Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0137475-3e7f-42f5-8e66-b617eb049470.roa
File:                     f0137475-3e7f-42f5-8e66-b617eb049470.roa (raw, json)
Hash identifier:          HbZBSKnAuo7htyU+xb1MQ8iMxKIf2J0l7ooJyskWn3g=
Subject key identifier:   34:15:6F:F5:E5:FA:27:41:D6:7A:09:17:75:7B:C3:E5:E5:A8:73:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30EB3B769D8FAE658FABC5067591162E7B608243
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0137475-3e7f-42f5-8e66-b617eb049470.roa
Signing time:             Mon 20 Oct 2025 01:00:05 +0000
ROA not before:           Mon 20 Oct 2025 01:00:05 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:eb:3b:76:9d:8f:ae:65:8f:ab:c5:06:75:91:16:2e:7b:60:82:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:00:05 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=aae6725b26ae6275f3959a48d9532e1c3ecfe3be75af009b4ac5430b8675d994, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:56:2f:95:71:ee:e4:1d:68:e7:e2:b4:92:
                    18:a8:25:98:ed:5d:77:44:a4:db:87:da:4b:1a:68:
                    66:85:28:8e:2c:70:44:2f:7d:22:c5:90:a4:5f:a7:
                    a5:4d:ef:52:1d:8c:e7:30:e8:6b:16:9b:5c:c1:40:
                    3a:45:e9:a5:00:4c:35:68:11:0c:65:34:58:f5:7a:
                    97:76:a5:d2:bc:1e:94:15:6d:af:cd:13:0b:dd:9d:
                    d3:b5:5b:5b:e0:36:f6:5b:b4:65:15:56:d9:cd:6d:
                    88:a6:b1:12:85:4e:2c:1d:0f:94:54:f1:1a:16:2c:
                    28:bf:d4:33:d1:32:3c:ba:35:7b:6e:bf:6d:48:09:
                    44:64:11:b0:dc:bf:62:df:d9:81:04:34:7b:03:6a:
                    f8:45:64:fe:69:48:e9:8c:af:b6:49:53:44:ac:d6:
                    bf:41:aa:02:ae:25:dd:90:fe:52:80:66:71:52:32:
                    d5:be:68:04:2c:b2:af:ce:42:11:1d:97:5e:a4:09:
                    39:61:8d:e9:6d:ed:40:13:cf:7c:da:cd:e0:3d:17:
                    c6:1e:0f:be:3a:9f:a4:cb:f2:2b:54:62:9f:3f:7b:
                    8a:71:b2:a4:a6:32:24:c9:06:18:df:9d:e7:b2:18:
                    f4:8e:6e:94:4c:08:44:c3:5e:25:30:85:90:71:da:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:6F:F5:E5:FA:27:41:D6:7A:09:17:75:7B:C3:E5:E5:A8:73:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0137475-3e7f-42f5-8e66-b617eb049470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:70:a5:df:a9:3b:92:31:f0:44:b5:5b:5a:70:01:14:e9:
         07:cb:08:90:31:2b:f5:ba:ab:37:bc:ab:cc:c1:9c:01:6b:32:
         4e:a7:b5:b9:61:a5:2c:06:5e:87:f6:1a:22:41:0d:92:8b:58:
         a9:3a:6a:2d:f2:72:52:98:60:4c:bf:82:66:68:2e:aa:70:1f:
         cc:bf:fe:23:9e:60:13:68:d3:a5:41:4a:d5:48:93:c3:a7:29:
         80:1b:b4:2e:70:9a:5b:8c:75:36:d6:e3:77:69:28:2d:ca:bd:
         0d:f8:4b:68:8b:97:1f:86:da:68:91:3a:0b:ff:89:7a:64:15:
         95:d3:b7:98:f0:c8:3e:8c:fc:9c:88:80:05:ae:f3:a2:6e:c5:
         64:2b:c8:91:65:63:22:59:a1:a8:95:b7:c0:5a:e8:f7:b2:c6:
         77:e5:18:e1:4c:6f:2d:17:6d:7d:f4:8a:17:f7:86:32:b1:4b:
         40:b7:3f:5b:b2:cb:d5:2c:e0:4a:7a:17:f8:24:cc:96:fd:0b:
         85:04:73:69:86:58:63:ec:0c:ac:57:43:d7:32:60:af:44:2b:
         51:ba:58:e2:b7:6c:e4:24:b4:fc:f7:15:0d:1f:2b:6a:53:27:
         e0:79:6c:20:98:13:39:ea:a8:33:af:02:07:eb:59:42:c3:a2:
         5a:c5:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----