Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6761ea7-89ea-4cba-803d-da1e6946f117.roa
File:                     b6761ea7-89ea-4cba-803d-da1e6946f117.roa (raw, json)
Hash identifier:          0aBma48xorgtXHv7qZc9P/7inUlAod5kL9WtKUFx66I=
Subject key identifier:   C4:8A:11:8D:3E:AA:B8:E1:82:8A:8C:89:09:CE:90:58:37:98:2F:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       056B9F308EF10BEA8A6389C0E3ED14199F89836D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6761ea7-89ea-4cba-803d-da1e6946f117.roa
Signing time:             Mon 20 Oct 2025 04:11:46 +0000
ROA not before:           Mon 20 Oct 2025 04:11:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6b:9f:30:8e:f1:0b:ea:8a:63:89:c0:e3:ed:14:19:9f:89:83:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:11:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0b703676e129b263387878837b36c9d9d13c07f8491f6eab0b2cc1718c056f68, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:8b:d2:0d:9f:e0:44:8d:96:eb:95:44:46:
                    78:e4:6f:73:00:98:23:42:69:a4:d6:72:74:87:c2:
                    7a:bd:b8:e7:88:e4:66:bb:d1:72:09:ee:31:d0:32:
                    1a:df:a7:89:4e:e4:7d:d1:12:58:0f:21:29:1a:19:
                    a1:2b:40:5c:40:61:6c:d6:cc:52:70:9a:05:59:d1:
                    93:3b:c3:a9:74:31:95:c5:e1:93:96:db:06:62:98:
                    d3:d4:63:89:a9:41:c3:30:04:61:e9:52:ae:dd:1c:
                    9f:28:67:92:1e:66:d6:db:c2:2c:e9:9c:5d:d6:96:
                    f1:bf:1d:a5:cf:b4:2c:30:8e:69:30:04:b2:b9:48:
                    6d:0e:f2:21:9b:b9:8a:b4:b8:0a:74:27:ab:f1:c3:
                    68:91:f1:ac:73:40:1e:26:db:c7:ea:20:06:83:f3:
                    b9:00:ad:c7:fd:f4:89:ad:be:90:41:f0:fb:33:b5:
                    ad:fd:87:ae:73:0e:19:3c:1e:3a:d5:67:6b:38:39:
                    92:af:ca:69:11:9b:23:40:08:27:c3:64:9f:43:53:
                    cf:d9:0b:11:a8:b7:87:dc:cf:88:1c:71:76:85:cf:
                    bf:17:d8:09:a4:2c:5e:41:07:de:09:41:41:56:f8:
                    e0:db:ef:8f:f5:72:51:0a:d2:e3:2d:6a:b9:26:6e:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:11:8D:3E:AA:B8:E1:82:8A:8C:89:09:CE:90:58:37:98:2F:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6761ea7-89ea-4cba-803d-da1e6946f117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:77:a1:58:36:b4:c1:35:a0:17:57:d0:fa:41:db:2b:50:
         93:07:9a:a8:b7:40:b5:f4:ad:75:65:02:36:ff:d1:ed:bb:d9:
         e9:e8:4d:54:d0:0d:e2:14:11:26:33:a9:77:48:a5:2c:7e:20:
         81:32:ff:e1:89:2d:88:c1:25:21:62:c7:d0:c6:a1:3f:fa:1f:
         df:dd:16:77:df:6b:57:f8:bb:91:72:42:46:44:06:c9:28:dd:
         48:19:a7:cd:59:2e:f0:0d:a9:16:dc:b7:1b:73:70:f2:db:13:
         cf:13:3e:1c:d3:45:85:21:ba:27:91:fa:89:b8:76:73:eb:b6:
         2b:ca:07:36:2b:b6:82:36:72:7d:41:81:03:ad:86:a8:df:07:
         29:61:29:e1:be:7e:b2:d0:1c:8d:f2:c9:1c:90:9e:90:41:ac:
         96:2d:2b:c7:bd:eb:b6:61:ad:4c:eb:a0:22:71:d5:6c:5e:52:
         a9:b6:fc:87:8e:07:cb:a4:84:05:91:cd:93:3a:ac:74:4c:9c:
         9e:e7:90:5c:35:1a:61:ea:70:33:5a:cc:33:aa:c3:25:6c:df:
         66:f5:47:f0:fa:ee:98:2d:28:8a:3b:1f:11:6b:77:b6:77:52:
         6c:5c:96:28:4a:5c:56:d1:80:b4:0a:bf:5d:f6:28:16:23:57:
         77:7b:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----