Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d260b628-c714-4f62-a9bd-ae7bc191a74a.roa
File:                     d260b628-c714-4f62-a9bd-ae7bc191a74a.roa (raw, json)
Hash identifier:          L3AeE3/NLiLs2Jy0HMSKAcuwl4odzZrmjbTOxmTXgYA=
Subject key identifier:   D3:CE:E4:3A:21:45:80:42:32:2A:27:54:E9:A9:7F:5F:C9:34:EA:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6900A803CD71B85D7D2504FF44635711C5F212D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d260b628-c714-4f62-a9bd-ae7bc191a74a.roa
Signing time:             Mon 20 Oct 2025 03:30:22 +0000
ROA not before:           Mon 20 Oct 2025 03:30:22 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:a8:03:cd:71:b8:5d:7d:25:04:ff:44:63:57:11:c5:f2:12:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:30:22 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=89a28e37495d2d8b61a116afafdd589c145d33468a9d6db29f98d18737334a9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:62:24:cd:2b:d0:dd:cb:9a:e2:e0:20:54:
                    7e:6b:84:b4:93:5e:a3:89:fe:cc:f1:fa:f2:3d:d9:
                    4c:82:c7:9e:81:ad:d6:9b:b5:d9:1a:bc:ef:8f:b1:
                    bd:5c:dd:8d:03:32:da:c7:eb:14:c3:66:94:63:9e:
                    bd:03:76:8e:0b:f1:f2:f9:7e:30:da:5f:b5:de:ea:
                    02:9a:8c:ef:57:36:25:08:c4:cc:09:c0:46:86:fb:
                    9a:10:e8:c5:58:9c:0f:47:a3:9e:63:71:e7:9a:d3:
                    59:52:db:7c:fa:dd:77:e1:ea:81:80:17:ba:cb:b6:
                    b9:7a:38:36:85:d6:56:09:91:b1:f4:33:ff:0c:35:
                    3f:29:6a:ad:88:cd:c3:07:7c:89:9d:9c:fe:fd:a8:
                    7c:cd:ba:ca:c8:c7:a9:ee:eb:5c:c6:9c:29:53:71:
                    0e:af:a1:3c:14:86:92:79:14:b8:fe:6a:66:d8:d7:
                    cf:9e:3f:ae:8b:d0:7c:a9:46:8e:b4:43:d6:a1:da:
                    fe:f5:27:24:bb:3f:d0:05:3b:d9:d6:84:a4:de:77:
                    10:f6:63:d0:f7:d5:1f:5f:94:49:43:b0:6f:d7:26:
                    70:c6:f8:6f:02:5a:29:78:b8:82:97:95:ec:c7:02:
                    86:e1:d8:ea:39:40:32:24:63:77:de:77:ec:2d:f5:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:E4:3A:21:45:80:42:32:2A:27:54:E9:A9:7F:5F:C9:34:EA:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d260b628-c714-4f62-a9bd-ae7bc191a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:7f:66:aa:e3:be:53:03:59:3a:e0:2f:d8:ce:7f:63:90:
         ab:e4:f3:0a:7b:f9:47:53:3b:7c:37:f1:e3:80:b9:ab:e5:75:
         1b:1b:8c:fd:e0:d2:4e:f7:84:6e:7e:d7:45:b1:5f:99:bb:af:
         d6:05:87:d7:18:72:01:d5:50:b9:52:e8:2f:3a:2e:d2:04:8f:
         04:7e:31:dc:34:3a:0f:51:90:81:a2:4d:02:a3:ff:f8:a4:87:
         63:27:c9:61:0b:8f:61:3e:76:80:f5:a5:0a:e7:6b:fd:31:8a:
         a2:da:1c:a8:f9:ff:05:67:91:39:e2:10:1e:c6:86:68:5a:40:
         1d:e9:9d:89:d0:a8:cd:8e:c8:66:42:a9:1a:f5:b9:dc:ef:fc:
         46:05:19:51:39:6c:e8:75:f6:7b:ec:49:52:5a:a2:bb:3b:75:
         61:c3:94:0d:2d:3c:11:be:83:11:db:c9:6f:40:7b:08:69:7c:
         9c:31:98:10:53:1f:81:06:4f:79:c6:a3:9f:c0:c4:ab:fa:3a:
         87:84:ef:d2:00:95:b3:b5:66:d1:30:bc:51:2d:69:7e:38:ea:
         0d:f4:10:34:c8:07:37:f6:c2:61:63:5b:33:6d:8f:45:cc:c1:
         30:11:67:c7:c0:7e:8f:ac:03:99:e2:2d:a7:9e:c2:0a:3d:a3:
         c4:ee:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----