5:e4:e1:8d:6b:ee:63:98:fe:b9:23:94:ee:4c:78:
         d4:d3:5a:ae:97:db:41:c7:86:de:00:20:5f:6c:12:32:66:85:
         20:b7:d3:c9:b9:22:7a:10:1d:c5:8c:cf:89:65:ac:73:de:d0:
         be:af:7a:6b:71:f9:bd:5a:53:e6:24:c1:6c:cf:1b:61:67:b6:
         2c:ae:51:7e:62:de:de:78:d3:c8:5b:6c:4b:f0:3e:de:29:ad:
         a8:b7:d8:73:73:be:06:f6:dd:69:63:7f:e5:49:72:97:4c:6a:
         d2:1d:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----