Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fa1982d-8267-46ca-941c-92b03ef77f56.roa
File:                     9fa1982d-8267-46ca-941c-92b03ef77f56.roa (raw, json)
Hash identifier:          pROEe2fF5UQ9jLai2hx3BBdHbBFH+jUuSuVOO25ZOGA=
Subject key identifier:   39:BA:F2:CA:37:D1:EB:E6:3B:C8:F3:B6:E4:57:3A:62:E4:3B:14:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F56D57A42FDD1A4CE45072DC9B17234D77701A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fa1982d-8267-46ca-941c-92b03ef77f56.roa
Signing time:             Mon 20 Oct 2025 01:21:31 +0000
ROA not before:           Mon 20 Oct 2025 01:21:31 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:d5:7a:42:fd:d1:a4:ce:45:07:2d:c9:b1:72:34:d7:77:01:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:21:31 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=251fb301d48e500cc8174cbfb2aad1e80470a9d84d6e20dcce1929ba706ab4b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:9a:f0:6d:04:c9:c0:2d:fe:38:7b:2f:aa:
                    42:6d:41:41:a3:ff:42:27:ce:c3:d1:cc:f4:6c:b4:
                    bf:e6:2e:43:61:9b:61:c1:e9:57:48:ec:e0:7b:69:
                    88:7e:4f:1c:90:84:18:de:2f:ec:01:53:e3:8d:08:
                    c5:5d:39:83:6a:5b:c0:ba:e3:72:7a:83:2d:e9:fc:
                    38:c3:58:f4:9f:26:a8:a6:65:84:16:51:fa:8d:88:
                    e3:93:db:3d:0a:b8:d8:a4:69:14:6e:cf:17:87:25:
                    11:ad:10:c7:6d:1d:89:3b:ad:45:60:4c:c7:ce:de:
                    0f:22:39:69:bf:21:0f:aa:b5:81:06:0a:ff:0f:af:
                    85:7b:d8:b2:84:0a:b7:ba:fc:db:98:88:42:60:41:
                    e9:4a:90:6c:7d:78:e1:e3:66:3f:e1:82:7c:75:cd:
                    85:85:03:26:34:46:3f:80:2c:61:d8:28:71:1c:06:
                    9b:8c:e9:bf:99:0d:23:f0:04:0f:11:9d:1b:9a:21:
                    5d:5d:28:14:e5:ac:a0:b1:ab:64:99:d6:cf:72:90:
                    9a:c1:3e:6b:75:21:ff:7b:1b:f3:4c:2d:27:97:57:
                    2d:d2:c5:ed:69:bd:e4:d6:f5:44:27:36:8d:44:48:
                    ef:03:b6:12:3a:41:d9:a3:4a:6f:92:46:82:e3:d3:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:F2:CA:37:D1:EB:E6:3B:C8:F3:B6:E4:57:3A:62:E4:3B:14:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fa1982d-8267-46ca-941c-92b03ef77f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:a4:d2:52:e1:fb:b9:3e:a0:49:64:0e:90:09:23:2d:98:
         cd:1e:1a:05:e8:f1:d6:b8:31:dc:a2:2b:ac:22:d2:80:93:b9:
         16:6d:de:b9:aa:38:74:db:40:8f:fb:b1:e0:2a:c2:aa:56:f2:
         ab:d9:80:9a:36:b7:b1:a3:70:d4:90:c0:fb:73:2f:4c:20:8c:
         90:36:e1:d4:2d:e0:98:a4:6a:7b:dc:e9:d4:97:a9:10:4b:47:
         65:9e:8f:fc:32:6b:45:72:9b:d9:8b:df:59:91:c5:c1:25:9d:
         4a:d3:55:6c:bd:ce:ee:06:cd:f0:1a:05:43:76:ad:8c:ea:c6:
         05:6e:fe:12:33:54:ba:6a:60:a8:aa:04:b3:42:2b:66:4e:29:
         83:2a:05:4c:71:67:0d:f7:71:f5:c3:19:c6:53:9d:9a:8d:b6:
         a7:19:25:39:f3:35:0c:38:d8:38:0e:0c:03:e9:f2:b6:d8:23:
         9f:79:37:2d:e9:a1:26:f3:27:fa:1d:b6:28:ac:23:ce:75:d2:
         95:98:b1:a2:51:4d:02:e2:66:63:f7:df:66:00:13:d6:5f:59:
         08:e5:78:b9:e4:f9:27:c4:33:29:df:73:85:38:47:06:73:91:
         ea:58:a5:bc:5e:09:e0:32:9a:6c:e3:e4:e4:c9:40:ba:d0:8b:
         f0:a0:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----