Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e083b3e3-7b12-4d3c-8fdc-1aadb0d0cb19.roa
File:                     e083b3e3-7b12-4d3c-8fdc-1aadb0d0cb19.roa (raw, json)
Hash identifier:          DRKevuRo3FXuxtZViQxG8kwkDg5bSS1wTTe2JVAZXJk=
Subject key identifier:   81:9E:88:00:E5:35:89:6C:EA:4D:78:BE:FE:3B:26:97:89:2C:DE:C4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03DD1D468B223D500214CD53345589928909E173
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e083b3e3-7b12-4d3c-8fdc-1aadb0d0cb19.roa
Signing time:             Mon 20 Oct 2025 02:21:29 +0000
ROA not before:           Mon 20 Oct 2025 02:21:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dd:1d:46:8b:22:3d:50:02:14:cd:53:34:55:89:92:89:09:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:21:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=38ee9e471acda69399b7a730b88ad3fd9523f2027c3d55fe36ab1c9242e73778, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:08:79:32:2e:da:38:3e:78:d7:9f:2f:c8:
                    04:6f:e6:24:0c:29:73:ce:1d:d7:0b:96:aa:a7:81:
                    1d:c8:78:61:ea:58:bc:69:97:45:40:7d:7d:6e:a8:
                    3d:ac:d3:92:ef:8f:1f:37:16:9f:18:c3:00:b2:ff:
                    9d:a2:ee:9e:43:d3:c7:fd:18:0c:3c:81:39:f4:63:
                    78:76:54:8f:7d:3c:c0:f1:a5:98:bd:e9:09:85:78:
                    83:3c:08:78:33:b4:3d:be:cb:5b:9a:5b:c2:44:67:
                    79:5b:1a:db:89:1f:ec:3f:68:c0:5e:fc:2f:d1:a2:
                    60:b5:ed:46:37:f6:ae:8a:e6:cc:62:b0:c7:9c:8c:
                    86:81:7f:08:fa:ec:a2:5a:47:b3:7f:e1:3e:9a:e1:
                    80:c8:35:55:95:c1:ef:2e:c8:09:56:1c:86:25:11:
                    5d:54:84:d8:13:9f:10:f4:ab:e4:9e:3e:d0:e1:7e:
                    9a:d5:33:dc:88:4b:56:85:28:79:39:85:1f:7c:3f:
                    31:29:fc:b5:21:a9:26:40:34:5e:e6:b0:65:7f:33:
                    a7:72:ab:4d:50:b7:f0:48:7c:be:4e:1e:d3:e1:83:
                    f7:d9:0e:23:fe:ae:2a:78:4d:48:b8:f0:0d:33:04:
                    06:fb:8e:24:01:d0:5a:4e:54:fb:f4:49:53:9f:5b:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:88:00:E5:35:89:6C:EA:4D:78:BE:FE:3B:26:97:89:2C:DE:C4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e083b3e3-7b12-4d3c-8fdc-1aadb0d0cb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:a4:53:ae:22:68:d4:1e:c6:1e:f8:55:f4:12:e2:64:98:
         8b:77:09:2a:86:4d:19:3c:b1:2f:67:de:2d:3f:97:04:b8:34:
         85:85:a9:4f:4f:e4:5a:f8:18:46:16:75:43:ca:da:84:3b:7a:
         e1:44:bd:d2:96:8a:4c:c7:20:b8:67:f9:ba:49:ba:2f:22:07:
         b3:30:08:3b:0c:67:b8:4b:0d:09:fe:9d:00:e9:a3:b7:e1:60:
         0a:0a:50:f4:de:2a:66:33:07:8c:ba:64:64:38:23:90:05:4c:
         b5:7d:c5:c7:96:54:eb:e8:0d:b4:44:24:32:93:3b:1a:ba:61:
         10:36:17:fe:f4:4b:b3:e6:0f:cc:3c:62:f5:2f:c2:58:2b:83:
         e5:40:eb:98:80:b3:f8:d5:b4:f7:d1:ac:90:e4:1c:f3:9c:fc:
         34:86:d2:c8:c6:31:e2:0a:ea:15:52:ea:38:cd:78:3d:89:24:
         ad:0c:05:a0:96:8c:dd:2a:b2:e7:a0:d3:e1:a7:eb:2f:fc:21:
         64:f8:25:95:4a:eb:a5:ee:7d:00:f2:b4:ad:be:01:aa:ea:8f:
         a3:6c:4d:01:49:e2:32:32:3e:0e:43:c7:07:60:46:b9:de:f8:
         65:2b:20:9f:2c:a9:73:17:ab:ef:2b:b7:c9:e1:c8:a8:d6:ef:
         3a:99:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----