Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb647506-e859-490a-8b54-72fc1c65e60d.roa
File:                     fb647506-e859-490a-8b54-72fc1c65e60d.roa (raw, json)
Hash identifier:          y3tES41/LrzR+8DM57QbKihJvfHrpGNObQU0Uo3PyPw=
Subject key identifier:   50:12:90:9D:3E:3B:4A:06:B7:1D:BD:7B:56:B4:AE:8B:96:C0:32:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       389F8DB44522CDC4F9175DF6E292FEE1AAE4B2E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb647506-e859-490a-8b54-72fc1c65e60d.roa
Signing time:             Mon 20 Oct 2025 00:40:05 +0000
ROA not before:           Mon 20 Oct 2025 00:40:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:8d:b4:45:22:cd:c4:f9:17:5d:f6:e2:92:fe:e1:aa:e4:b2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:40:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=6e44a970e76599ab5b7d1079a624db42993b70ee03cec6bc82e3d474e4adbfaa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:69:bd:84:12:94:d1:7d:a8:9e:c2:c4:e4:
                    92:9f:11:42:bf:77:35:5b:f5:4d:9e:c0:96:39:3d:
                    76:61:14:0a:05:d7:a5:c7:b7:78:4a:17:42:35:f7:
                    b3:f6:50:ab:40:48:10:bd:7b:85:af:bd:24:6f:12:
                    c5:53:73:00:0d:f3:c2:1b:5f:e1:52:01:61:15:09:
                    c6:01:88:50:58:97:65:cb:3a:6f:61:ab:5c:6e:98:
                    aa:ea:af:86:24:6d:88:a5:07:50:72:c3:9f:d5:09:
                    90:7a:b5:9d:88:75:19:5b:da:03:e2:45:1a:ff:af:
                    b0:1a:94:9b:d6:26:b2:3d:aa:9a:a2:f2:13:66:56:
                    c1:cb:cd:6c:e2:f9:f5:5c:3e:90:66:d9:d9:0d:d6:
                    a7:41:ef:66:51:11:3a:d7:88:ae:ce:4c:bd:a2:40:
                    c0:39:28:5e:11:f1:ab:be:04:cc:be:ed:58:ff:ee:
                    4e:88:0e:47:ca:d6:d9:fb:de:2c:bd:80:c4:53:e2:
                    d0:7c:e1:82:7d:2d:a8:11:ed:66:b9:39:82:7c:53:
                    cc:e7:b0:d6:bf:13:d4:a2:f7:2c:98:5f:5d:d5:92:
                    da:58:58:fc:c0:39:0a:84:31:43:a1:84:3b:2c:13:
                    98:96:b4:3c:91:36:88:04:a7:01:ef:80:27:97:fb:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:90:9D:3E:3B:4A:06:B7:1D:BD:7B:56:B4:AE:8B:96:C0:32:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb647506-e859-490a-8b54-72fc1c65e60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:7c:38:4a:16:95:5f:6a:24:99:0b:01:82:1d:47:66:b9:
         b2:aa:da:e4:62:12:82:88:34:b0:58:84:f1:d4:d6:68:58:2e:
         41:5a:14:33:f3:de:90:a4:59:81:d6:a7:dd:f8:71:ea:aa:6f:
         ef:ed:b7:6c:a3:23:16:8b:f7:7d:17:f2:1d:03:44:f1:da:cc:
         b7:9e:50:46:e3:a3:32:c8:56:65:10:cf:56:46:38:c9:c7:aa:
         93:05:e7:32:59:06:41:f2:7c:11:5a:72:a2:7c:df:31:37:00:
         99:85:ab:32:66:e9:fe:9b:94:b2:56:13:00:e5:83:d7:ce:0a:
         60:5e:75:a2:24:2a:52:9b:e5:d0:b5:fb:8b:a2:62:66:c5:c8:
         d5:5a:21:a5:0e:50:fb:5f:e7:97:75:56:c8:de:5c:8c:8b:9e:
         3d:f3:74:60:c3:3b:1c:04:74:bb:f4:76:60:53:50:e4:3c:f4:
         c1:03:cd:ad:ec:53:6b:ff:a8:90:3c:2a:4b:71:01:b5:f7:b3:
         9e:4b:24:d9:f1:16:23:39:7d:d6:d8:d1:02:80:57:00:33:0b:
         fa:39:9f:13:92:ea:f8:7a:74:5e:eb:9a:11:90:59:57:33:9e:
         73:1c:fe:fc:1c:40:00:0a:98:98:ee:76:19:a7:1d:80:a4:3e:
         ca:01:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----