Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efaedfe7-120e-416d-97c7-43bbfbe81e11.roa
File:                     efaedfe7-120e-416d-97c7-43bbfbe81e11.roa (raw, json)
Hash identifier:          y6DbVu8Yt3r7NiEBpWiAQk0vUGnG5TttzIWaW4eJKTI=
Subject key identifier:   ED:3A:38:B5:E3:9E:25:DE:9F:25:8E:85:18:1C:DC:7E:E2:75:9B:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F3941D3532466B8F88CCC5ED24B68A69133FB18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efaedfe7-120e-416d-97c7-43bbfbe81e11.roa
Signing time:             Mon 20 Oct 2025 04:21:22 +0000
ROA not before:           Mon 20 Oct 2025 04:21:22 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:39:41:d3:53:24:66:b8:f8:8c:cc:5e:d2:4b:68:a6:91:33:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:21:22 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=37e5ca2a3c40c792d68a573df91be722683abc3f5401a9e9247e7f25cb7a4120, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:03:e4:60:66:ba:de:04:c8:be:ed:f5:f1:
                    29:ff:be:b9:02:b7:b5:82:d0:0b:b1:28:50:cc:b7:
                    18:61:f2:c9:9d:81:98:e2:2a:69:28:34:91:21:41:
                    ca:be:29:b7:95:17:66:8e:65:eb:4d:d5:a4:fa:e2:
                    d0:4b:4f:60:fb:45:56:d5:b8:c6:3a:ea:e1:8b:3b:
                    27:c7:73:a8:b6:5c:f6:96:64:8d:06:3a:41:77:aa:
                    19:27:0d:60:b3:a7:27:3a:a7:6e:7a:b3:3c:61:40:
                    79:21:30:cd:78:92:91:33:d1:d2:1f:8d:82:98:56:
                    b8:11:8f:f7:12:9f:cb:a0:d0:c9:75:61:f8:05:43:
                    0a:31:93:8a:24:04:10:e9:2a:8b:c4:37:58:87:e5:
                    f5:fe:4f:20:4f:29:a0:c2:88:b7:65:87:7d:6a:24:
                    cd:cd:84:31:ff:ba:15:56:1f:35:8f:37:c0:b6:d0:
                    52:63:12:59:5a:a2:f2:ee:52:68:d4:8a:28:92:1e:
                    46:22:de:ab:5f:39:3c:2a:8e:fd:4c:58:06:67:8b:
                    09:64:f5:5f:d7:9a:90:2c:67:f7:28:1b:aa:82:71:
                    5a:a2:95:60:b1:81:99:da:b0:c9:0a:9e:63:c8:d8:
                    49:2d:09:d5:46:4a:a4:bd:d0:30:f5:5a:12:00:5e:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3A:38:B5:E3:9E:25:DE:9F:25:8E:85:18:1C:DC:7E:E2:75:9B:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efaedfe7-120e-416d-97c7-43bbfbe81e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:48:17:1e:97:2f:27:78:45:69:4c:4d:4f:93:50:bb:53:da:
         50:16:8c:67:75:13:42:28:3b:d0:62:82:90:11:db:a3:48:56:
         43:ac:64:99:a8:f0:8b:06:71:23:91:08:12:50:4e:c0:a6:cf:
         da:ab:1a:68:e7:69:db:19:57:f1:c7:47:62:ba:98:4e:79:f7:
         28:9e:2b:e4:62:cb:96:33:c9:aa:fe:4b:5c:e4:05:da:86:04:
         64:f7:0a:24:61:89:56:d5:89:f3:f6:64:87:42:ea:0e:f3:d7:
         91:ea:50:2a:c6:92:a4:80:1b:b6:ce:c8:e6:ba:3d:33:a5:2e:
         7d:d8:79:0d:c2:dd:1b:e5:7a:fc:65:c6:01:9a:9e:a2:db:66:
         26:f6:b6:c7:16:ed:27:bb:e9:23:db:be:be:ee:41:02:46:46:
         98:c8:23:89:ae:90:5f:67:73:8c:27:7b:2e:06:6a:c7:b7:6a:
         06:d9:fc:bc:5c:84:fc:ff:1e:65:42:db:0d:d3:2b:a7:77:cb:
         b5:dc:55:86:bf:16:59:60:67:1d:33:30:e7:1a:03:e6:65:26:
         22:35:67:48:2e:c7:ce:78:91:52:71:c7:15:1e:64:43:c5:8c:
         5e:05:6f:40:49:ec:1b:86:4a:4c:10:76:4a:a0:49:15:15:89:
         57:e3:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----