Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c61d0b9-34c8-47bb-805c-9e330f846011.roa
File:                     2c61d0b9-34c8-47bb-805c-9e330f846011.roa (raw, json)
Hash identifier:          6GtAzcDNAPRFI2OQdTIa9pIOmiWBjaDOMjZ76TsOQPw=
Subject key identifier:   41:64:32:F8:AE:D6:16:5A:ED:4A:44:A1:4C:10:E5:2C:9E:A8:ED:B4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C7E720B15A51A109D457BE313EBDE4B9D3E2E23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c61d0b9-34c8-47bb-805c-9e330f846011.roa
Signing time:             Mon 20 Oct 2025 02:00:08 +0000
ROA not before:           Mon 20 Oct 2025 02:00:08 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.58.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7e:72:0b:15:a5:1a:10:9d:45:7b:e3:13:eb:de:4b:9d:3e:2e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:00:08 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=d5e6936eabd01674fa542606c7b5af7ed07799cf2d1b83c59c158e94fbe25b28, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:66:39:48:b4:4b:a9:71:b4:ad:35:5f:6d:f7:
                    64:42:7f:2f:c7:60:a7:f4:ed:c2:0e:a0:56:58:86:
                    db:9a:77:5c:2d:7e:f1:05:28:20:95:a8:9f:0a:23:
                    d6:9f:1a:61:02:3f:1c:2c:62:9c:5e:aa:75:9b:8b:
                    d9:59:30:eb:63:3d:65:4a:23:ca:89:e3:d6:d2:23:
                    24:5c:96:0f:38:e8:34:6e:99:80:81:cf:06:04:76:
                    7e:51:3d:ca:48:a6:9c:02:8c:96:3b:84:6e:da:3b:
                    54:ed:6e:f8:a7:1b:5a:f6:75:87:92:23:ad:ea:9b:
                    f1:b0:3c:7c:e1:46:7e:95:ea:a8:2f:4e:0e:c6:87:
                    db:50:74:ae:66:48:38:0e:de:88:1d:ed:ba:f4:ff:
                    69:c3:76:70:6b:25:0c:84:eb:4f:99:4d:b7:35:fa:
                    77:29:6b:3b:2f:38:36:1c:00:c6:49:f3:6b:b4:7e:
                    f6:7b:6d:f4:60:2d:8d:0d:27:79:20:52:8a:c0:b3:
                    20:e0:79:66:82:fd:d1:9b:1d:bc:22:71:0c:7d:76:
                    15:c3:e8:99:81:7a:16:da:e9:b0:46:aa:33:d1:ad:
                    10:93:30:15:d8:a3:25:7d:88:30:a2:a3:ee:c8:59:
                    b0:e3:f3:d6:61:fa:fd:f0:e1:42:04:0b:ef:33:ae:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:32:F8:AE:D6:16:5A:ED:4A:44:A1:4C:10:E5:2C:9E:A8:ED:B4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c61d0b9-34c8-47bb-805c-9e330f846011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:00:f6:e8:a2:ac:43:57:38:72:2f:b3:a9:bb:a7:3f:62:50:
         ec:74:08:b7:08:b3:86:de:ac:1c:ee:88:4e:7a:8a:70:4e:de:
         d8:49:34:b5:fc:94:34:90:90:53:e7:cf:2f:df:1b:ab:08:8a:
         b8:2b:91:8c:23:d5:23:37:ed:3d:bc:eb:77:b4:2b:bb:fe:7e:
         73:85:77:07:fb:ea:f1:5a:c7:f6:14:4f:46:d7:b4:70:59:87:
         0d:1f:e5:5a:f2:9b:21:31:e8:2f:e2:d3:ee:eb:f8:16:1f:2b:
         53:e3:81:f5:1b:05:fd:84:80:95:b3:ef:0d:37:c2:05:6a:78:
         53:a2:f5:ae:38:64:f8:e0:6d:16:7f:69:99:e7:f3:19:f9:c4:
         23:bf:13:5d:30:5c:59:f4:4c:d8:ec:94:eb:e1:1e:61:6f:ee:
         6c:d8:ab:45:9d:ac:1f:60:03:31:5e:4d:53:dd:40:4d:fb:e2:
         7f:c8:af:fe:ad:33:22:7f:12:7b:0c:cb:18:7d:f9:a7:63:f8:
         24:2d:12:91:d4:6b:04:9d:b5:4b:a9:01:8f:a7:33:66:4d:cc:
         1c:65:7c:39:db:c4:ae:82:47:e1:cb:1d:7d:9b:97:90:60:72:
         2e:d6:bf:22:16:8d:e6:74:c3:2b:70:8c:fc:28:0a:7c:b8:01:
         9a:32:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----