Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be2604b-491e-455d-be27-00e209ba826f.roa
File:                     0be2604b-491e-455d-be27-00e209ba826f.roa (raw, json)
Hash identifier:          /4GGmWXMPo5uxuRBXnaLe/OylcLwWONq7s66CpavPrw=
Subject key identifier:   8C:6D:7C:21:2B:22:ED:74:4E:12:B7:4D:19:B4:15:40:58:32:8F:DF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E59ACFEAA58355F67EFB6996865074BED6B7F0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be2604b-491e-455d-be27-00e209ba826f.roa
Signing time:             Mon 20 Oct 2025 03:02:17 +0000
ROA not before:           Mon 20 Oct 2025 03:02:17 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:ac:fe:aa:58:35:5f:67:ef:b6:99:68:65:07:4b:ed:6b:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:02:17 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=88a7f4b04ce6b27defd8c147f331d76389c1e4364a0ba470008106251711b08e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:3e:82:e3:0c:ed:7d:73:ba:18:1c:8b:97:
                    c8:72:83:c8:34:3b:59:d5:3e:f6:d1:57:e6:32:89:
                    4a:0e:26:9d:64:60:4a:05:54:d3:c6:b2:f8:59:89:
                    0a:d4:20:0d:4e:40:62:3e:eb:43:9f:18:62:50:38:
                    14:11:ed:4c:e3:bb:59:4b:7b:3d:61:8f:89:1a:e5:
                    8a:25:d3:82:08:60:92:43:c4:45:75:51:3f:d2:b6:
                    0c:f4:9d:67:e0:f5:28:20:16:d8:57:97:3a:3a:22:
                    0c:30:0e:4d:8f:11:1d:06:c6:4d:00:97:5d:3b:9a:
                    9c:a6:5c:8c:70:f7:70:9e:09:66:dc:15:16:17:46:
                    29:58:36:8d:e4:db:57:d7:04:47:d7:79:d2:4d:6d:
                    f3:f3:8b:d5:6d:5e:b1:57:65:d2:e5:2a:d9:d8:cb:
                    fd:cb:da:cf:fc:27:ca:42:bd:31:59:23:5e:75:9d:
                    2b:59:85:bd:c9:47:2b:f1:16:c4:89:6e:c2:b9:2a:
                    c3:f9:55:51:4c:5c:2e:bd:84:51:96:00:b8:dd:7e:
                    2f:87:7f:b1:fe:7c:9b:d2:f3:4b:50:d2:3f:98:14:
                    15:cd:30:05:4f:be:28:d3:b6:49:bb:07:91:c1:db:
                    c6:44:7f:bc:3c:42:e3:2c:3a:3f:d1:a3:27:f9:08:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6D:7C:21:2B:22:ED:74:4E:12:B7:4D:19:B4:15:40:58:32:8F:DF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be2604b-491e-455d-be27-00e209ba826f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:6e:7c:83:00:8e:6e:91:5b:d9:1c:96:3b:f9:88:d9:78:
         ca:c8:13:06:d7:8b:33:fe:5b:c6:8a:d4:73:27:f1:25:7f:6a:
         ba:59:01:1a:a4:9d:f2:08:b3:f1:72:42:09:d2:2d:5b:b9:ab:
         c4:3e:f8:be:7b:11:37:6a:ac:0c:eb:7a:b5:8c:90:83:37:72:
         b9:bd:55:48:02:17:f3:8b:d7:9c:b7:8a:38:ea:66:96:7a:42:
         b5:78:c3:42:90:e1:2e:86:5a:22:50:c7:aa:f5:a9:18:7e:e3:
         b2:9a:e6:7b:4e:48:d1:fa:a2:eb:19:88:d7:fa:c9:42:47:9c:
         39:8f:72:73:ee:f3:e1:6c:f0:23:13:8a:f8:e8:51:cc:eb:67:
         5b:89:24:5f:eb:3b:42:1a:3d:38:d4:a2:ec:69:50:b2:41:2d:
         5e:d9:6e:6d:85:fb:2f:ad:89:4e:b0:cf:e4:ca:15:43:2e:13:
         9a:0e:00:1a:8c:25:c9:71:fd:0c:67:06:59:55:49:7f:5e:2f:
         0d:45:4c:ac:05:6e:e2:23:b2:29:97:2c:e6:eb:19:18:82:6b:
         7e:ae:59:6a:18:0b:e8:05:7c:7f:98:cc:cb:c3:33:bf:b1:90:
         d1:7a:c2:e6:33:4a:ac:8d:6a:2d:39:e3:a5:62:3a:6c:ce:a0:
         8e:a5:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----