Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917494d7-fa7c-415e-9b2f-992ea8caa4a2.roa
File:                     917494d7-fa7c-415e-9b2f-992ea8caa4a2.roa (raw, json)
Hash identifier:          jAnmqBvYNyjOX9tqw289tB1EmiMBsn5d8aTv3AUbANY=
Subject key identifier:   1A:73:FD:DE:4C:8A:03:9C:4F:57:02:D7:90:AC:95:1B:82:46:3E:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       125CB9AD2A38DA7CCFCE0F7BEBFE5509B0E95381
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917494d7-fa7c-415e-9b2f-992ea8caa4a2.roa
Signing time:             Mon 20 Oct 2025 02:52:21 +0000
ROA not before:           Mon 20 Oct 2025 02:52:21 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5c:b9:ad:2a:38:da:7c:cf:ce:0f:7b:eb:fe:55:09:b0:e9:53:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:52:21 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=7e89af94617d3950389df2aad858610ba3625ce45cf918f33275cb1325ef6e4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:bb:76:d7:cf:4f:3b:c4:d1:8d:d7:f2:a4:
                    8b:0b:8a:a3:58:ce:1c:c6:88:a6:ab:27:bf:18:9e:
                    94:1d:0f:12:e7:c7:30:78:1a:16:fa:30:08:89:7b:
                    79:f2:33:e6:7a:eb:ae:8c:c1:f7:91:99:fc:34:0d:
                    b8:3d:6f:56:70:0a:43:74:f3:83:85:40:99:20:a5:
                    8f:4b:b0:fb:74:36:d2:d4:d6:e5:49:08:3f:2f:21:
                    84:fe:ae:9a:8d:22:6a:88:c9:b2:62:dd:7c:21:d8:
                    d1:ed:3a:e6:c6:a1:86:6d:90:4d:cd:c4:81:4f:5c:
                    59:db:1a:70:ce:2d:80:bc:1a:ca:28:a7:f1:33:1e:
                    38:50:58:d7:56:2f:cc:e2:e8:a2:73:f4:82:02:b5:
                    3c:05:c6:20:67:c8:f2:da:08:12:fc:ce:03:f4:2e:
                    b5:c0:2f:45:e6:f6:bc:e7:f0:45:78:fe:37:15:26:
                    27:50:c7:d1:da:7c:65:a3:89:05:38:a7:c9:94:07:
                    0d:20:6f:a4:55:c5:b0:24:8d:6d:a2:51:ce:11:ac:
                    e5:a5:07:2b:1c:8b:54:b9:fc:c4:8e:76:d4:b6:e1:
                    82:ab:79:75:43:24:76:5c:bf:e0:2e:f0:99:38:7d:
                    75:ab:4d:69:4d:cc:e3:94:81:d8:08:a3:23:dd:af:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:73:FD:DE:4C:8A:03:9C:4F:57:02:D7:90:AC:95:1B:82:46:3E:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917494d7-fa7c-415e-9b2f-992ea8caa4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:b0:3e:81:aa:ca:46:36:de:a8:54:ff:d7:f5:5d:a9:47:
         da:4d:20:71:a8:d1:15:5d:14:b2:e9:c0:29:91:bf:03:75:ed:
         7b:64:ee:e3:a4:c4:50:d9:e5:44:2c:c5:da:42:6d:2c:fb:b8:
         e0:19:94:bd:83:7a:9a:7d:34:04:aa:1a:c2:94:f8:d2:dc:2d:
         6c:de:12:4f:b1:bc:92:17:77:2f:4b:1d:a8:6f:79:d9:b4:1d:
         f9:2f:2a:2d:84:1f:35:4a:bd:77:e6:77:63:9a:de:fd:ac:ee:
         3f:4f:8a:ca:79:01:99:f9:3d:03:74:d6:7d:83:e7:2b:65:44:
         99:a2:16:e9:90:6b:c3:cf:a8:fd:cd:5e:6a:3f:52:28:74:78:
         eb:bc:cc:ca:50:3d:8f:1d:31:65:98:f9:09:0e:20:95:c7:23:
         35:27:e0:a4:ca:e9:12:ac:2a:31:c2:a9:e5:ee:af:98:1e:67:
         93:bb:37:ea:25:01:7e:ed:b3:58:f0:54:86:50:4b:ca:44:8c:
         23:b2:a0:e4:c2:8d:45:4e:5f:f9:7c:7e:7b:ee:2e:39:cf:5f:
         eb:6e:a6:ea:81:ec:43:d9:c2:6d:2e:87:0a:a5:af:96:a3:93:
         f5:a9:75:0f:e7:5f:9f:02:c8:0c:75:66:b4:ad:ab:ff:2d:ba:
         21:6e:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----