Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc56b77b-2213-4964-8845-b8eb533f36be.roa
File:                     cc56b77b-2213-4964-8845-b8eb533f36be.roa (raw, json)
Hash identifier:          XtYW+0r+gEm3C9PfZRrpaVQ2gq8bZY4unbECm2NP+MM=
Subject key identifier:   39:FC:67:B0:64:7F:80:FB:2F:60:FE:70:7B:DB:E6:70:A0:9F:6C:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D8936B9A35D75CD46DEF97F870EF3FB1B68AF99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc56b77b-2213-4964-8845-b8eb533f36be.roa
Signing time:             Mon 20 Oct 2025 03:52:07 +0000
ROA not before:           Mon 20 Oct 2025 03:52:07 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:36:b9:a3:5d:75:cd:46:de:f9:7f:87:0e:f3:fb:1b:68:af:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:52:07 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=301da607de6f0fa827da0d9d216d7fcfe19bf50a23170bbae8844b829bd767d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:23:17:81:ee:a7:82:80:9f:a4:21:a2:b1:25:
                    40:e7:c7:b9:13:24:71:41:3d:b0:ce:ac:fb:de:fd:
                    b3:cd:74:c5:28:69:01:10:ff:40:1f:a5:5a:93:25:
                    35:05:e1:07:4c:58:1b:53:0f:2f:f7:07:d6:b0:87:
                    ef:03:05:f8:b6:10:4f:28:91:a5:2a:e1:85:15:cb:
                    a8:6b:23:14:66:0b:71:85:6e:54:bc:9b:fc:c1:da:
                    8e:62:d8:72:db:dc:5d:dd:3d:b1:dc:d2:9e:ba:5f:
                    50:6b:5e:bc:f4:5c:1c:61:4b:c5:f4:de:2a:d3:a8:
                    97:ce:14:62:15:43:7b:bc:54:a7:63:f1:59:c3:2b:
                    67:1a:38:43:ac:d1:62:ad:3f:c6:e6:22:13:58:71:
                    4d:aa:c0:0e:35:82:c0:f6:fa:2d:14:cf:f9:5f:02:
                    d9:4d:32:e4:dc:2c:da:7d:4c:f7:79:e5:10:46:5c:
                    44:53:7c:e1:2b:22:7e:e1:03:c4:4b:99:10:78:19:
                    ff:87:10:fb:37:c1:24:4d:72:93:b4:c9:b1:22:13:
                    3a:e0:14:07:f2:a4:45:cd:4f:9a:8d:40:68:41:20:
                    cd:30:54:90:77:bb:14:76:fe:86:87:1d:16:a7:69:
                    bc:cb:55:66:1c:c5:07:25:31:7d:bf:a8:ed:16:c9:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FC:67:B0:64:7F:80:FB:2F:60:FE:70:7B:DB:E6:70:A0:9F:6C:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc56b77b-2213-4964-8845-b8eb533f36be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:22:e3:cc:9b:8c:ee:bf:7d:d5:31:e1:5e:f9:81:92:14:e6:
         e2:86:e8:b4:dc:ec:8d:7c:7a:05:78:7c:f2:a7:68:cd:61:d6:
         fc:f7:e2:0f:a0:72:c3:62:54:01:32:96:26:04:ae:ed:6e:89:
         be:ee:9b:e2:55:76:84:da:f0:44:f9:f8:49:58:58:90:28:f6:
         9a:d1:d0:dc:3a:f7:af:5f:73:87:c7:69:8b:5d:64:4a:6c:35:
         64:e8:4a:45:5f:2e:75:e3:11:ea:ab:c3:09:8c:f2:96:ce:27:
         b5:6c:20:60:35:0b:aa:25:f8:f7:b9:07:92:35:d3:1f:cb:c5:
         d1:4c:78:83:a9:03:f9:1e:bb:57:0a:25:62:7a:03:6a:46:3f:
         fc:65:f3:5f:81:62:ad:86:ff:71:83:53:b7:1b:bc:a0:d2:62:
         eb:d8:cd:72:96:32:01:a0:48:6f:74:32:26:70:fc:17:7e:8d:
         a9:62:a9:33:78:1f:f1:c3:29:b5:d5:85:ec:a7:b8:1c:0a:31:
         74:2d:d2:cb:40:4b:96:b7:84:8c:d0:15:2a:48:a0:8e:6e:5b:
         bb:99:8f:e1:8c:0e:14:7e:b2:f0:00:dd:09:8f:e6:55:a6:16:
         6c:bf:d6:55:0c:99:db:1d:05:4f:7b:b9:b7:24:7e:98:a8:78:
         c4:22:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----