Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa
File:                     6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa (raw, json)
Hash identifier:          2CzPabullAUh476oagjE0S1m4sRVbxkdtAAEBAjO840=
Subject key identifier:   C3:3F:AA:16:6C:E7:7F:1C:6F:EC:A7:10:57:A4:7C:EA:93:21:D8:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19108E89E27ED345AE6AA05EC7FF06B36D1D29A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa
Signing time:             Mon 20 Oct 2025 04:00:59 +0000
ROA not before:           Mon 20 Oct 2025 04:00:59 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:10:8e:89:e2:7e:d3:45:ae:6a:a0:5e:c7:ff:06:b3:6d:1d:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 04:00:59 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=2a40887971ab9ce13ff6265fc85396e3c26744d80f4cc999f0091c333d5e19f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:a8:a2:c8:39:3e:4c:63:07:f0:39:70:1a:
                    e1:1c:4b:ea:1b:11:ca:b6:38:e6:43:4f:5e:9a:18:
                    ae:41:70:7e:67:ae:3f:50:c9:3e:01:53:92:d7:12:
                    2c:f8:51:94:74:c0:20:63:4b:0c:bd:f2:07:1a:85:
                    45:fd:41:33:e3:bc:65:fe:6b:bf:bc:4e:3a:73:7b:
                    79:c4:79:3e:29:ae:84:7c:a8:e3:70:39:22:90:d6:
                    f7:b3:74:54:f1:a3:19:15:06:82:c3:6b:1c:e0:08:
                    e2:13:09:a3:93:e3:f4:6a:4a:a6:38:e8:4c:aa:37:
                    01:82:67:f8:dd:01:05:bf:80:c4:57:a9:79:09:eb:
                    25:ac:d3:c9:3f:ff:2c:79:b4:bb:5c:8f:0e:35:91:
                    cc:0f:e5:42:4f:ed:cb:6e:f1:9e:40:3e:bc:6e:4c:
                    e5:d0:3e:f4:b5:78:b0:af:42:09:70:c6:71:0f:c6:
                    00:27:1c:39:e0:9d:32:aa:58:8f:1e:9e:9d:22:c5:
                    ef:05:10:70:a1:bf:42:44:e0:b5:de:cf:2c:81:12:
                    31:e2:13:39:a9:b6:65:5e:2e:ed:3f:b9:e0:70:ff:
                    96:e2:63:45:3b:b2:82:a8:57:61:36:59:f2:4c:dd:
                    9e:4c:1b:19:f2:1c:10:b6:d0:a3:f9:90:4a:80:36:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:AA:16:6C:E7:7F:1C:6F:EC:A7:10:57:A4:7C:EA:93:21:D8:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b857432-7a0b-41b8-8b1d-4ee0262e3ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:03:7e:32:74:40:65:c6:9c:20:1f:a4:8b:53:8f:8c:f0:48:
         2c:c7:9b:28:75:4c:23:36:de:65:b4:80:62:ac:6a:ec:f0:32:
         e1:d1:7c:4a:52:a4:44:3e:67:c4:50:49:b1:b5:bb:9c:f7:6c:
         29:5a:a0:d2:b6:5d:d6:c6:99:d0:6f:af:0e:05:54:2e:79:de:
         cc:00:e5:65:aa:b9:68:c9:a1:ec:c4:2e:8e:5a:f6:77:9a:a9:
         51:78:28:12:32:72:5d:d4:06:3c:71:7d:10:fc:9a:bc:81:35:
         c3:28:4f:59:f6:b2:90:58:c9:4d:56:64:5d:3a:b6:ef:21:28:
         8b:4f:91:36:ba:96:e0:cd:c1:d3:1f:5d:38:70:94:c7:52:74:
         50:a4:e3:45:f3:9e:18:46:e3:f3:64:84:2e:88:1c:7b:39:81:
         93:df:aa:32:6c:9c:13:26:24:be:09:ad:c4:7c:16:1c:31:7a:
         b6:41:1d:1e:79:ce:fe:37:42:90:3d:b0:33:4b:9f:eb:f5:9e:
         b8:aa:03:ef:08:0c:77:33:a9:af:b0:f4:dd:95:c6:e3:4d:c0:
         26:87:5a:c9:2e:02:d3:f2:1d:db:6f:a0:45:0c:7d:26:61:3f:
         1f:03:82:96:8e:e7:c8:95:40:ca:c4:cc:1f:52:03:81:f3:ea:
         b5:c6:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----