Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe7056e-5703-40e3-874f-062829367346.roa
File:                     ebe7056e-5703-40e3-874f-062829367346.roa (raw, json)
Hash identifier:          LMt5vNZgg/ajKHutdiK3SVAcQLnOWBEucQbqjtLFto4=
Subject key identifier:   56:BC:C4:1F:85:8A:B1:41:32:88:82:9B:8D:84:CD:0D:65:41:88:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DDAB3C647E7AABDB612F677CE8C8EA0B16782FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe7056e-5703-40e3-874f-062829367346.roa
Signing time:             Sun 19 Oct 2025 03:01:25 +0000
ROA not before:           Sun 19 Oct 2025 03:01:25 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:da:b3:c6:47:e7:aa:bd:b6:12:f6:77:ce:8c:8e:a0:b1:67:82:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 03:01:25 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=46ad4f44e4d5682ebc591811c4701628a348f6ae06dc27516bbe9f1cfc5d7040, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:b6:c7:0d:2d:ba:82:a1:60:77:38:ba:22:
                    c0:d3:fe:91:dd:23:51:86:c5:f2:e5:66:fe:ad:82:
                    a7:71:50:03:8b:ea:99:9e:9c:c1:fa:93:84:9f:52:
                    5e:7d:a4:b8:30:b9:a6:ff:3e:0d:38:aa:f2:83:ba:
                    a8:06:78:9d:5b:09:27:3a:d4:84:18:76:e8:6f:fb:
                    cd:99:02:86:f0:36:ae:45:71:ac:eb:ab:3d:19:2c:
                    58:55:9b:a6:53:51:7c:06:bd:ba:81:a5:e6:1d:8f:
                    33:db:06:63:1e:c5:56:86:90:b8:31:0c:c3:85:84:
                    74:80:f5:31:04:69:98:78:84:6b:9d:86:c7:0c:12:
                    23:5b:50:d3:98:7e:f1:01:aa:b4:9b:51:0d:b4:be:
                    b9:e3:52:96:bf:de:c3:3c:0d:22:83:ff:74:53:2a:
                    88:3c:e9:97:47:3f:2f:55:91:5b:90:48:8d:14:9a:
                    f0:28:03:a1:37:b4:2f:90:dd:1a:d9:d1:4d:aa:13:
                    ae:73:cf:04:96:2e:70:fb:7a:99:47:31:ca:66:0b:
                    8b:db:21:14:ad:2f:a8:0b:6f:4c:8e:1d:08:1d:44:
                    41:eb:7e:99:b1:e7:1c:c8:b0:21:90:b1:d0:6d:73:
                    59:ac:04:b5:82:86:2d:45:7e:09:9b:2a:e0:b1:81:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BC:C4:1F:85:8A:B1:41:32:88:82:9B:8D:84:CD:0D:65:41:88:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebe7056e-5703-40e3-874f-062829367346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:5f:a1:60:2b:0d:75:d9:a0:99:fd:af:09:67:18:a2:2f:
         60:c4:13:c3:b9:b3:59:37:49:33:55:85:6d:cb:c7:c9:15:cd:
         19:cf:78:c3:e9:58:4e:28:85:93:3d:38:c7:c9:ae:48:33:9a:
         95:50:e6:eb:57:b2:e4:a0:18:c8:8f:26:b0:17:c1:e5:d3:53:
         5e:49:85:0f:61:ce:1c:20:af:57:34:74:1f:e3:e8:b0:45:e1:
         b4:23:d2:34:22:a7:92:f9:d4:ed:ee:d2:9c:08:f7:e4:cd:dd:
         0d:0d:a3:9e:12:51:c9:ee:2d:87:c3:08:5b:b1:fd:2b:ed:19:
         f2:c2:4d:88:85:54:e1:53:30:be:5b:a9:90:3c:69:f8:03:ad:
         25:b3:9a:42:b3:92:9b:6b:8d:72:ef:4b:38:d7:2f:42:19:26:
         3e:6a:8f:f3:37:c2:69:d5:01:31:d7:c8:ec:ab:9e:a8:ca:51:
         0d:9e:e5:d8:6b:56:19:2c:cc:5c:6d:19:94:6c:a5:9d:31:15:
         c7:fd:46:5d:16:e8:88:83:72:1a:3c:7d:a0:d7:d5:d0:2d:f5:
         61:86:10:87:57:b9:6e:a3:8b:c9:14:7c:12:b3:d6:a6:ad:c9:
         c3:db:ab:ef:d4:de:cd:7e:f9:e1:63:93:c9:69:bc:29:b1:4b:
         23:f3:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----