Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9d189c9-dd81-4b19-9aee-79b9a4ae7c04.roa
File:                     b9d189c9-dd81-4b19-9aee-79b9a4ae7c04.roa (raw, json)
Hash identifier:          Zubw2NNwacz0JrkqS5uARFFAqswQqBMmmYbC8Q9ndKg=
Subject key identifier:   3C:CE:56:E5:40:6A:AB:66:E1:D9:A4:62:A4:9C:11:71:06:5C:0D:8A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7134BCC4B486A94223126FD1A2921D17C8FB331B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9d189c9-dd81-4b19-9aee-79b9a4ae7c04.roa
Signing time:             Mon 20 Oct 2025 03:31:46 +0000
ROA not before:           Mon 20 Oct 2025 03:31:46 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:34:bc:c4:b4:86:a9:42:23:12:6f:d1:a2:92:1d:17:c8:fb:33:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:31:46 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a97dc5ab4230b6a7f9890c2a944f648b0fc520eb6de3e5dc8ce584477468d938, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:9f:2d:96:e7:5b:ff:c3:69:80:02:f9:71:
                    71:fe:0b:a2:54:51:79:33:93:82:d1:f0:ff:01:24:
                    01:37:af:35:5d:de:16:cc:6a:83:ea:16:26:a6:22:
                    6b:8d:24:3a:01:5f:d4:0f:6c:9b:f1:88:2e:dc:e0:
                    95:e3:a6:d3:22:c5:e4:1b:28:6e:50:e9:dc:ac:88:
                    98:18:51:57:d6:d6:53:03:e7:17:50:e3:16:5c:2e:
                    ab:14:d5:09:be:3d:e8:b4:23:13:3e:2f:2a:8c:dc:
                    4c:50:34:d4:3d:c4:31:8e:0b:36:4b:46:05:86:f2:
                    5d:a5:af:51:59:76:0c:81:5c:9d:39:eb:3c:d2:02:
                    3b:5e:1c:95:30:c4:a3:25:5c:80:11:ad:8f:48:fd:
                    0c:7e:db:b7:90:a3:21:fe:4c:bd:e7:d9:58:fb:5d:
                    a3:c2:0b:05:9c:89:e3:74:6f:0c:7a:e5:9d:8c:ee:
                    16:3c:85:de:10:3e:ae:9e:ec:04:80:9f:da:f8:b2:
                    f8:b5:73:f3:b8:15:13:3c:dc:dd:6e:d1:16:d9:f2:
                    db:f9:e5:be:88:c2:7f:99:c6:15:6e:f6:99:89:e8:
                    1e:09:95:fe:47:21:a3:f4:86:97:5a:38:8f:c8:23:
                    ea:97:32:e2:f6:df:ce:ec:3a:79:da:4d:6f:92:e9:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CE:56:E5:40:6A:AB:66:E1:D9:A4:62:A4:9C:11:71:06:5C:0D:8A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9d189c9-dd81-4b19-9aee-79b9a4ae7c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:45:f6:fa:2e:fe:f7:00:59:29:77:31:ff:88:8b:03:9c:67:
         94:f9:0f:1e:b4:bb:cb:b9:14:6d:92:74:f3:23:00:d3:52:4f:
         75:83:d4:74:cb:fe:4b:ae:1f:e9:b6:4b:3f:4a:70:1f:df:ae:
         ea:b4:d8:93:64:33:7a:d3:72:66:85:ef:bb:40:29:8b:4a:91:
         29:97:5e:20:7a:bb:6f:27:9c:26:5c:c9:19:92:a6:23:91:9a:
         91:c5:e2:62:05:a1:5b:16:5c:39:2a:5b:3d:72:a4:82:b1:18:
         3f:ff:00:36:23:65:6f:bb:38:2c:6c:8d:60:84:47:c0:8e:db:
         26:43:19:f6:db:e4:3e:88:16:22:b5:e1:41:ec:77:44:7b:da:
         7b:e4:0e:03:e0:b0:62:de:ef:75:a1:5d:31:63:4a:3f:00:fb:
         be:0c:01:cd:01:d0:7a:37:7a:5a:b4:4d:45:4a:c1:37:6a:68:
         5e:5f:86:c3:bc:9c:88:d5:c5:ab:1a:d0:d9:a3:87:2d:c8:27:
         ee:ca:80:f1:99:56:72:41:09:f6:d9:a1:c9:0b:08:47:d2:dd:
         0e:da:e2:24:db:8b:77:b1:e8:3a:a1:5e:4e:14:c0:54:2e:b6:
         aa:b1:8b:a0:64:99:3f:f5:35:03:0a:4c:16:10:d3:d7:32:07:
         2b:c5:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----