Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37895416-af81-4249-b0d4-f86c38889605.roa
File:                     37895416-af81-4249-b0d4-f86c38889605.roa (raw, json)
Hash identifier:          s6XGt+2x6cI15PKsX3tEVGmLok7j/eQ8iWT7NRdCCa8=
Subject key identifier:   AA:AF:5A:C5:E7:FA:63:6B:74:D2:BE:FB:4B:C4:B1:9C:74:EB:5B:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       315030600F8EB70959CC5B5DAFE99BC98060EBCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37895416-af81-4249-b0d4-f86c38889605.roa
Signing time:             Mon 20 Oct 2025 00:20:58 +0000
ROA not before:           Mon 20 Oct 2025 00:20:58 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:30:60:0f:8e:b7:09:59:cc:5b:5d:af:e9:9b:c9:80:60:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:20:58 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=ae96e2b33e68bfd889d575d3fe59807718854350304a029d30439775a4ea1e66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:b8:f2:db:71:ce:55:f2:54:1b:a5:a7:54:
                    0f:11:7b:a4:67:cd:18:38:ba:6d:ab:02:2a:42:56:
                    eb:5d:74:32:cc:ea:40:06:bc:21:bc:bc:92:26:4e:
                    d7:2a:1b:91:0d:ca:36:ee:73:f5:ca:55:0f:ba:25:
                    d6:c0:95:11:a6:68:a3:0b:3b:ac:bd:87:7e:e5:b0:
                    ce:6b:76:65:24:bb:8c:c4:3b:e1:13:35:49:ef:26:
                    e8:5c:30:ed:52:3c:00:8d:21:e7:7d:83:5b:62:de:
                    7e:91:d3:b4:7c:15:5e:32:12:3e:ae:3f:f4:49:0c:
                    43:c8:98:8f:bb:63:0f:22:d3:fd:c4:cd:91:ad:09:
                    ef:d6:2b:21:31:45:5c:ab:93:d0:eb:db:a0:31:ca:
                    e9:08:bf:e7:d8:85:23:76:40:1e:d8:9c:ca:2d:6f:
                    3a:57:33:1a:70:fd:69:03:6f:51:5b:f7:3f:d9:b1:
                    30:2f:ba:0d:9e:ef:f9:8d:46:10:7a:44:fc:dc:fa:
                    ba:df:a4:bb:41:f5:e7:7c:12:3f:d3:e8:43:a5:d3:
                    40:1b:86:42:bb:77:30:c4:c8:08:83:c1:03:6b:88:
                    0b:e5:5b:11:4c:cf:07:22:d9:1a:5a:83:db:46:bf:
                    0f:13:a4:61:08:86:bb:46:14:25:34:3c:55:3e:57:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:5A:C5:E7:FA:63:6B:74:D2:BE:FB:4B:C4:B1:9C:74:EB:5B:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37895416-af81-4249-b0d4-f86c38889605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:b4:0a:29:83:dc:92:1c:78:98:fc:e9:15:5d:86:d0:56:
         b0:89:f0:04:49:5e:1d:64:50:54:6d:c4:68:d6:02:00:c3:ea:
         8f:95:d8:ba:b1:a2:d5:7f:98:79:c9:d5:75:4a:97:94:b8:e4:
         54:86:ec:c1:f9:f0:86:d1:1b:ce:2d:de:1e:c3:10:61:7a:18:
         ae:09:37:13:6f:82:c5:b2:1b:0e:19:60:40:12:09:2a:ef:94:
         a7:fb:e3:d6:40:54:df:ca:6b:1c:5b:1f:e6:c1:a7:e9:d3:53:
         51:99:f6:8e:ea:07:6a:9e:28:76:9f:3e:66:e7:c9:a1:ab:83:
         92:d5:50:06:9b:6d:b9:ea:85:07:53:2a:39:4c:51:6e:20:8e:
         2b:15:77:f6:86:bb:02:d9:ea:8a:a1:8f:cd:af:4d:da:27:18:
         fe:76:63:e2:59:9e:b5:49:bb:93:35:a2:ed:c5:0c:1e:84:46:
         1c:42:6f:f9:1b:68:c1:41:0a:d4:b2:3c:2e:cf:89:1b:39:1d:
         1f:e2:39:d0:39:c6:ee:b5:7a:b8:8a:19:b0:62:67:d2:e2:5b:
         89:ed:23:92:13:21:4f:2d:e4:1e:fa:38:f4:ef:1f:01:13:6f:
         a9:ad:da:ad:30:48:00:b1:50:34:72:cc:23:ad:34:1d:29:f7:
         b8:07:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----