Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f169a4b8-8027-424c-a811-c7c7af683616.roa
File:                     f169a4b8-8027-424c-a811-c7c7af683616.roa (raw, json)
Hash identifier:          4obaYYBaVNsXR/7RNPdSITYwPGOxER1sQBfkytQsV1s=
Subject key identifier:   AE:1E:46:29:03:4D:B0:39:04:C0:52:B1:4D:89:B2:6C:2E:AF:DD:68
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F80A3DAAD0004670F806EE8E1B4A5457DB47A83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f169a4b8-8027-424c-a811-c7c7af683616.roa
Signing time:             Mon 20 Oct 2025 05:50:08 +0000
ROA not before:           Mon 20 Oct 2025 05:50:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:80:a3:da:ad:00:04:67:0f:80:6e:e8:e1:b4:a5:45:7d:b4:7a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:50:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=f0f6bcf8df5af14809499373fc12531a7272251c611d1f90a9633eac0ab03b71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:77:50:45:cd:5b:42:f7:a9:48:61:a2:6b:
                    56:c0:71:e3:5c:b4:e7:2b:f2:44:75:7d:6c:8f:f5:
                    66:d2:aa:2e:b4:53:f1:32:c9:8d:89:9b:a1:de:7d:
                    a5:41:53:51:d0:5b:ad:a0:cb:9c:db:13:1d:31:ca:
                    44:aa:41:73:1d:dc:14:dc:dd:84:79:a7:73:09:ce:
                    c9:2a:91:0a:61:a9:3f:45:ed:01:85:d1:3a:f6:72:
                    75:59:b0:98:06:c9:99:30:8a:40:09:ae:78:54:c2:
                    7c:ea:20:c7:3a:e8:51:39:52:84:c0:bf:66:28:ae:
                    b4:f8:25:74:c8:50:90:54:81:b7:2d:74:1f:18:19:
                    b3:50:e8:b0:e5:8f:cc:6e:a1:9f:42:a0:07:e5:ee:
                    3f:ef:13:74:e3:06:01:32:a0:28:ca:6b:92:a5:76:
                    0b:2f:52:1d:e6:7c:f4:74:9a:a0:a6:0a:f3:0c:e0:
                    0f:b5:63:d8:3d:48:53:af:ac:28:26:fb:23:62:5b:
                    d3:97:91:3b:d7:af:7e:ee:74:17:a9:63:d7:60:11:
                    47:e1:93:f9:31:c4:dd:c6:a7:3f:66:19:95:7f:e7:
                    90:b3:02:b6:bc:ff:9f:d8:f8:5b:09:be:79:60:00:
                    7a:fb:e9:05:2e:12:87:ec:a6:2a:fa:68:44:59:dc:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1E:46:29:03:4D:B0:39:04:C0:52:B1:4D:89:B2:6C:2E:AF:DD:68
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f169a4b8-8027-424c-a811-c7c7af683616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:9e:1b:08:90:ae:70:db:c6:49:10:06:a6:e2:a6:4e:31:
         72:02:88:ca:2e:23:7e:d6:4b:60:32:80:66:31:be:00:f6:35:
         93:15:32:3c:9d:38:b8:ac:3c:7d:16:57:57:8f:f7:8e:0f:00:
         62:86:8a:28:e8:8f:de:d5:0c:76:bf:73:93:c2:da:37:5c:ce:
         81:ce:18:26:9e:8b:da:bd:01:6e:ea:e2:34:4e:98:cb:a7:92:
         b9:e7:48:ca:c5:4d:e4:36:47:9f:fb:45:7c:eb:a2:fe:93:c4:
         c1:72:a0:be:6c:94:72:45:c1:3a:30:83:28:90:e7:38:94:04:
         92:51:db:06:77:5d:47:07:70:bd:fc:7b:39:08:82:57:03:da:
         ce:01:7a:bf:91:77:7e:c2:e7:84:79:65:3c:ed:59:f5:e1:7e:
         d5:88:82:2a:72:f0:e6:78:61:aa:59:fb:3a:4e:aa:51:71:93:
         f2:75:c8:9f:10:ae:63:9c:0d:c6:5b:1f:ad:eb:28:d5:58:1a:
         f6:fb:a4:e8:45:c2:2d:ac:72:f3:98:ac:f1:58:37:38:1a:9f:
         ae:e0:17:4d:cc:19:65:6d:43:44:d9:8c:e1:e9:70:9a:2c:c8:
         83:82:ac:87:5d:73:d4:56:ce:7a:c9:68:df:1d:8c:9c:81:ee:
         29:6b:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----