Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54228a74-775a-4f0e-b583-2b0cc8ba89b5.roa
File:                     54228a74-775a-4f0e-b583-2b0cc8ba89b5.roa (raw, json)
Hash identifier:          /taTJnSPOpcf62LhIv4UJccKjlq1BuX/v87UTJ4jGuE=
Subject key identifier:   3D:31:E8:2A:E6:EC:E1:1B:C8:68:84:0D:73:87:BE:0B:54:11:11:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C0D30955FD88BE48164F720F069F94DC951FBD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54228a74-775a-4f0e-b583-2b0cc8ba89b5.roa
Signing time:             Mon 20 Oct 2025 04:40:44 +0000
ROA not before:           Mon 20 Oct 2025 04:40:44 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:30:95:5f:d8:8b:e4:81:64:f7:20:f0:69:f9:4d:c9:51:fb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:40:44 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=eca6b653b0cb39ae81e52c25b832e4366115d1dc4ad4ba0689be489769bc1f95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:75:e2:27:1c:06:7c:7d:8d:b3:a9:0f:36:
                    20:3e:38:b5:ac:5c:62:2c:01:68:08:46:1f:3c:ca:
                    0a:c2:7c:8c:3c:9d:e1:bb:12:1e:67:bc:c4:1c:0c:
                    a8:46:d5:03:65:2c:da:d6:ed:6f:a8:ae:76:45:1d:
                    98:2e:1f:bd:c9:db:d7:af:f9:c0:6e:b3:8e:39:57:
                    32:42:ed:95:a9:cd:5b:e9:cf:89:9d:e4:a6:62:53:
                    e5:ed:fc:09:d2:d0:c4:28:d7:21:44:2e:f3:71:ae:
                    4b:dd:f0:9f:08:23:6f:f6:17:1f:1e:75:98:e1:1b:
                    b8:cc:20:bc:b0:69:78:7c:4d:66:f9:16:37:b8:e5:
                    a0:3b:c5:62:d2:c3:7b:b5:04:d9:55:b6:b7:a3:f9:
                    62:68:f3:31:81:ed:99:d9:19:dc:a4:b9:01:b5:b7:
                    7f:d7:7e:95:40:ae:52:bf:ac:51:8d:29:36:a4:fb:
                    08:26:71:e4:bc:4f:14:ca:b2:9f:d4:b7:5d:93:9b:
                    09:16:31:01:fa:ec:31:0c:ec:8a:21:fc:f3:7b:7d:
                    d9:bb:ae:3f:bd:c2:5c:27:e0:bd:c2:cc:8a:3d:2c:
                    14:07:dd:59:9e:6c:a4:17:7b:ce:88:19:19:9b:db:
                    fd:25:9e:9a:27:95:71:e3:37:ed:15:1c:a4:23:2b:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:31:E8:2A:E6:EC:E1:1B:C8:68:84:0D:73:87:BE:0B:54:11:11:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54228a74-775a-4f0e-b583-2b0cc8ba89b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:98:52:7c:7d:7c:ac:60:fb:b2:0f:a3:4e:cc:54:45:5f:78:
         ca:a5:2d:68:b3:b8:25:bc:1d:fb:b4:21:ec:6c:46:59:70:6e:
         78:43:c0:54:2c:7a:a5:5e:07:63:9a:73:de:c2:80:72:30:8b:
         f7:76:1b:21:21:31:2f:86:41:0a:1a:9c:e3:d6:26:94:f9:3b:
         d7:a1:9b:5c:fe:b3:8f:6c:c8:55:9b:92:65:64:47:0a:dc:4b:
         16:21:e8:8e:45:73:fe:89:f4:af:dc:b1:4c:54:5a:17:52:6c:
         0d:5f:53:9c:8b:ec:aa:8c:c9:86:52:16:69:40:5e:de:4e:8f:
         d7:fd:00:79:cd:4a:98:fa:e0:bf:45:07:a8:be:66:72:f3:97:
         63:33:87:78:f9:67:e6:7a:df:10:b6:d0:6c:51:4d:a0:16:0d:
         2d:60:50:e2:e1:75:86:fa:a5:5e:af:a6:92:53:7d:a8:92:8b:
         46:88:d1:1e:94:e8:29:bd:37:6f:1f:78:8b:d1:fb:d6:fa:da:
         17:70:43:4b:a7:b8:6b:af:7a:68:a9:63:6d:dc:f5:ff:f9:74:
         d6:c4:ad:95:bd:43:1b:31:08:a6:28:8f:a3:ff:47:5d:ba:14:
         58:c0:76:43:f3:7e:19:94:3d:1e:3d:d2:61:f5:74:7b:89:89:
         cb:ee:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----