Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eaeb8ee-6347-497c-8a63-45421e9cdb74.roa
File:                     5eaeb8ee-6347-497c-8a63-45421e9cdb74.roa (raw, json)
Hash identifier:          MGy8IRri/0XsgbgjtTm3R8I9iYQT9ckJnQ35crV+15A=
Subject key identifier:   0A:F2:65:1E:5A:69:4C:C6:00:CF:7D:D8:61:F5:B5:4F:8B:CC:2C:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B7EAA085E07297BD4A3A8C212FEB5CED47329A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eaeb8ee-6347-497c-8a63-45421e9cdb74.roa
Signing time:             Mon 20 Oct 2025 05:51:23 +0000
ROA not before:           Mon 20 Oct 2025 05:51:23 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7e:aa:08:5e:07:29:7b:d4:a3:a8:c2:12:fe:b5:ce:d4:73:29:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:51:23 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4b3fb60733d93f7945ad57033fb2d244429edd53796c2ced22ed295be6604a0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:ce:74:25:91:88:db:40:77:35:7f:14:4b:
                    7a:5a:eb:a3:da:42:e7:e4:90:17:8c:16:55:9e:f7:
                    d4:ef:a6:e5:e3:96:7d:f2:a8:5a:7f:fc:cc:cb:92:
                    25:f4:f0:5f:0b:90:e5:5b:45:b4:65:69:79:8f:46:
                    97:bd:08:2b:74:8c:44:26:5d:46:10:a0:e0:86:c2:
                    2e:01:cc:4b:0b:38:41:f2:d6:04:a7:fc:3c:2c:e1:
                    5e:ac:29:c3:3c:e8:d8:3e:d9:ff:6c:3c:cd:8e:f7:
                    8d:c4:50:b3:83:d0:77:3f:a9:82:0a:bb:c7:f3:45:
                    90:57:92:f5:26:3d:e9:7f:c0:3d:dd:c4:ce:73:92:
                    ec:bb:a2:70:32:22:35:87:4e:1a:a1:68:8d:4b:1f:
                    75:c4:c8:b1:5d:71:ad:a2:9b:d3:83:3f:24:81:d6:
                    85:a8:8c:8a:3f:bc:58:54:7d:55:c8:c4:c5:fd:e4:
                    6b:be:c3:58:88:e7:a2:3a:38:23:41:87:83:a5:5f:
                    1c:24:e3:82:48:51:82:88:93:de:4f:05:57:be:88:
                    01:1e:2d:58:6c:dd:5b:7f:a7:91:72:dd:a6:65:3e:
                    92:14:01:df:b0:15:2f:7b:ba:ca:ad:56:cd:d6:38:
                    c4:b0:24:b0:73:30:c8:b8:6e:bd:24:c9:d1:2b:91:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:65:1E:5A:69:4C:C6:00:CF:7D:D8:61:F5:B5:4F:8B:CC:2C:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eaeb8ee-6347-497c-8a63-45421e9cdb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:b4:37:11:e0:67:e5:ec:b6:dc:ae:d2:7f:eb:78:c2:d7:
         d3:28:12:32:93:8f:40:6e:35:01:ef:f1:60:5c:9f:1e:ca:d0:
         8c:fc:2e:32:fd:01:fb:af:04:01:c9:5b:7d:6b:ab:26:6a:c1:
         43:cf:34:a0:0d:63:4b:18:85:cd:46:10:d8:b4:f3:af:cd:50:
         95:be:96:af:00:d3:d3:04:40:b8:2e:4b:07:fd:27:9a:56:cb:
         12:2b:25:ac:e9:fc:94:17:ac:78:d6:33:74:db:2f:cf:ae:29:
         8d:b1:a3:bc:38:f9:36:1b:b9:c5:c4:ec:19:44:6b:5c:08:a6:
         41:d5:64:fd:06:28:9d:81:46:b4:58:a2:a9:a4:67:8f:22:fb:
         8c:cc:20:91:69:5e:86:fc:93:9c:0f:b4:09:0d:7b:72:ae:c9:
         d6:76:ce:e6:48:2c:6a:ab:bb:16:3d:64:f3:e8:e8:b7:c6:fd:
         f5:e0:2a:70:86:f2:ab:e8:79:48:a9:0d:0f:6b:96:c6:a0:cb:
         4f:0f:56:55:90:ec:ce:91:f5:02:81:4c:db:28:70:1a:b1:fb:
         14:78:e3:92:b7:60:65:0e:9e:e7:ac:a1:0e:17:c6:86:37:ca:
         7f:76:b4:69:94:32:a0:3b:94:2a:78:2b:97:28:6d:54:5d:d2:
         e9:72:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----