Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfc029fa-3e26-4200-80ed-8a6bc8d44782.roa
File:                     cfc029fa-3e26-4200-80ed-8a6bc8d44782.roa (raw, json)
Hash identifier:          jJerl2rOGwAkDx+rG3BI7quEEjZivRt2oD2ugX8iLH8=
Subject key identifier:   40:39:13:E6:4A:5E:74:99:0D:33:93:E7:B0:CB:7B:25:DE:D2:A4:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52DEF6ACF444814A0825DD8C978B42D6E32C354D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfc029fa-3e26-4200-80ed-8a6bc8d44782.roa
Signing time:             Mon 20 Oct 2025 00:50:06 +0000
ROA not before:           Mon 20 Oct 2025 00:50:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:de:f6:ac:f4:44:81:4a:08:25:dd:8c:97:8b:42:d6:e3:2c:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:50:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=8b59cce202e840e5cfd37f5f625871bfc47e79e387d2a56d688cf6aadfb0b059, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:45:ad:dd:13:23:0c:02:b0:09:0d:98:79:
                    bb:1b:02:4b:5c:1f:fe:ad:e9:4f:7e:1f:73:3a:37:
                    cc:4d:01:1f:22:ca:2a:18:33:fd:aa:b8:e7:ef:ca:
                    1c:51:6e:79:0c:4d:5f:f5:23:65:fb:0f:76:c8:32:
                    ad:48:75:b0:49:6d:cc:79:08:8e:80:3b:7e:64:13:
                    b8:17:b5:2b:d6:94:d0:cf:8b:4f:67:6c:c0:1b:25:
                    d7:b3:7b:0d:2c:be:10:8f:28:b9:90:ab:0e:d1:d1:
                    12:5c:85:c9:47:b3:93:58:bc:a3:6b:a9:da:d7:77:
                    78:ba:71:35:85:da:01:a6:e2:f8:10:27:14:3b:55:
                    fa:fe:b2:ce:bd:4a:51:8f:19:8e:2d:ea:9a:be:00:
                    93:33:bd:e6:60:ec:ff:25:3d:f5:c2:4b:d5:63:c0:
                    05:4f:f3:bc:27:97:c2:60:e9:8b:c7:4e:69:e0:27:
                    4f:1b:54:a2:d7:bf:7f:fa:30:d5:f2:b9:8e:3f:fa:
                    e4:0f:9a:dc:86:ff:32:8d:aa:72:c8:87:73:94:35:
                    4c:5f:3f:ab:4f:a5:50:bc:94:19:09:15:64:3c:6d:
                    31:d5:31:39:af:e1:cc:37:4a:26:8c:4c:53:61:31:
                    46:19:92:da:e4:2e:cd:a7:5e:1a:cc:0e:01:16:a6:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:13:E6:4A:5E:74:99:0D:33:93:E7:B0:CB:7B:25:DE:D2:A4:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfc029fa-3e26-4200-80ed-8a6bc8d44782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:4d:6d:41:ab:b1:c5:6b:d5:f0:61:ba:67:e7:45:cd:5a:
         84:57:34:4c:1b:d9:f0:35:b6:96:23:3c:70:23:70:82:48:c7:
         da:75:e6:a4:89:d1:e3:fd:fe:4d:1f:74:ca:71:49:15:2e:ea:
         dc:3f:8a:48:25:de:7e:6f:c1:1b:b8:60:29:aa:88:11:67:d7:
         4c:3f:92:67:94:7a:c1:a7:fe:54:f3:69:ff:a7:32:07:ab:ce:
         ab:d7:c1:ab:d6:c7:fc:12:cf:a8:48:fe:ab:e7:67:09:05:cd:
         ec:2f:f7:e7:7e:80:49:2f:0f:83:56:d9:2c:0a:69:03:0c:13:
         f5:8b:e5:a0:ee:2d:6e:03:86:f8:70:21:9c:fb:9c:11:3d:4f:
         9e:7d:59:5a:64:0c:1a:d9:bb:32:b2:4f:c0:07:91:6f:f4:03:
         2e:0b:a6:20:05:f6:3e:12:9c:e6:e8:ee:60:86:c8:f0:80:27:
         c6:c7:e9:b2:f9:21:76:25:1e:1a:21:40:86:d0:5d:0c:04:6c:
         ad:a3:63:9c:6a:36:a2:3a:c6:85:3e:31:d9:38:1c:38:4e:8e:
         1a:e1:b4:26:98:f3:17:fb:4d:67:ef:f4:9c:e3:5b:86:83:4c:
         42:03:fb:15:8c:6f:c3:d2:8d:bb:a3:19:21:89:f4:f2:1c:d5:
         b8:0f:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----