Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4aa60c-d296-4fdf-957f-a0d04eca697e.roa
File:                     2e4aa60c-d296-4fdf-957f-a0d04eca697e.roa (raw, json)
Hash identifier:          ExU/9HsxKKzfmoaWeqhmE2qjBb+QBwwvZsi5e4vr7kk=
Subject key identifier:   C3:67:42:30:BA:AC:42:2D:8D:A8:14:B4:23:BE:22:73:54:F7:AD:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A90494C5414C77D3E9AC4D5FB4F8AE99620F7AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4aa60c-d296-4fdf-957f-a0d04eca697e.roa
Signing time:             Mon 20 Oct 2025 01:01:26 +0000
ROA not before:           Mon 20 Oct 2025 01:01:26 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:49:4c:54:14:c7:7d:3e:9a:c4:d5:fb:4f:8a:e9:96:20:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:01:26 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2fb2c5998a504269abe782495c2d66e78b370a3427d93ce472b6e5bbda40c97f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:7f:d1:b7:cf:11:50:25:8e:36:be:70:c6:
                    5f:f8:22:fe:cc:d7:65:8e:04:e1:d0:e6:2c:84:4c:
                    28:7d:ee:bd:3c:92:49:e3:04:e8:f3:ea:a1:73:d6:
                    83:e0:6f:7b:22:22:36:cd:9c:77:fb:63:81:8f:32:
                    6f:1b:38:e5:5a:d3:df:f1:fd:73:a5:28:f2:16:be:
                    68:83:de:e7:95:2e:c6:7d:14:5a:48:ca:d4:75:9e:
                    98:84:9e:94:9c:4f:44:04:7c:1a:3c:75:05:4c:f9:
                    0e:35:eb:02:fa:02:35:3d:0f:25:b2:f9:14:d2:47:
                    f7:66:fc:be:f7:e5:ac:ec:bd:22:9f:f7:e0:cd:49:
                    96:af:3f:bc:72:20:20:7f:62:ab:ab:02:59:0f:78:
                    56:cb:5a:2c:d9:8b:bf:a5:66:18:75:d5:ac:0e:07:
                    8a:34:55:48:b6:e7:67:7b:32:6f:98:65:8c:ab:b8:
                    42:32:65:91:48:25:c2:e6:3e:0f:b8:32:4b:09:79:
                    13:32:83:e1:b5:1e:ca:91:b9:4a:7d:00:d0:de:b7:
                    77:70:33:49:a3:c0:ea:d4:35:99:cc:3f:88:82:fd:
                    21:d2:8d:f0:be:55:69:24:21:be:82:75:fb:a0:63:
                    91:e5:2c:db:71:fe:32:dd:43:79:89:e8:02:5e:74:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:42:30:BA:AC:42:2D:8D:A8:14:B4:23:BE:22:73:54:F7:AD:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e4aa60c-d296-4fdf-957f-a0d04eca697e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:46:67:de:42:de:41:96:bd:fa:7a:ef:06:ee:cb:82:3d:41:
         f1:1f:44:98:7c:d2:4f:66:6a:d9:32:6e:f7:e2:7a:4b:15:b8:
         ee:0e:8c:3d:d1:e3:19:1c:5c:8e:95:92:ea:a0:39:c3:51:a4:
         50:3b:80:d7:e8:4d:ae:de:5b:03:8d:0f:34:3a:f8:4e:24:6f:
         b7:0f:92:f6:f1:a9:6d:c2:10:36:d1:05:cb:6f:95:c8:39:7d:
         e0:6e:ee:ad:a8:6d:31:c9:7a:1d:0e:ad:54:e9:b7:2a:24:ff:
         0b:30:46:12:c9:f5:c3:80:e8:b0:f7:17:58:90:d0:c8:17:e0:
         d7:e9:e1:7c:7f:23:3f:c8:36:a2:fb:2b:93:d5:33:36:b7:fc:
         70:74:80:8c:1e:fb:8a:b4:da:50:e8:fe:18:3f:b8:ad:7b:7d:
         9d:01:4e:b7:70:4b:b6:8e:b9:04:9c:fa:d2:75:03:a1:48:a1:
         27:be:db:da:a0:50:51:85:07:f7:a4:bb:5e:38:09:3b:d5:4a:
         e0:f1:66:77:c3:e6:f7:10:0d:7f:b3:93:6f:7a:73:b4:0a:25:
         ef:e6:5f:0f:65:bb:0e:4d:52:68:35:6f:2f:48:15:21:a1:5e:
         d3:1c:01:50:df:e4:9d:b9:e1:40:fb:11:a2:3d:9f:59:5d:a0:
         d5:eb:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----