Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/989efcd0-0044-4d20-b952-fbe2779d6e38.roa
File:                     989efcd0-0044-4d20-b952-fbe2779d6e38.roa (raw, json)
Hash identifier:          ih+W7/PEcNp0SrEhy4vB64HIbWT0PQSsp60VejJGWBs=
Subject key identifier:   5F:F7:D6:AD:30:76:1A:6F:5B:A9:5A:C6:C1:F2:10:BA:02:E5:28:9B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31586C2CEA7B0AEA6D05F75C0C2FBF455700B666
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/989efcd0-0044-4d20-b952-fbe2779d6e38.roa
Signing time:             Sun 19 Oct 2025 01:20:10 +0000
ROA not before:           Sun 19 Oct 2025 01:20:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:58:6c:2c:ea:7b:0a:ea:6d:05:f7:5c:0c:2f:bf:45:57:00:b6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:20:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=15f62656bd97454623abe63b8d9d49ef4020ac0b6eb9a12e4d154464eab1fae0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:da:75:16:e6:b6:1e:6f:74:60:a3:4f:14:
                    e8:8f:e4:df:a2:de:c1:26:a2:58:2d:23:e3:04:3c:
                    ef:f8:49:b6:84:f2:eb:e5:c9:bc:a0:84:1a:e8:29:
                    16:92:ac:fc:9c:ae:b4:0c:43:fc:a9:97:84:06:6a:
                    27:36:f4:8f:c7:62:d0:9f:82:82:ae:3d:9b:19:63:
                    55:f6:b8:a3:d9:c4:b6:a7:cc:f7:95:a8:18:b4:01:
                    4d:b8:6c:72:ba:9a:a3:d2:f8:2f:a2:45:f7:07:30:
                    31:9d:11:91:ad:8a:a5:09:af:23:b1:4d:e6:27:cb:
                    50:59:3c:bb:aa:6a:0f:2c:27:18:4c:86:87:2c:eb:
                    f5:72:86:e9:6d:a9:dc:ab:8c:61:2c:48:bf:22:4a:
                    c4:2e:48:1a:b2:0e:e8:a5:95:6b:8f:d9:29:cc:ee:
                    bb:d5:4f:a7:77:2a:cb:71:c4:77:be:d1:af:48:81:
                    86:e2:c7:02:06:1d:88:20:3c:01:07:88:ab:bc:87:
                    60:75:b2:1a:5c:84:d3:e0:07:91:7b:da:90:e5:8d:
                    de:ba:a8:b5:99:4b:03:19:69:75:9e:6e:fa:92:67:
                    a5:c1:22:df:4d:30:77:d3:74:ca:9a:30:d6:95:6f:
                    de:59:f1:4b:25:29:74:8d:31:29:32:9a:c8:2d:e5:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:D6:AD:30:76:1A:6F:5B:A9:5A:C6:C1:F2:10:BA:02:E5:28:9B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/989efcd0-0044-4d20-b952-fbe2779d6e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:ad:8c:50:24:42:66:f0:f8:8d:28:2f:78:9e:d7:9b:2e:e6:
         b2:c5:c0:d4:8d:c7:0f:49:6a:7c:1b:ca:fe:f1:75:20:c6:55:
         6d:b1:f7:61:b4:b5:5e:83:94:ed:36:64:fd:ac:db:54:24:49:
         40:44:c1:96:46:db:d4:01:79:1c:bf:17:3b:4b:17:cf:ea:e5:
         a8:a0:d8:35:cc:8e:3a:95:d1:9d:84:c8:93:16:e8:85:64:d1:
         bf:c8:22:5a:ed:d8:4c:1e:1c:d2:2b:8a:ad:b8:63:03:fc:e5:
         73:01:73:c0:21:e5:dd:c2:3e:0d:5a:99:7f:33:7b:d8:d7:69:
         f9:95:60:e1:b6:64:4f:c7:ce:76:ab:e6:58:76:49:d1:f8:06:
         4d:29:59:e1:8e:b7:30:07:46:4d:af:dc:23:09:52:d1:20:50:
         4c:7c:0c:5d:2d:95:d0:7f:64:a2:ac:dd:f6:cd:7b:a0:1e:ac:
         91:fb:f1:d3:a8:05:f0:03:39:b5:d4:6d:42:82:ff:b4:bb:db:
         7b:7b:1c:26:c0:b2:c4:7b:4b:07:49:ee:dd:53:ea:9b:3f:07:
         d5:8e:8a:3e:24:54:f7:5f:53:de:eb:38:4f:c0:85:96:39:4d:
         84:26:88:43:b5:f7:06:69:f5:98:d8:79:ca:8e:21:08:5a:a6:
         7c:90:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----