Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53319b0b-c05f-4dd5-89c0-f682ac612da8.roa
File:                     53319b0b-c05f-4dd5-89c0-f682ac612da8.roa (raw, json)
Hash identifier:          zG3NkIGhaFqLDB+xUZJl/vzfLl0mc/wB2MeXy7lR9jM=
Subject key identifier:   26:29:9A:82:5B:30:B7:AD:27:C0:B6:B9:FB:61:D5:88:9A:97:37:6E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27AD7463F8ED11E4C6B940EEDAFE5886A6E870F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53319b0b-c05f-4dd5-89c0-f682ac612da8.roa
Signing time:             Mon 20 Oct 2025 02:01:16 +0000
ROA not before:           Mon 20 Oct 2025 02:01:16 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ad:74:63:f8:ed:11:e4:c6:b9:40:ee:da:fe:58:86:a6:e8:70:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:01:16 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9fcadd0f2240ed96f461b37b5d0dc825359701aaeaa431012657de0ea22357c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:02:91:d3:e6:69:06:a7:80:5e:ff:19:52:
                    f8:7f:d6:b1:c0:5a:b2:d5:f9:51:3f:be:11:f5:1a:
                    9b:8d:da:c6:d1:6a:9f:9a:2e:97:03:d5:c5:b9:37:
                    64:d2:03:3f:bb:3f:91:4b:e1:46:b8:6b:0f:8e:63:
                    20:04:8d:9e:81:d1:91:c0:33:96:3c:55:11:fb:08:
                    83:e0:b4:6a:95:93:a2:d0:ee:7a:28:ab:27:ff:4a:
                    53:90:d0:52:a7:af:41:a8:b3:2c:f0:c5:d8:36:23:
                    9b:9b:71:9a:ae:66:30:7b:eb:95:fd:21:ae:60:e6:
                    b5:49:b9:73:2b:73:a5:83:24:cf:7c:d3:d8:81:c2:
                    dc:99:67:32:74:e4:04:d7:a9:32:2b:3d:cc:15:8f:
                    df:13:b2:a8:c6:52:f3:27:66:8e:cb:de:f4:9c:2e:
                    48:32:48:93:69:ff:ff:53:c8:fe:d0:df:08:a8:52:
                    54:de:8d:2d:75:58:ad:97:e0:75:49:80:03:a5:a7:
                    1d:da:f6:70:27:32:dd:13:4e:c7:af:87:44:ab:5a:
                    8c:2e:7a:b8:6e:d4:ba:1b:32:a1:32:bb:c8:60:71:
                    71:b6:8b:08:2e:4e:21:f5:9f:cb:26:43:88:51:e3:
                    e2:44:59:a4:47:2e:4d:a7:ca:62:a4:5e:d9:f7:02:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:9A:82:5B:30:B7:AD:27:C0:B6:B9:FB:61:D5:88:9A:97:37:6E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53319b0b-c05f-4dd5-89c0-f682ac612da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:99:17:0a:e0:07:55:9b:17:c9:cc:ea:ce:c0:6f:ca:03:33:
         98:d1:65:1a:8f:c3:a5:a5:81:26:35:c2:54:21:4f:b5:0f:4f:
         d9:f0:72:bf:73:e5:72:01:1f:13:87:7d:bf:64:88:51:94:ef:
         f1:26:7f:46:58:c4:0a:4b:9d:88:ce:90:a3:bc:e4:63:16:4d:
         c0:93:a1:bf:1d:a5:e2:02:92:c3:30:84:90:db:c4:f5:1c:f5:
         12:37:ed:23:d0:da:b1:69:5a:64:4e:5c:9d:30:79:73:c2:53:
         1a:09:da:ce:b4:04:cd:8c:7b:ed:54:a3:27:5a:5a:e8:90:fa:
         b6:f7:89:7b:62:8c:09:34:c6:b9:bf:b9:ab:4d:b3:76:a8:8c:
         cd:6c:34:10:0b:c9:7a:67:ef:9a:49:0e:c3:65:cc:fc:32:ab:
         9d:d0:81:cc:81:e2:ba:95:db:87:24:57:dc:17:29:67:c5:13:
         5e:41:f3:63:26:e5:fc:6f:dc:58:68:7e:7f:fe:96:cb:19:9a:
         15:bd:6f:8f:00:41:02:c5:dc:d8:35:f4:13:7e:84:3b:73:5b:
         c4:42:c0:47:35:5a:36:3d:d7:26:0f:f6:16:c8:2f:70:79:e0:
         a0:9c:23:04:39:37:08:26:8d:b3:39:5c:e5:4e:bf:3c:a7:af:
         d9:d2:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----