Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b384d3f-f851-4d12-bbb4-e280d9f48210.roa
File:                     7b384d3f-f851-4d12-bbb4-e280d9f48210.roa (raw, json)
Hash identifier:          LKP7dr3aGVTsLcb0TRvEXJ5mLSvRpvNk8qsBHmqmRY0=
Subject key identifier:   B5:0A:41:BC:E3:DE:6D:BF:CB:E5:FB:91:A9:BD:9A:92:53:B8:01:A9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4939AFC15C14B0416E53EF6AFAA70681F1976E67
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b384d3f-f851-4d12-bbb4-e280d9f48210.roa
Signing time:             Mon 20 Oct 2025 02:31:03 +0000
ROA not before:           Mon 20 Oct 2025 02:31:03 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:af:c1:5c:14:b0:41:6e:53:ef:6a:fa:a7:06:81:f1:97:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:31:03 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=56a588bdcd69865199970b7503f7b0244b5ac2d77599690da629725e86ef65da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:e5:74:09:25:d3:89:84:84:f2:35:6f:e3:
                    3c:5a:2a:67:a3:b4:0d:43:1e:54:f0:51:0c:a0:36:
                    1b:be:02:15:d5:9d:0f:5c:58:54:17:14:2e:36:b4:
                    2b:7d:5f:ef:60:95:b3:80:dc:46:61:c3:58:39:39:
                    bf:36:d6:ac:83:ec:00:86:d7:61:0c:9d:00:64:f4:
                    53:e9:be:7e:8a:7a:7d:eb:ad:9a:e6:5f:9e:08:c5:
                    34:24:80:8c:ce:f3:af:e3:b5:22:68:fc:b2:3b:c9:
                    35:ed:d9:41:9d:db:b2:5d:8c:da:68:83:f4:0e:4f:
                    a5:04:bf:2e:34:54:c8:0c:e5:87:ee:5b:ea:c5:a9:
                    2e:52:c3:b7:18:87:e1:64:53:27:14:35:0b:66:1d:
                    78:2d:b9:c4:c3:da:67:2a:aa:fa:f9:a8:91:c5:60:
                    74:eb:8c:e6:53:44:91:6f:11:fc:d3:c1:3a:13:c8:
                    44:fc:bb:ba:cb:3e:e5:6c:8a:a9:2d:84:39:61:40:
                    62:13:22:a6:10:b9:9f:74:a0:d8:c5:94:ff:21:b1:
                    f4:0c:a4:45:16:c8:d1:46:cd:b2:d2:11:54:27:95:
                    59:01:1b:37:d9:d9:ac:01:5e:dc:c4:03:31:58:c3:
                    fe:3d:c9:f9:02:6e:46:9a:cc:6f:ad:52:54:64:13:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:41:BC:E3:DE:6D:BF:CB:E5:FB:91:A9:BD:9A:92:53:B8:01:A9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b384d3f-f851-4d12-bbb4-e280d9f48210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:5a:2c:ab:12:27:06:69:0a:49:e6:82:68:50:3a:5d:19:
         45:da:b4:e5:2d:c6:87:3f:81:06:61:31:f0:b1:d5:26:2e:15:
         ce:88:50:fb:3f:fd:ca:37:c7:e4:52:ce:4f:23:37:4a:2c:47:
         27:e9:d9:7d:a5:6b:88:88:5b:71:e4:f4:81:fa:85:ba:dc:19:
         81:50:ab:ac:3f:86:6d:b3:99:38:bf:ae:20:46:f8:d6:ab:78:
         5e:d8:7b:72:e7:48:7a:89:d5:54:3d:cb:6e:8f:bd:65:8e:40:
         13:00:6a:f6:c8:de:13:76:73:4f:2e:95:09:8b:db:03:a7:ba:
         95:98:a2:79:62:d8:5d:a4:4e:39:01:1a:27:23:08:9f:78:14:
         7e:1b:1c:4c:ef:a9:5e:49:ec:82:4b:72:d1:9e:f0:78:6f:98:
         2f:ca:f5:db:ca:b9:af:7e:e1:a2:55:13:b5:dd:78:dc:02:d5:
         9c:b5:6d:9a:59:49:4f:94:11:ad:7c:1f:14:6b:bc:cc:40:1f:
         ec:74:8a:81:21:e7:e0:00:82:ec:09:86:2b:7c:2e:4e:6c:87:
         26:63:1a:69:e7:bd:f9:f1:36:bc:dc:68:be:7f:e8:19:23:44:
         46:1c:af:42:5c:11:d2:d4:c5:0c:19:0f:9c:1c:30:ad:a1:5b:
         55:a2:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----