Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeddb072-b3cd-4e07-979e-25397d36bf9a.roa
File:                     eeddb072-b3cd-4e07-979e-25397d36bf9a.roa (raw, json)
Hash identifier:          P4+zBWtxZgWj6QYKLclnGV9M6X7tNBRAbodRmTtcR8c=
Subject key identifier:   F3:CF:DA:7D:B4:C9:45:50:66:CA:F2:DC:7F:03:75:EB:C6:F0:E7:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       613AEE31823E80974DCC19EA84B7FEBA1B072584
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeddb072-b3cd-4e07-979e-25397d36bf9a.roa
Signing time:             Mon 20 Oct 2025 01:00:46 +0000
ROA not before:           Mon 20 Oct 2025 01:00:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:ee:31:82:3e:80:97:4d:cc:19:ea:84:b7:fe:ba:1b:07:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:00:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=e9cf8fe3989abb52bb315ef31c4207f11f246bb1e87348a0e4f4c0cfba5841a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:ed:99:87:ac:13:fc:41:c8:b6:d8:76:5f:
                    eb:b3:ce:ef:e0:4c:74:17:c7:58:38:8d:ba:16:ff:
                    d0:6e:ed:96:bc:f1:34:07:e5:12:06:6c:18:cc:7d:
                    ad:b6:5e:23:a6:5b:74:71:e1:d1:e2:72:96:79:00:
                    7c:f6:fb:43:55:97:80:e4:da:e6:49:f5:97:b5:37:
                    db:9c:71:d4:3c:01:c2:6d:94:13:d7:ce:7d:21:1f:
                    dc:81:d7:e2:d4:e8:2c:1d:5d:0e:50:30:d6:59:a2:
                    84:ca:40:03:d5:41:15:80:36:29:27:be:7b:65:c8:
                    7c:0a:3e:2a:88:4f:80:f1:93:dc:01:ce:77:ce:0c:
                    6d:1e:33:77:d0:ee:c4:45:ac:b2:14:85:4f:c4:11:
                    b0:cb:17:b8:62:30:34:d6:f5:c6:93:5c:d4:b0:e2:
                    84:b7:9f:3c:6b:24:7f:9d:7e:5e:22:d1:94:9c:10:
                    81:c4:fd:24:81:8e:40:68:f6:fe:0c:d2:5f:a5:c3:
                    b8:8e:7a:8e:b2:7f:ea:c4:f8:27:6f:a0:69:60:18:
                    ab:32:00:ba:ca:21:dc:d2:46:75:98:08:96:a6:96:
                    d1:0a:4f:e8:ca:30:b4:7f:34:20:79:4f:d7:9b:70:
                    fc:8e:08:1c:80:1c:9e:1b:c3:d3:7d:0b:ab:b9:59:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CF:DA:7D:B4:C9:45:50:66:CA:F2:DC:7F:03:75:EB:C6:F0:E7:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeddb072-b3cd-4e07-979e-25397d36bf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:80:f9:0c:4b:fe:cd:27:8c:48:14:11:c5:4e:d9:18:a9:
         06:09:c9:ac:55:30:07:c3:fe:e2:3e:28:a7:6e:2f:30:aa:dc:
         2c:04:2f:01:88:c5:9d:ff:cc:51:8d:cb:ed:c4:05:7a:19:f0:
         a6:96:22:63:ca:47:85:97:78:1f:56:de:a0:fc:c4:81:2d:25:
         30:50:b3:d2:ab:1c:aa:61:2b:8f:55:57:95:49:dd:13:d1:0e:
         06:e0:e8:d4:68:4b:67:a0:31:c2:0a:e7:d9:c7:f6:25:40:cf:
         1f:c7:a2:3d:2c:9c:8d:e4:4d:5f:88:30:bf:6b:e2:8d:93:da:
         b7:4d:ec:9d:c3:e6:fe:3c:67:da:76:1d:05:93:36:70:74:77:
         9c:7a:ca:a0:4e:0c:fd:8c:a6:1a:37:0c:c9:f9:5d:18:f6:b0:
         98:40:bc:3f:36:c3:cf:fd:ce:b1:67:b4:27:52:9e:6e:74:0e:
         71:9e:2d:60:37:97:d1:4f:a0:fa:a5:54:65:d7:eb:9d:bb:c8:
         d7:fa:50:4d:b4:ad:84:01:b0:37:34:00:b8:40:87:7e:38:3e:
         c7:f5:25:c9:76:c9:34:8b:3f:c3:30:31:a6:c2:e1:f9:9d:c4:
         dc:16:f2:fe:13:90:27:ee:34:78:c1:63:59:7d:dc:62:cf:7d:
         f1:7d:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----