Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80fa08-cc91-45fa-bffb-2a65db3f2e9a.roa
File:                     cf80fa08-cc91-45fa-bffb-2a65db3f2e9a.roa (raw, json)
Hash identifier:          KgmIDzMyPeMiTyYAdHR2FZQ9syNU7QE7WW7ani4f1kc=
Subject key identifier:   37:F8:7B:E0:5D:2B:DD:39:89:25:DA:7A:CD:14:13:FF:11:5C:4B:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F36333446D13C63C93A0FBBB4829A28D32C3E5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80fa08-cc91-45fa-bffb-2a65db3f2e9a.roa
Signing time:             Mon 20 Oct 2025 06:10:50 +0000
ROA not before:           Mon 20 Oct 2025 06:10:50 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:33:34:46:d1:3c:63:c9:3a:0f:bb:b4:82:9a:28:d3:2c:3e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 06:10:50 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=1151a3bf7033cd1c022a672b3c4bc13eecff043602d2e598e7c5ef124374438c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:aa:36:ee:2e:f6:a1:53:8f:13:7e:eb:11:
                    aa:8e:29:de:90:0b:46:77:76:4d:c2:8e:1b:22:5e:
                    76:1a:94:1c:b7:27:97:37:e2:11:a4:05:8d:81:ce:
                    e2:bb:00:db:58:3d:1f:ba:89:d9:15:74:32:44:1a:
                    76:ee:84:e4:2c:5e:7e:26:24:34:dd:06:25:0a:26:
                    b7:e2:1f:ef:7e:7a:61:56:43:3a:68:dd:a5:98:a6:
                    cd:d1:e5:93:e6:24:8f:6f:8e:de:11:d4:da:6a:86:
                    6d:25:fd:a8:ed:51:3c:86:ec:d2:05:8a:d0:af:c5:
                    b6:b5:29:99:ba:97:0e:7c:90:e9:4d:63:de:31:b0:
                    b1:7a:e7:45:d2:c8:7e:53:91:f1:9c:84:dc:3d:d9:
                    ea:cb:cc:59:12:46:70:78:ec:46:8b:23:7f:0f:73:
                    ec:22:3c:f1:74:5b:39:b8:d6:4c:ad:86:ae:73:51:
                    c4:f6:85:82:a5:e7:b9:d2:2f:25:2c:46:f6:d6:4b:
                    be:f7:94:92:18:42:0c:62:bc:4b:9a:6a:2d:6b:51:
                    a0:44:41:86:08:6c:a7:d4:9a:2e:37:b4:18:66:79:
                    13:0b:a0:70:b9:de:8f:8f:24:b2:63:7c:73:ea:59:
                    45:be:28:f6:2f:e5:0e:27:6b:4f:0a:df:23:a4:3d:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:7B:E0:5D:2B:DD:39:89:25:DA:7A:CD:14:13:FF:11:5C:4B:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf80fa08-cc91-45fa-bffb-2a65db3f2e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:ac:c4:6b:c8:8d:4f:92:af:ad:8d:7b:87:3c:12:eb:86:
         ef:6e:88:e8:5b:3b:5b:c1:1d:a7:01:d5:80:eb:5c:28:92:b1:
         fa:6a:7c:9c:33:cd:fc:ce:5b:56:3d:ba:35:2f:b8:65:1b:07:
         84:5f:8b:c1:be:6f:7a:28:d9:33:7c:24:4e:ff:c9:2b:2c:0b:
         8b:81:f1:e5:e2:ef:f2:b2:21:f1:e7:0d:ff:ee:20:fd:86:8e:
         a6:9e:92:60:ca:92:9b:57:28:ef:3d:19:8d:ea:f5:da:c4:86:
         5a:57:4f:40:48:3d:51:38:10:c5:0f:de:86:33:b8:2a:c3:41:
         b5:bf:20:a1:e7:dc:ec:69:a6:45:bf:7e:f4:fc:40:f1:40:a3:
         6a:46:13:53:e0:bf:8a:31:dd:12:6b:89:4c:21:24:62:11:28:
         0a:a2:03:ae:ab:cd:c4:8b:c5:3f:ad:6d:56:66:a7:c6:69:32:
         d7:ca:46:d6:2b:c5:b6:27:90:32:b5:55:7c:7c:5b:a5:69:fb:
         92:d3:3c:3e:f3:24:b8:a0:35:d7:ea:5b:fe:6c:c7:8b:01:44:
         7d:02:94:66:c1:29:58:f8:cf:8b:d8:46:56:40:dc:99:bf:58:
         86:e2:d9:1e:76:4c:27:66:9c:ab:40:49:68:bb:b9:da:f3:fd:
         6c:67:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----