Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff35c024-e09c-4456-93c9-d6b7dd5a7190.roa
File:                     ff35c024-e09c-4456-93c9-d6b7dd5a7190.roa (raw, json)
Hash identifier:          TWrmucY8TIibwQHPZbbLrO6FQ5NR6Jb5/XuNeOZThVg=
Subject key identifier:   27:3A:91:F2:0E:92:D0:50:8D:6F:90:C9:19:0D:41:81:F3:1C:B9:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       10178AAE16FD2C91C008EA006B2AF12E143AB528
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff35c024-e09c-4456-93c9-d6b7dd5a7190.roa
Signing time:             Mon 20 Oct 2025 03:51:24 +0000
ROA not before:           Mon 20 Oct 2025 03:51:24 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:17:8a:ae:16:fd:2c:91:c0:08:ea:00:6b:2a:f1:2e:14:3a:b5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:51:24 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=26ed99f9899a62e24765f4c889b443c7420ee844cb586333814e00984fbc133e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:70:ea:2b:9c:a9:c8:86:94:54:de:f7:1c:
                    4c:15:e8:ed:a6:15:d5:12:67:58:96:13:c1:e7:c8:
                    e9:eb:57:72:ec:4e:f1:ce:75:8c:e3:50:3d:eb:e5:
                    4c:a8:a8:d1:7b:08:03:34:a4:2c:26:b5:bf:e7:6a:
                    2d:e7:42:70:aa:2c:ee:c2:11:56:f3:a1:a1:f6:71:
                    e4:25:9c:9e:29:30:74:6c:18:a3:07:06:f0:dc:bf:
                    67:94:48:3e:2f:70:af:05:2c:50:47:07:76:a7:8c:
                    1f:cb:28:ae:c7:47:01:04:fc:65:9b:0e:3d:bd:7c:
                    ca:17:5d:13:a4:75:81:e2:3c:c1:7c:05:39:91:bd:
                    29:8d:fc:54:d5:8e:0f:ef:f2:60:ef:41:7e:65:98:
                    c3:7a:a0:30:ba:a5:05:79:09:c6:26:7b:a7:e5:1b:
                    7d:7f:81:2e:23:3d:f0:b1:16:0a:b3:5f:f0:17:74:
                    a4:74:03:ad:09:25:7c:80:ac:1f:09:c3:76:c6:45:
                    dc:8a:fb:89:d5:e1:f2:52:af:da:11:4a:af:9d:d8:
                    17:56:b8:9b:31:e0:7f:43:2b:f7:bb:19:59:19:76:
                    73:92:3a:7f:60:03:be:0c:de:a4:e2:04:f0:98:0e:
                    f7:26:45:5f:23:91:a6:f1:b2:ce:6e:71:27:aa:e9:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3A:91:F2:0E:92:D0:50:8D:6F:90:C9:19:0D:41:81:F3:1C:B9:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff35c024-e09c-4456-93c9-d6b7dd5a7190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:72:f5:dc:75:fc:64:55:b0:2d:b1:42:a1:2f:58:bd:fd:d0:
         59:c1:e0:c2:e4:a7:f7:c2:d8:dd:f1:58:72:52:2d:c1:c6:f5:
         44:dc:c8:60:d9:0d:af:b9:fd:54:15:da:81:7f:e4:65:38:b1:
         48:bd:91:66:b9:71:fd:ca:05:5b:8c:81:ef:c1:cc:23:0b:3c:
         5c:d2:a8:3d:85:63:05:f1:8f:62:5f:87:cf:91:d6:19:51:a5:
         32:a9:6b:bd:3a:c3:52:e3:f6:2f:e1:9a:ae:80:70:47:21:de:
         b4:48:5a:20:8e:ad:03:e8:c4:b8:78:72:92:ef:b7:e8:37:de:
         f5:35:78:01:b4:3f:f9:57:35:89:12:8e:9c:19:eb:db:1c:7d:
         93:0a:91:0b:d3:67:c2:b1:47:66:dd:97:ec:0e:bd:b5:fc:44:
         72:1c:4e:f9:e0:5b:8a:a5:0f:17:89:6b:f5:41:f6:e6:7e:eb:
         a7:8a:89:e9:08:53:12:a8:20:96:f3:a3:79:79:73:a1:ac:ec:
         4e:f7:e0:4e:47:0e:a7:dd:94:e7:61:c0:d8:2b:5b:97:f1:d0:
         e7:5d:13:1e:da:38:7c:7d:38:8f:fd:d1:a7:4e:c2:8f:44:ab:
         15:75:ec:ad:12:da:ea:9b:75:19:c3:67:e6:a2:3d:b4:a0:e6:
         eb:ef:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----