Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99826a15-389c-41f4-851b-59028548ef01.roa
File:                     99826a15-389c-41f4-851b-59028548ef01.roa (raw, json)
Hash identifier:          kpnXDMgzqiMk80YlOenuDY+WPN5e7Shz7CSC7ZJp/x0=
Subject key identifier:   C7:EB:15:B4:E3:F5:5B:82:94:12:62:34:B0:D3:93:16:8F:4A:98:43
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C4267123486D15438591118E4298C3795727EBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99826a15-389c-41f4-851b-59028548ef01.roa
Signing time:             Mon 20 Oct 2025 01:22:00 +0000
ROA not before:           Mon 20 Oct 2025 01:22:00 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:67:12:34:86:d1:54:38:59:11:18:e4:29:8c:37:95:72:7e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:22:00 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=e68133c9e2766e3b03784fce2d1539616ab13ef985041816c99b877226764be3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:4f:07:71:25:98:3d:a0:49:82:bc:2a:fa:
                    91:42:ca:da:63:76:12:b8:85:fd:db:b4:38:4e:0f:
                    a6:13:3c:42:13:6a:9f:ed:a7:e9:f2:e3:a4:af:7f:
                    8d:17:4d:65:f9:b4:8c:bf:70:f6:fb:f3:f5:58:9c:
                    2e:85:6c:83:bd:d3:09:6d:67:e9:ec:8b:06:39:02:
                    32:bb:67:a0:ac:4d:83:48:db:3d:7d:a6:d3:9c:69:
                    bf:0e:e7:25:e9:e0:45:e7:f4:1a:09:2b:85:2e:93:
                    3e:44:a6:4d:ca:87:e3:81:16:13:8b:79:27:14:a8:
                    ea:5e:f1:87:d0:76:c7:0c:eb:fa:f8:cc:f9:1c:18:
                    bc:b5:d2:87:88:e3:aa:99:98:e8:2a:3e:2f:ac:a3:
                    7f:68:90:41:bb:4c:72:7c:a9:cf:ba:c0:57:79:b4:
                    d3:3b:a5:25:45:01:72:49:04:3d:1a:3e:37:a7:65:
                    86:ad:57:3d:c6:02:32:a6:48:fc:42:ab:34:9e:02:
                    4f:1e:bf:49:c5:cd:8a:d5:7b:09:98:94:be:ba:40:
                    a7:fe:70:11:aa:86:42:c5:f9:0c:f1:33:45:a2:8e:
                    b7:f3:27:33:71:ef:dc:7c:21:7a:12:f3:d8:8e:aa:
                    2e:79:86:59:69:d3:23:da:ca:69:57:63:eb:b7:ad:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:15:B4:E3:F5:5B:82:94:12:62:34:B0:D3:93:16:8F:4A:98:43
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99826a15-389c-41f4-851b-59028548ef01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:4e:6d:a1:e5:22:a3:53:7d:ea:a4:cf:85:ce:61:fd:8a:
         88:90:70:c6:15:dc:6b:d7:c1:7b:9c:bc:09:1d:3d:be:c4:c8:
         2e:9e:06:8d:e2:69:71:24:da:2d:91:84:96:2e:6e:fc:34:78:
         1c:27:be:b2:4a:fe:75:2a:a8:ef:0a:5e:f1:1c:88:3d:92:73:
         da:88:9c:44:8f:ea:13:3b:ec:08:ef:5b:49:eb:97:48:b9:22:
         62:2c:a9:12:ea:fc:19:77:78:87:60:31:8b:0a:bb:36:ec:f2:
         da:90:08:db:8e:b6:46:05:0f:e3:f3:68:75:d4:64:27:55:d8:
         df:7c:3d:6d:c4:b9:1d:6f:34:b1:d7:3b:da:c2:8e:ff:fe:98:
         8a:c7:19:fb:15:47:a0:2d:64:e5:77:b3:3b:6e:ae:49:4c:da:
         f1:4e:15:8c:7e:c0:37:d0:54:3a:f4:d2:e0:77:fc:64:ae:c9:
         0f:76:e6:4a:45:14:88:21:ac:0a:1e:61:f7:3c:d1:96:05:53:
         9f:ae:3f:fc:49:27:14:2a:b8:8f:8b:b3:a9:cd:5c:74:73:46:
         cc:be:ea:06:05:b3:b6:86:13:cc:22:dd:a7:de:0d:89:35:ca:
         78:11:0f:bf:43:3c:d4:79:5a:cb:07:2b:8a:66:50:34:31:4b:
         a1:80:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----