Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1b043f-122b-4e3a-adc1-17ba9d39a0a3.roa
File:                     de1b043f-122b-4e3a-adc1-17ba9d39a0a3.roa (raw, json)
Hash identifier:          32O3T8wA+ChMw67d3hem1WnAkNl2kaM2+Qky6nOAqJ0=
Subject key identifier:   38:10:26:81:6A:86:E8:71:8B:72:50:17:08:86:BA:B6:50:C6:43:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17A111934601E91A88685BF3C00AB4190F11912E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1b043f-122b-4e3a-adc1-17ba9d39a0a3.roa
Signing time:             Mon 20 Oct 2025 01:21:27 +0000
ROA not before:           Mon 20 Oct 2025 01:21:27 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a1:11:93:46:01:e9:1a:88:68:5b:f3:c0:0a:b4:19:0f:11:91:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:21:27 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=0d831cf51dcc4a2797641aa47da9566cc41809c9c3221f61947ea9b3a4b64e95, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:e7:46:0f:7d:f1:00:06:89:e8:f6:18:fc:
                    47:6b:9f:a7:fd:e5:40:86:29:a6:95:45:de:c4:8f:
                    3a:09:61:06:3c:4b:bb:d7:0a:1a:bd:17:d9:0a:1c:
                    75:81:1f:69:43:a5:08:1c:19:51:5b:f5:8b:72:69:
                    22:46:2f:0b:c0:70:88:09:80:0d:17:2f:11:1d:dc:
                    a6:fe:80:36:9c:7b:f6:e5:25:af:56:d6:f5:72:17:
                    4a:4f:3e:d2:69:17:2a:ca:d3:01:32:c2:82:cb:f7:
                    32:8f:b5:c2:b3:aa:28:f9:99:c4:14:2a:22:0d:58:
                    5c:3c:31:23:c6:47:15:20:f2:ff:7a:42:8a:12:a9:
                    b9:98:07:b4:c5:c9:80:f6:51:31:e8:75:03:f5:31:
                    28:31:13:8c:f0:5f:7c:01:47:ac:6b:5c:ff:b7:bd:
                    8c:13:de:f3:56:a1:2b:79:6a:8e:ef:f6:53:b4:e9:
                    8b:a7:3a:22:60:5c:15:2c:f5:f7:27:c3:07:22:68:
                    86:3a:b1:21:72:ba:44:2e:93:a3:7f:9b:9e:85:04:
                    b5:84:06:9a:9f:3b:2f:24:2c:82:23:79:43:57:79:
                    98:73:22:00:7e:a7:ab:63:22:e3:f6:32:84:36:b4:
                    8c:c6:31:24:c0:de:64:24:8b:4a:60:b3:59:be:20:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:10:26:81:6A:86:E8:71:8B:72:50:17:08:86:BA:B6:50:C6:43:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1b043f-122b-4e3a-adc1-17ba9d39a0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:22:e8:34:be:8e:39:fd:2c:38:05:92:c8:02:ca:35:1b:
         3c:90:77:44:ff:1b:9c:69:08:f3:67:02:95:3a:68:38:4f:c6:
         e4:06:8e:3e:13:c7:1f:87:0b:f0:2c:f6:1f:0d:f0:a1:76:67:
         56:19:f1:94:2b:43:14:d2:80:4d:61:9e:07:0a:1d:05:08:82:
         03:61:46:e0:d6:c9:2b:ae:eb:fc:cc:54:35:b7:61:0a:fe:61:
         6b:f3:8d:fd:44:08:1e:fe:35:58:c4:24:2a:53:9f:2f:e3:01:
         3d:d5:d8:52:0b:62:3d:e7:8c:03:75:f4:31:a4:c8:c7:37:b3:
         ea:bd:10:d1:a7:6e:e0:53:e5:d5:d8:85:c2:6a:48:cf:43:bb:
         75:32:37:a8:f3:f2:9d:70:6a:b3:61:59:c6:7c:8c:b0:24:e5:
         5f:15:54:b0:70:a9:37:2e:e5:82:e1:0c:de:70:94:94:f5:a6:
         0c:91:b0:f4:55:9e:01:76:18:e5:af:7a:7a:66:d2:c6:f6:0c:
         78:96:c8:fb:fc:e5:63:0e:65:62:e0:6b:23:80:b0:72:81:1a:
         2e:03:05:91:8b:37:12:56:fb:a3:6e:ea:c4:d5:8b:3e:cf:78:
         cc:32:ff:07:9b:f2:b0:f7:2b:d1:51:ce:80:7f:7a:40:9b:19:
         c7:43:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----