Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5473de-456e-416f-99eb-10848ddd8c40.roa
File:                     3b5473de-456e-416f-99eb-10848ddd8c40.roa (raw, json)
Hash identifier:          72ibYvjvKNvHzDtEF5700MHmBbSuBGFrfhkCfpG42NE=
Subject key identifier:   B5:2A:CB:4B:58:2E:09:A3:74:28:AE:95:49:7B:42:19:0D:01:9D:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       51E6BFF2E352BC6E59F11BD2C863BCBE33ADFBB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5473de-456e-416f-99eb-10848ddd8c40.roa
Signing time:             Mon 20 Oct 2025 00:41:52 +0000
ROA not before:           Mon 20 Oct 2025 00:41:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e6:bf:f2:e3:52:bc:6e:59:f1:1b:d2:c8:63:bc:be:33:ad:fb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:41:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=9a9f3efb9da984fb7f6140894b133c6f80f02216fa8a63944aa531060899f6a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:34:cf:b6:cd:9d:ea:3f:6d:9e:55:ff:c6:
                    a3:29:d3:5f:5e:36:df:fd:67:2b:2c:e2:e3:b4:9e:
                    c7:20:ed:0d:14:34:bb:ee:c7:d2:18:c8:db:37:e7:
                    37:93:82:5b:6b:58:31:6b:86:97:b3:75:c0:64:96:
                    cf:80:25:2d:e8:10:cc:3c:e8:6e:1d:49:69:3a:25:
                    2d:0f:70:48:5f:8b:de:52:d3:1e:b0:4f:a6:73:90:
                    ca:ff:e2:75:08:14:dc:1b:89:0b:1d:58:e2:0d:9f:
                    f8:12:62:b8:9b:6e:a3:79:99:83:c8:ef:36:e7:8c:
                    df:b5:82:2b:67:bc:ca:b3:2c:e1:c1:09:46:26:cf:
                    a0:c8:80:f2:85:d8:6c:89:17:21:cc:18:e7:ac:d7:
                    45:a2:45:d6:e2:0d:a9:0b:9e:81:c8:92:84:1a:9a:
                    f1:3c:7d:fb:c2:59:7c:c4:29:f9:40:17:9e:da:03:
                    a3:98:9b:35:a5:c3:34:48:81:c9:98:6b:fe:c4:69:
                    99:a3:e3:1c:4a:54:01:ff:b5:6f:ca:c3:1c:8f:27:
                    e1:40:30:17:db:80:11:3e:7f:39:d7:3f:e4:8f:d0:
                    d0:72:22:16:99:20:6a:00:27:2c:8d:b7:50:49:76:
                    a2:ba:d8:8a:95:e3:e1:82:42:71:52:e4:42:81:8c:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2A:CB:4B:58:2E:09:A3:74:28:AE:95:49:7B:42:19:0D:01:9D:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b5473de-456e-416f-99eb-10848ddd8c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:15:9a:e7:42:4a:d0:96:55:0c:92:07:4e:63:6a:1a:9a:63:
         60:fa:13:3e:ef:8c:9a:9f:f6:82:f6:8f:e3:d8:c8:5a:ac:c7:
         2b:74:50:d5:ed:e1:a1:12:a3:9c:5b:64:0a:a1:fa:b6:22:94:
         03:a8:c1:34:80:d2:82:83:b2:53:eb:a6:d4:70:78:e1:af:33:
         bc:53:49:dd:e1:98:37:8e:c0:47:5d:12:f8:e3:e5:d1:b2:b1:
         b3:62:be:31:05:b0:5d:e8:17:bf:44:2c:12:b5:2a:62:ae:41:
         38:7a:da:e7:09:2d:97:92:de:14:1c:e8:6f:e3:13:8e:a9:1a:
         9c:15:61:9f:31:28:e0:21:e9:8a:20:b3:c3:19:6f:ba:38:50:
         00:9a:2c:fe:bd:d6:40:20:a0:35:43:ff:ce:13:7f:06:bc:06:
         8f:2f:ac:f6:79:e6:a8:ec:c6:2f:aa:ee:66:1b:6c:06:1b:91:
         75:9a:e7:38:24:b9:46:37:60:ca:0f:ea:8f:40:1c:da:55:b2:
         2b:ce:83:58:9b:cb:0f:58:a1:50:c9:1e:c3:01:9f:9a:98:c4:
         8a:41:eb:41:aa:7c:50:61:25:64:96:53:ca:2e:de:f8:fc:7e:
         fe:cd:0f:ea:47:2c:d5:7c:c4:06:24:72:18:bf:e6:5a:ac:65:
         6d:ee:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----