Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6761796-2a4d-4821-9f65-45065932ef6b.roa
File:                     c6761796-2a4d-4821-9f65-45065932ef6b.roa (raw, json)
Hash identifier:          ckNMTeeHQnVKoudhtOb3wT1N+wQAzrEWkh08lrrgShs=
Subject key identifier:   D5:41:FF:A0:C3:50:E1:1E:AC:D7:D8:D7:51:D2:81:57:0E:54:69:85
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15D231BFAA3F163CD9E840D822F190E22436AB8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6761796-2a4d-4821-9f65-45065932ef6b.roa
Signing time:             Mon 20 Oct 2025 05:21:31 +0000
ROA not before:           Mon 20 Oct 2025 05:21:31 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:31:bf:aa:3f:16:3c:d9:e8:40:d8:22:f1:90:e2:24:36:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:21:31 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5e7c437de362ec46834c14cef360bd693a816f038aecf9979d7e9ee38a1392a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:6d:51:3b:c1:f6:7e:13:dd:f1:42:a9:77:
                    e1:b8:65:09:47:88:1d:df:ae:ae:a9:69:26:8d:f7:
                    97:2c:56:8c:41:6d:cd:67:2e:80:d1:5b:c5:ed:2c:
                    94:fc:2e:4b:d9:8c:93:4e:50:78:14:ce:90:0d:c7:
                    47:82:7a:94:d7:51:8b:0c:36:85:d9:35:a7:73:59:
                    ef:71:22:f9:ba:67:08:1f:f9:51:4e:fe:c5:fb:75:
                    8f:1c:d4:da:ac:a4:e5:24:3b:14:7b:dc:66:04:02:
                    8a:a9:e6:5b:02:f4:56:35:82:c2:9c:f5:7a:9a:b8:
                    ac:49:e8:54:d0:b1:36:4f:05:98:f7:3e:5e:7d:c0:
                    91:34:be:09:40:9a:c2:f9:d1:f7:84:3b:f7:f9:15:
                    19:71:47:64:dd:ef:bf:3c:03:fa:ac:fa:2a:90:ba:
                    24:9e:b3:c4:d0:90:c5:c5:77:fd:b1:61:3d:53:de:
                    6b:c3:fd:24:a7:b4:b7:11:52:9d:16:82:a8:a7:33:
                    64:23:5f:06:c2:f6:d9:d0:56:ec:05:11:96:02:14:
                    7d:11:e4:0e:0b:a4:8d:41:d2:5d:8d:34:a4:2c:a1:
                    21:03:ce:c3:23:b6:cb:a9:c3:34:cf:07:a7:fa:e2:
                    57:e1:0b:68:8d:ac:b4:a3:a5:b6:8c:92:5e:f9:5d:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:FF:A0:C3:50:E1:1E:AC:D7:D8:D7:51:D2:81:57:0E:54:69:85
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6761796-2a4d-4821-9f65-45065932ef6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:00:82:e1:81:94:ca:17:39:35:d0:8d:97:45:46:b6:db:
         10:dd:4e:57:4d:2a:3a:0f:67:ae:17:c1:07:ea:b3:81:0e:91:
         f7:70:a4:63:91:31:e6:5a:ea:45:bf:60:34:2e:e2:cc:6a:7f:
         31:5f:a4:5c:f9:90:7d:54:67:90:d4:b2:74:9d:73:12:e0:aa:
         7f:8a:14:e4:2e:2f:85:0c:b9:f8:5a:91:92:61:34:67:67:a2:
         f1:fc:47:9a:a7:11:d5:3f:34:7a:e6:a4:2e:be:b3:7e:80:0d:
         27:c3:aa:17:34:47:80:da:13:a8:66:98:81:50:b2:1f:31:8e:
         65:56:89:87:d2:16:24:df:f1:af:0c:b6:a9:fe:ff:4b:e8:71:
         09:8b:c5:ea:75:d1:24:7c:b8:e9:a8:21:9f:79:a4:bb:7d:8d:
         f6:42:fb:b4:a0:23:62:c9:2c:94:6b:69:ec:bb:e3:ad:fc:47:
         68:5c:3f:12:dc:fe:a3:01:03:54:44:75:26:21:f3:04:03:32:
         67:6b:6d:ab:25:61:f3:fd:25:15:bd:d1:3e:e2:17:32:92:cb:
         a9:b7:5e:96:fb:79:08:30:35:27:b4:f7:2a:11:5f:93:fe:1b:
         de:c9:82:65:ac:fc:33:93:ae:7c:d3:c8:42:81:b5:3e:78:2a:
         b9:eb:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----