Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87fab83-7c36-4062-846d-0285c328c1a1.roa
File:                     d87fab83-7c36-4062-846d-0285c328c1a1.roa (raw, json)
Hash identifier:          Bfk5s2qkjfMbuzeg0VasioZ+SEx/k2h6T3KUzvwDGc0=
Subject key identifier:   14:F0:F2:1C:E3:EA:6C:57:1A:13:E8:C2:04:32:01:7C:92:2D:F2:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03D4E9B74533CA1A63C448DD2DE96339F3C80ACC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87fab83-7c36-4062-846d-0285c328c1a1.roa
Signing time:             Mon 20 Oct 2025 04:31:49 +0000
ROA not before:           Mon 20 Oct 2025 04:31:49 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:e9:b7:45:33:ca:1a:63:c4:48:dd:2d:e9:63:39:f3:c8:0a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:31:49 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=fabe4fac18719a990db3508570d458d270b0216fd1b610238af2bb6b714ffdde, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:73:2d:46:8f:56:04:81:a1:c5:c2:2c:9f:
                    45:6f:a5:9b:a4:bc:1c:45:d9:e0:0d:4b:bf:6e:8e:
                    cb:6e:7a:23:93:52:83:8d:25:ee:82:e4:38:66:14:
                    2e:85:d5:78:0f:37:0d:18:84:d0:ce:8a:e5:e8:c6:
                    50:c5:d3:6b:ac:37:69:e1:3c:95:68:33:ac:04:e9:
                    33:07:fb:81:b2:ba:14:5e:da:d0:9e:3e:32:44:16:
                    1f:b7:dc:45:7b:ed:e5:f7:5d:e0:5a:06:11:fa:b7:
                    23:1d:7b:4a:64:ec:21:b3:b7:5a:e5:c4:10:a0:94:
                    05:91:ae:40:48:44:d5:ad:70:1f:e9:3b:81:59:3b:
                    d7:1a:eb:70:fd:ca:a6:05:98:b7:09:25:2a:aa:90:
                    ed:92:43:80:61:c3:0d:dc:8b:b9:ac:65:7f:4c:bc:
                    25:f4:06:7d:11:fb:af:40:a3:85:3b:c9:6a:ab:07:
                    c8:d0:6d:81:70:ec:6f:32:b2:47:8d:ae:57:75:58:
                    b4:ad:de:49:bb:29:d9:80:0f:7b:e7:cc:45:a3:a8:
                    f3:4a:df:ea:dd:6a:21:b0:a2:51:50:32:d7:ee:1b:
                    a2:37:48:3f:94:c4:60:c5:fc:c8:76:a8:51:2d:86:
                    cf:69:47:19:36:49:d9:f4:47:9e:3e:60:d0:32:6c:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:F2:1C:E3:EA:6C:57:1A:13:E8:C2:04:32:01:7C:92:2D:F2:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87fab83-7c36-4062-846d-0285c328c1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:6b:bd:a2:34:71:04:e3:e8:ec:83:53:f7:ea:d4:e5:8d:
         6b:3f:79:19:3b:45:f3:e1:b4:c5:83:0d:0b:a0:64:56:64:42:
         70:13:b3:e2:c9:84:b3:f4:94:06:27:77:e2:a4:91:42:43:11:
         03:db:89:aa:69:9a:c5:93:44:a5:21:bf:74:96:2c:4f:87:88:
         76:db:05:56:53:59:ea:55:f1:97:b5:66:98:ab:21:dc:6a:ff:
         01:aa:94:d5:c6:ab:42:39:44:d4:11:ec:89:0b:b4:f3:50:6e:
         d3:ff:c6:c7:db:d0:44:37:4c:9a:b9:d4:f7:29:ef:55:72:20:
         e1:fa:68:01:30:15:7a:de:ad:76:0c:e5:ac:15:5b:f9:00:64:
         bc:fc:0c:07:b2:3b:e5:b2:f2:83:fc:48:b2:79:07:b7:f5:ed:
         3c:5c:4f:0a:0e:1c:89:95:b9:e7:d0:2d:25:d5:3f:a3:c7:75:
         a0:79:8c:01:d7:b0:8a:64:63:9b:36:48:d7:98:34:aa:1b:1e:
         c0:48:ae:1e:bb:6c:51:f3:6b:73:18:4c:6c:1b:db:82:05:d4:
         8b:f9:2d:62:38:4a:21:ad:a0:88:8a:b4:d3:f2:1c:35:4f:64:
         f7:81:49:d2:2c:40:0d:61:02:3a:08:43:25:1a:b7:fb:0e:69:
         39:a7:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----