Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d0d94a-6cbb-49ff-888a-0257ca851b6a.roa
File:                     33d0d94a-6cbb-49ff-888a-0257ca851b6a.roa (raw, json)
Hash identifier:          iQO2cgArIk3xWSjDDzzbpNq/3jEB4mgCM4CZHknwrz4=
Subject key identifier:   1E:7B:84:AD:94:C8:AD:75:92:E1:42:A9:DF:EE:EC:06:C6:A7:8A:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54CAC110BCB0B8B9EED2A2A8F5A62FEB646507B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d0d94a-6cbb-49ff-888a-0257ca851b6a.roa
Signing time:             Mon 20 Oct 2025 02:02:01 +0000
ROA not before:           Mon 20 Oct 2025 02:02:01 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ca:c1:10:bc:b0:b8:b9:ee:d2:a2:a8:f5:a6:2f:eb:64:65:07:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:02:01 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a9703a9b0b1f033d990106205c3ae3b80d1db4d2b904b7ecd426425f423b51fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:1c:1f:b7:07:de:cd:8a:4f:42:dc:f9:7d:
                    5f:97:7b:88:e0:ba:32:51:81:4e:5c:84:7c:fd:32:
                    66:3f:02:5e:bc:02:9c:7b:d2:bb:ac:d6:07:53:67:
                    b0:c0:4d:b7:a1:2f:40:b1:5e:f0:43:fe:60:68:f6:
                    c6:c1:64:57:31:ef:f2:43:10:4f:06:9c:87:1b:ae:
                    5b:12:ff:50:66:a5:54:b7:d0:b8:96:5c:6f:53:9b:
                    b9:f5:17:6a:b0:ec:4d:5f:e1:13:1d:d2:7e:09:b7:
                    29:51:c9:9c:11:a6:fd:09:b8:16:46:62:2f:3e:f3:
                    8c:02:6c:2c:7e:f8:c3:7d:27:74:85:8b:71:bb:05:
                    f3:66:98:60:6d:86:48:92:ca:f1:2a:ee:99:36:62:
                    bd:ac:03:75:a2:7c:e3:d1:29:cc:79:1d:61:94:9b:
                    ec:27:09:b5:18:50:f4:49:ad:a5:23:3a:51:af:0a:
                    49:5a:5f:d1:19:da:ec:07:0a:24:51:84:71:04:8e:
                    18:a3:be:5e:aa:ef:6f:14:3d:05:9b:c2:d1:4f:0f:
                    a2:0b:22:14:7c:29:ce:58:68:60:07:82:91:09:b3:
                    3f:2d:b0:0f:68:bb:68:23:c4:56:a7:fd:7a:b9:44:
                    fb:bf:11:81:d1:92:fa:c2:e1:3c:ad:1b:ea:ca:89:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:84:AD:94:C8:AD:75:92:E1:42:A9:DF:EE:EC:06:C6:A7:8A:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d0d94a-6cbb-49ff-888a-0257ca851b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         bc:0f:68:a6:df:d0:38:b5:9c:8c:8b:57:bf:c8:ec:fb:d6:07:
         d7:88:80:5c:b2:be:8b:b1:c2:f7:9a:28:17:07:f6:3f:a6:3f:
         c6:db:f5:6f:8c:dc:31:11:e4:92:1e:9d:75:48:37:74:63:88:
         4e:9e:7e:9d:3e:e2:c2:bf:f5:fc:fb:38:6d:91:83:dc:b3:f5:
         c8:3b:f9:9f:bb:67:7b:80:e1:4f:47:af:05:df:2f:09:69:fb:
         26:cc:e6:fd:00:fb:2b:66:63:06:8e:6e:37:c3:d8:5a:02:98:
         44:7e:88:76:d2:97:14:0b:fb:48:7e:c1:63:a7:ff:bd:01:d4:
         95:bc:2b:fa:2d:a1:79:c7:98:94:01:42:a0:01:55:9d:ad:a6:
         64:d3:75:ee:a6:b8:11:aa:6d:8f:5e:b4:32:cb:07:a5:49:35:
         2e:2d:7d:3a:a8:6d:47:45:01:4c:ee:99:8b:90:75:9b:b2:ac:
         77:69:dc:6e:b7:12:d2:9c:2d:51:ac:86:d6:a4:9f:b4:89:91:
         74:6e:61:00:ea:42:34:a0:d6:20:ed:6d:b7:6f:ad:61:42:8a:
         46:87:3a:58:8f:8a:46:8e:14:a1:6e:29:31:99:17:d3:42:83:
         88:43:0f:6e:68:9f:5c:6a:c8:44:d8:3f:cf:3c:e0:13:9d:14:
         9e:99:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----