Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1c97ae-9f33-4bc0-8b57-e9ec43ef7a1a.roa
File:                     ce1c97ae-9f33-4bc0-8b57-e9ec43ef7a1a.roa (raw, json)
Hash identifier:          4JEJxSmVwnq/oXNB5y1JEqIXRopsijBMp6pa6ROBTeY=
Subject key identifier:   E3:10:4A:91:21:A1:43:7C:9C:39:4F:D6:38:79:92:AA:C0:60:D5:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EEC811CF501644CE82719EA268B9C3ABD12FACD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1c97ae-9f33-4bc0-8b57-e9ec43ef7a1a.roa
Signing time:             Mon 20 Oct 2025 00:11:20 +0000
ROA not before:           Mon 20 Oct 2025 00:11:20 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:81:1c:f5:01:64:4c:e8:27:19:ea:26:8b:9c:3a:bd:12:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:11:20 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=a08aed8c43d560e15d040c95dfa72872d6b0252030de2426f7ccf76fc132d844, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:e6:28:95:57:5e:67:de:7a:b2:94:bc:58:
                    73:e9:9b:a5:49:9a:55:74:1a:9b:81:06:35:9a:50:
                    81:7d:ef:c3:bb:8d:9d:b3:07:14:6b:ce:ee:69:24:
                    09:d7:43:84:d0:78:90:77:cf:4a:aa:e4:3b:2e:3e:
                    af:61:0e:63:33:a1:51:ca:4a:70:57:1c:bd:f2:72:
                    cb:61:a7:6c:97:61:b5:f6:97:35:e2:34:1d:25:22:
                    da:4a:1e:17:d1:9f:ce:0b:b1:91:66:81:ad:51:70:
                    39:69:ad:bc:c4:53:96:57:5b:f6:ef:0f:42:69:11:
                    d0:5e:bd:7c:60:4a:f9:61:b8:87:65:51:96:2d:cb:
                    91:95:68:1e:9e:f7:58:b5:91:9c:65:d1:b4:f4:7f:
                    41:b8:ca:0b:e6:f2:6a:51:84:16:b0:60:98:9d:64:
                    b0:cd:cd:e3:2a:f8:74:42:cb:0c:76:16:6e:ea:09:
                    41:c0:3f:8c:c2:3e:f6:da:70:fb:ec:96:27:ee:6a:
                    87:35:6e:f5:64:b6:22:99:15:17:a0:57:5a:4d:08:
                    e0:58:65:77:59:3e:70:5e:36:3f:8a:42:99:c9:99:
                    91:dc:8f:37:e6:de:6c:fd:70:80:c5:91:71:12:4c:
                    54:26:3b:e6:17:85:75:79:35:aa:8d:b0:00:7d:fd:
                    11:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:4A:91:21:A1:43:7C:9C:39:4F:D6:38:79:92:AA:C0:60:D5:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce1c97ae-9f33-4bc0-8b57-e9ec43ef7a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:df:2d:fe:3d:83:a8:22:52:1b:3c:47:2f:c2:8d:67:48:f6:
         30:19:af:64:12:c5:16:e3:7d:ee:b5:31:92:49:c8:15:9c:49:
         49:4c:e8:5d:6e:2a:d3:ba:d3:ee:1e:94:02:3a:20:fc:e6:2e:
         fd:6a:56:c3:be:0f:bf:85:11:66:26:70:22:a7:4f:b1:d3:2e:
         38:bc:0a:4d:22:4f:08:d2:ea:cc:01:c7:cf:67:b5:8b:92:a3:
         f5:ab:65:6a:cf:02:84:dc:43:ca:5a:25:a4:3a:16:06:f4:32:
         8d:0a:d5:d1:b6:d0:2d:d9:2c:e4:88:26:f3:42:c0:dd:ec:c2:
         9e:42:a4:15:84:97:ef:32:5e:f5:97:cb:82:2d:ba:8b:b1:5e:
         76:17:ee:eb:d5:f1:43:4c:b5:b0:46:c0:11:23:da:a9:cd:8a:
         ab:8d:91:0d:53:24:04:01:35:13:28:86:f6:88:9b:b4:c8:fb:
         e9:56:1a:69:ea:74:45:1e:fa:00:5d:8c:1f:c5:d0:96:51:71:
         dc:fd:da:6f:9c:bd:67:8b:29:5f:55:94:11:78:e9:89:4b:b4:
         10:28:45:56:3a:99:57:ee:cf:aa:df:1f:1e:ff:00:03:07:36:
         63:c4:68:e9:fe:1f:30:bd:30:09:0a:7a:13:9d:0a:6f:5f:d5:
         95:d0:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----