Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9928636a-6d1c-42ed-a523-a27e7b5c8409.roa
File:                     9928636a-6d1c-42ed-a523-a27e7b5c8409.roa (raw, json)
Hash identifier:          FJNmScR8hV4Om1XoQmSER7c2CXB+pnTJpJiI/rrBxVI=
Subject key identifier:   DF:68:27:68:FA:D6:36:AA:40:74:97:C7:06:91:25:1B:28:0D:82:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4B25C136EC90F92439BCF5814886D86CE6C34B4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9928636a-6d1c-42ed-a523-a27e7b5c8409.roa
Signing time:             Sun 19 Oct 2025 02:41:27 +0000
ROA not before:           Sun 19 Oct 2025 02:41:27 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:25:c1:36:ec:90:f9:24:39:bc:f5:81:48:86:d8:6c:e6:c3:4b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:41:27 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=3288ee369172200fd251d6039e5dc1f661e2e6b5796f3bcbb9bc7e544d4f694a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:23:52:c7:67:36:2d:53:62:ff:d5:36:e8:
                    9f:ad:8b:54:2d:9c:df:59:66:ea:2a:3e:d3:ce:c5:
                    a5:a6:a3:9e:9b:bd:b6:28:2d:d1:8a:dc:55:23:96:
                    d4:3f:6d:26:b4:c1:04:89:36:4b:36:e6:2b:bc:83:
                    f7:63:42:9d:f2:05:5f:dd:0c:27:12:08:76:3f:2b:
                    f3:e5:06:9b:b8:64:ff:a8:68:a8:48:a5:93:bb:fe:
                    72:dc:3d:6e:62:1e:6a:28:04:bc:ca:b3:8c:92:c2:
                    46:02:9a:a6:a6:ef:90:d5:47:a2:11:a3:43:50:86:
                    80:89:85:f7:ed:85:55:2c:95:eb:e9:7b:c2:43:d3:
                    86:64:5e:5d:26:1c:29:9c:cb:3f:a1:e2:b3:07:fb:
                    d9:34:23:77:d1:1a:e1:7e:57:6d:f8:fc:a4:4a:34:
                    67:82:c5:fb:cd:0a:1b:94:36:cd:db:1f:0e:07:60:
                    08:96:06:b1:f8:12:64:e7:ed:42:85:02:15:1f:ab:
                    de:48:1f:be:11:09:f1:0a:14:3e:d0:20:ac:ec:eb:
                    54:8e:df:aa:84:1a:d9:6b:e2:70:63:ce:e7:4b:e4:
                    02:c1:4a:ae:51:e8:09:26:30:30:b3:f4:3d:fa:2f:
                    75:a9:61:dd:56:c9:e8:65:9d:03:c2:5e:59:13:18:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:68:27:68:FA:D6:36:AA:40:74:97:C7:06:91:25:1B:28:0D:82:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9928636a-6d1c-42ed-a523-a27e7b5c8409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:23:f5:29:30:4d:db:17:41:9b:da:b5:7f:79:c9:56:25:bd:
         9f:ee:cd:c3:b8:47:64:6e:f7:35:b2:83:b8:54:18:c0:ee:2c:
         01:10:02:1f:a7:6b:16:c9:4e:97:99:5c:cd:ce:9a:8d:41:10:
         2b:fb:d0:89:bd:3e:ff:21:b2:5f:b0:0d:b0:df:97:54:c3:96:
         85:38:a8:d5:92:59:63:89:56:fa:36:e1:14:4a:bc:08:30:b8:
         40:a8:00:28:96:5b:5f:45:7e:2c:c4:70:0a:4a:bc:b3:6e:e4:
         56:f4:d0:02:9a:27:e4:d6:d7:b9:64:1d:f1:b5:6e:34:c4:62:
         57:2e:5e:20:28:cb:15:07:97:af:c0:ca:aa:a4:94:91:4b:bb:
         e3:bb:9e:60:5b:87:a5:d7:e3:39:be:5c:25:3f:55:81:2b:74:
         0a:53:20:f1:5c:08:46:e6:47:3f:77:a9:ac:97:e3:75:d4:71:
         e9:19:7e:06:50:66:3d:79:40:df:34:e4:4d:f9:6a:ca:82:33:
         e3:6d:a8:a1:76:9a:d0:22:a9:b9:13:29:44:a5:80:bb:28:8a:
         d5:a4:62:e4:48:7c:b9:d4:d6:37:97:77:ac:0a:12:33:04:a5:
         79:06:75:11:08:31:c5:6a:01:1f:57:fd:88:b4:3f:28:25:50:
         ee:83:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----