Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a6471d-e37b-4dcf-9253-860c3c0a80f9.roa
File:                     62a6471d-e37b-4dcf-9253-860c3c0a80f9.roa (raw, json)
Hash identifier:          bvnf5cvyiXmPHqkw7evdBZMA+Anjzr/Op4WISKm/sDM=
Subject key identifier:   B5:7D:87:6A:43:0D:48:3D:BF:76:08:19:9E:29:5E:E9:A2:0C:8A:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7443B58526E28A6522BF783C0274B4852A0C2532
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a6471d-e37b-4dcf-9253-860c3c0a80f9.roa
Signing time:             Mon 20 Oct 2025 02:01:17 +0000
ROA not before:           Mon 20 Oct 2025 02:01:17 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:43:b5:85:26:e2:8a:65:22:bf:78:3c:02:74:b4:85:2a:0c:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:01:17 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=e81bbb4f5c15f2f67282bd4456644ae1136575fa16ff32f89decc113b225dc39, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:cf:f3:db:0b:a1:80:2f:84:20:49:92:5d:
                    ab:06:82:65:62:78:e2:7d:b6:56:8c:63:0e:f4:cf:
                    05:60:a5:e9:c9:0f:75:c0:32:0c:f7:12:7d:cd:54:
                    eb:59:70:14:b1:05:54:47:9d:4c:b4:4e:7f:60:39:
                    d4:39:fa:0f:27:a0:53:a2:a1:47:d8:f3:92:8d:5f:
                    4c:51:68:4a:98:fd:c9:53:f4:cd:12:c7:98:fd:99:
                    08:fa:28:0c:b0:43:c9:80:b3:c4:b2:34:43:f8:cf:
                    bb:43:8b:d6:30:9a:f2:9a:d5:a9:67:99:42:89:d6:
                    4b:d3:a1:e3:41:0c:79:e8:e8:a2:cd:8c:08:c6:33:
                    52:c3:7f:20:71:c4:6f:1b:37:03:63:25:ab:74:3f:
                    f2:a2:48:91:ad:c5:8e:44:3a:59:c0:f3:b6:d7:23:
                    50:17:f5:18:d9:34:2e:71:66:c0:b8:83:ac:85:85:
                    43:81:9c:a9:b8:ff:b5:65:c6:ca:c7:4b:90:88:86:
                    19:0d:74:7f:7c:1c:43:ed:54:b2:5a:fc:95:fd:7c:
                    c8:7f:41:ee:dd:20:cd:3e:29:cc:67:26:27:6e:7f:
                    82:0a:39:f9:32:f5:77:5e:03:21:1e:b9:6d:1b:7d:
                    c0:08:e6:f6:ff:26:2d:31:b8:d8:cf:c2:e5:fe:e0:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:87:6A:43:0D:48:3D:BF:76:08:19:9E:29:5E:E9:A2:0C:8A:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a6471d-e37b-4dcf-9253-860c3c0a80f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:58:6c:96:55:be:b6:d8:db:90:8f:05:a1:a2:19:e4:7d:b7:
         4f:80:c9:3f:f5:02:32:a5:db:18:56:7b:90:c9:0c:a8:8c:64:
         10:29:23:e8:e1:b4:58:8b:1a:cb:7c:0f:0c:52:53:fa:e9:2f:
         e3:d5:b4:3b:b5:5e:c5:ec:96:67:1a:d0:fe:87:a1:2c:dc:8f:
         f7:b9:b2:a8:3a:47:7c:61:75:c9:33:da:23:42:33:5b:32:65:
         57:8d:a3:5e:40:01:22:66:d3:2b:90:e5:e0:25:ef:f2:e4:31:
         68:b6:c7:7b:18:47:32:3c:2a:f1:c5:da:8e:b7:32:b1:7b:b1:
         45:63:0e:a8:ee:ec:45:7d:78:c1:89:da:64:7e:c7:08:75:52:
         09:42:35:d1:6a:db:a8:d0:e3:4a:12:67:96:9d:1a:de:cc:d1:
         55:48:93:87:e1:9f:87:a4:27:91:6f:77:1e:b1:9f:41:23:cd:
         46:9c:06:66:35:4e:95:65:b6:ed:a8:94:19:b1:23:08:87:71:
         ae:6e:c8:ef:61:3f:17:2b:fb:0c:7d:a6:5e:ee:a4:18:c3:99:
         eb:cd:4b:08:34:9a:90:61:cf:ba:f7:ec:72:37:cb:3e:ae:a9:
         d4:3b:c7:37:01:62:34:b1:13:e5:99:02:57:fd:cc:29:c8:61:
         2c:31:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----