Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ad9ee3c-184b-4456-8121-bfae436fa47a.roa
File:                     7ad9ee3c-184b-4456-8121-bfae436fa47a.roa (raw, json)
Hash identifier:          5udY2Nm4G0ar8t9ur8Cf0U+U6QAoXeG43XMw2CjjfkM=
Subject key identifier:   B3:15:2D:07:23:99:8A:17:5E:FD:46:DE:70:AA:4D:EA:1F:F7:40:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31E79EC52A4FE4768377760EC50200B1205BE060
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ad9ee3c-184b-4456-8121-bfae436fa47a.roa
Signing time:             Mon 20 Oct 2025 01:20:48 +0000
ROA not before:           Mon 20 Oct 2025 01:20:48 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:9e:c5:2a:4f:e4:76:83:77:76:0e:c5:02:00:b1:20:5b:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:20:48 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5dcfda73003eb13222c16eeff3bc8533e08729673854dc7cf24e2c8e02cd6899, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:43:9f:c7:a5:3c:4d:fa:fa:91:cd:87:9e:
                    29:61:8e:6b:fa:71:fd:47:fd:9a:76:49:3f:2f:20:
                    27:d9:c7:c5:e4:a9:73:e6:b6:da:89:b1:ee:06:95:
                    ed:c3:9d:90:1d:ed:31:b0:ef:e7:b2:a2:00:9f:b1:
                    13:69:d6:05:39:02:9a:c7:c7:bc:10:4a:0c:9f:97:
                    f4:ac:1d:50:c8:31:b8:00:a0:03:22:0b:7b:5b:4b:
                    d8:67:39:d6:6d:75:ee:0b:dc:d7:64:f6:06:59:23:
                    1e:74:97:65:f9:e3:e0:49:4e:6c:80:9e:15:2a:0f:
                    49:db:73:e4:75:83:c4:de:84:59:55:b4:dc:81:94:
                    11:28:f1:51:49:d6:d9:69:7b:76:5e:9e:e3:6e:86:
                    7e:89:27:ed:0f:60:8c:42:24:9a:da:50:28:26:12:
                    30:b6:90:dd:79:ff:f2:be:ea:ed:f1:6d:c6:25:63:
                    41:03:93:64:20:5b:59:44:7c:14:ce:8d:c0:05:55:
                    db:bc:b5:d4:85:fa:cd:79:dc:37:4c:01:ee:bc:b5:
                    7e:5e:21:e9:30:c8:6c:27:18:01:13:e3:44:e4:cb:
                    f8:b9:25:2e:64:07:33:c9:3d:9e:aa:b1:8d:db:84:
                    56:eb:0f:e6:7d:f1:16:d4:18:07:e2:54:2f:8b:8b:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:15:2D:07:23:99:8A:17:5E:FD:46:DE:70:AA:4D:EA:1F:F7:40:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ad9ee3c-184b-4456-8121-bfae436fa47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:85:73:a7:0a:81:77:7f:1f:53:08:f0:71:a4:54:5d:55:
         85:81:0a:4c:c9:e1:0e:de:e1:3d:d7:39:46:b1:5a:94:b2:ff:
         6b:be:3c:36:35:e5:61:bb:e0:46:7b:77:ae:50:ab:60:36:e2:
         81:9b:eb:4f:7f:59:86:73:a8:f1:e6:05:9d:f9:12:ca:95:9f:
         87:73:5f:99:63:5c:99:4e:64:98:e3:56:e9:11:5a:ed:91:cc:
         91:f5:68:2a:41:eb:b4:1d:a5:36:da:b0:e5:d4:83:2c:80:29:
         86:55:42:e7:d7:52:cf:a0:40:d9:f9:15:c5:06:a2:7a:eb:51:
         82:a3:87:de:03:f2:2b:8c:2e:e5:68:97:2c:32:89:f5:0f:61:
         f5:39:e0:da:7e:fc:08:1c:cf:e4:10:72:a5:99:9b:01:bc:1b:
         b2:fb:9e:d1:d7:58:d1:f9:ed:a7:ba:37:2b:6d:58:cf:be:43:
         e1:55:cc:23:8d:f0:26:99:2a:34:04:58:3d:07:56:61:c6:e6:
         59:c9:73:06:99:10:2a:b6:fc:a6:5c:c0:37:46:cc:60:38:9b:
         79:55:57:f4:d6:99:b2:1e:61:94:8d:b0:95:10:7f:82:41:00:
         c9:e8:0d:07:a4:f0:c4:c5:02:3a:b1:e5:e3:bf:04:01:dc:15:
         c1:e6:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----