Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00327f7-fbe8-40f4-9c0d-68fbc8252546.roa
File:                     c00327f7-fbe8-40f4-9c0d-68fbc8252546.roa (raw, json)
Hash identifier:          VECvMzGC7d+SBk41zIkPgfm+G0Yc6ICTcA5a1bHh++c=
Subject key identifier:   06:51:13:0C:E7:DA:F7:8B:81:4B:6C:0D:06:7A:8A:D5:EE:F7:86:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31DE36EEFE37D0ABB95B9ECB0A122D770CC8A2A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00327f7-fbe8-40f4-9c0d-68fbc8252546.roa
Signing time:             Mon 20 Oct 2025 03:10:45 +0000
ROA not before:           Mon 20 Oct 2025 03:10:45 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:36:ee:fe:37:d0:ab:b9:5b:9e:cb:0a:12:2d:77:0c:c8:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:10:45 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ad27a78b63ff9a7dd1def6d59917a2624985c64c522964823bd8a5a75736c03c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:72:48:6a:6b:48:a9:ed:18:88:23:56:dd:
                    d9:e7:13:c8:81:26:0a:0c:8d:4e:1b:81:27:48:89:
                    6e:8c:e7:85:c6:1f:24:ac:07:0a:1d:f3:19:7a:73:
                    9c:a4:5e:74:b2:10:c6:dc:56:17:85:59:dd:f3:1b:
                    06:f3:48:c5:91:8a:d7:79:3e:ff:74:09:77:d9:66:
                    2f:9b:9f:4b:78:fc:0b:bb:d5:1e:8a:b8:5f:38:5b:
                    31:c2:a3:96:0f:2c:51:64:b7:72:e8:6a:e7:48:e6:
                    22:a2:8d:15:68:41:70:a4:60:35:d3:3d:1f:1b:46:
                    08:ab:4d:1d:29:ef:aa:1a:af:25:cc:17:d9:e7:f3:
                    d1:6f:49:83:0c:22:b0:d4:b7:e7:93:c7:2c:5b:5c:
                    ec:8f:b6:cd:97:9e:a6:56:45:65:24:c5:85:c3:bf:
                    b1:bf:5b:28:59:70:05:8e:fe:85:ba:93:f0:b2:cd:
                    9c:75:dc:52:78:67:08:5f:5e:c0:d1:d4:70:e5:6d:
                    74:69:23:88:88:b3:56:59:be:d2:48:ed:11:3f:5c:
                    9c:7d:2d:b5:ce:a0:a2:d0:91:c7:6d:24:b1:1c:fe:
                    dd:c8:a0:9c:a8:e2:96:3b:fc:6b:76:5e:eb:b9:1b:
                    96:fa:7d:c6:55:20:c0:0f:1b:cd:4f:d3:2f:b1:15:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:51:13:0C:E7:DA:F7:8B:81:4B:6C:0D:06:7A:8A:D5:EE:F7:86:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c00327f7-fbe8-40f4-9c0d-68fbc8252546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:78:d7:b9:af:a8:c5:3c:98:b7:34:78:d1:52:ac:42:22:f2:
         06:9a:33:ef:8d:c6:46:d2:9a:4b:b6:c1:b6:57:51:7a:14:c4:
         6c:03:fd:83:b6:f6:f5:73:cb:e3:2a:51:c5:73:3c:dd:b5:82:
         c8:01:69:6a:f8:b1:eb:c5:44:2a:05:74:c7:13:61:04:30:17:
         44:b0:37:26:05:43:ad:fd:74:cc:9b:2f:52:e7:56:a5:92:e1:
         50:3e:b4:e0:de:2c:be:3b:b5:32:e2:ff:f5:b1:40:2d:2f:42:
         55:aa:fb:27:e6:a9:3d:7b:0f:59:3f:cd:75:15:12:1a:d0:c8:
         3c:f5:fd:b5:69:a2:6b:3c:7b:52:59:00:d7:06:dd:4b:10:a7:
         7a:03:1b:a8:5e:4f:55:a9:18:68:a2:13:38:cf:76:90:02:79:
         65:5e:95:6d:ee:d8:1f:3c:8d:91:9c:be:95:d9:d2:7a:53:8b:
         32:af:15:07:3a:80:35:77:38:98:c0:0c:5d:58:5b:0e:48:d4:
         3f:9d:ca:3c:00:e7:f5:3d:4a:37:17:a2:6b:17:35:31:e4:62:
         57:a2:d9:63:a0:e6:23:a6:17:c6:dd:06:7c:f2:94:ff:44:bd:
         81:d8:4c:87:7a:6e:9b:16:66:8d:ab:2e:a5:b1:c8:49:40:b0:
         2b:cc:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----