Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331ae5-53a8-4f0b-aaa7-58e678d53e41.roa
File:                     ca331ae5-53a8-4f0b-aaa7-58e678d53e41.roa (raw, json)
Hash identifier:          r4PQAVQNcjZRXX5qp5V4XJ5yRoOinFmJjHeojOkVc+4=
Subject key identifier:   37:0B:D1:3A:F6:70:E1:21:1F:D2:6D:B2:66:4A:18:06:3B:AF:9F:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50FAF092B7F80863B81434EE17BF6C5120844878
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331ae5-53a8-4f0b-aaa7-58e678d53e41.roa
Signing time:             Mon 20 Oct 2025 03:20:52 +0000
ROA not before:           Mon 20 Oct 2025 03:20:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fa:f0:92:b7:f8:08:63:b8:14:34:ee:17:bf:6c:51:20:84:48:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:20:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=58232c091f8b29ae6e183be62ca22cbadcfa3e2ec00d11a420c7bef869f24a2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:ea:55:c6:dc:f1:9f:de:e1:fa:89:a1:ad:
                    1d:7b:45:bf:af:c3:1a:fb:b5:7f:2d:45:f8:76:c5:
                    f0:71:18:fa:ef:86:84:08:48:22:67:53:df:51:5c:
                    f6:96:05:0e:77:a2:8e:ef:8d:8e:ac:5c:c1:06:31:
                    6b:5e:3a:d9:2c:14:7a:2a:eb:1c:49:17:9d:f7:06:
                    5c:7e:83:a4:19:e8:f1:89:6b:cc:0c:88:e2:92:a5:
                    e7:3a:2d:78:d5:78:4a:13:f7:2b:76:31:54:34:7a:
                    14:49:02:85:97:b8:ac:a3:3b:c3:49:b5:f9:3f:2a:
                    cd:64:19:8a:59:43:4d:53:7f:6d:13:45:7f:dd:27:
                    a1:59:85:98:7d:07:f1:fb:e8:d3:f9:3f:ca:4c:44:
                    d9:8c:b6:cb:2b:da:82:5a:fe:c9:dd:75:04:2f:ad:
                    c7:74:17:62:9e:ff:87:86:9e:6a:71:84:04:04:01:
                    7d:4d:06:34:6d:9c:36:70:33:34:c9:e7:0e:56:37:
                    8a:b4:d9:c3:38:50:3f:9a:fe:90:6b:e2:c4:ca:53:
                    cb:a0:73:de:73:16:f6:a6:97:2a:a7:37:f2:07:a8:
                    b8:ce:05:dd:f0:65:36:cd:6e:4d:c6:e2:91:b8:fc:
                    f2:24:87:37:cf:47:0a:2b:5c:a5:12:b2:70:dd:9b:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0B:D1:3A:F6:70:E1:21:1F:D2:6D:B2:66:4A:18:06:3B:AF:9F:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331ae5-53a8-4f0b-aaa7-58e678d53e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c8:9a:fe:84:cd:41:d3:6b:26:3a:f0:58:ed:4f:ad:23:ed:
         6a:b4:e1:ee:19:ad:1f:9d:81:96:a5:4b:08:f2:ec:5b:52:32:
         78:8b:d5:12:ce:28:77:71:a3:87:b2:cf:c0:4f:e8:7e:00:5a:
         42:3a:e6:ad:81:0a:a7:b0:ed:cb:da:21:41:98:21:a9:78:df:
         21:ed:f7:dd:de:d9:9c:12:f1:98:af:09:08:28:72:3f:ce:3d:
         72:d6:99:01:d1:66:ab:a8:44:18:02:1c:9c:2f:02:b9:5d:5c:
         c8:9f:d8:5b:40:70:bf:bd:3b:93:5d:de:05:b1:8c:71:1a:0d:
         4d:c7:1e:d0:1f:e4:a5:7b:9a:2c:8f:5e:4e:a2:c8:0f:c1:f5:
         a9:b3:cf:13:9f:f6:a4:b6:f7:c0:90:ad:fd:10:99:af:db:dd:
         cd:5b:76:25:7f:c4:2a:41:97:b2:31:96:c9:65:cc:08:e8:cd:
         3d:89:58:a0:4a:da:ce:45:2d:b3:fb:57:7b:3e:e8:82:4c:7e:
         00:67:7e:81:76:76:a9:15:c6:91:43:7b:e0:c5:49:ff:2c:e2:
         48:4d:17:8f:6d:04:b2:b2:85:1a:47:48:fe:eb:ca:f7:db:8b:
         90:7f:dd:74:71:1d:fe:78:84:04:6a:57:74:7b:c7:76:f5:95:
         19:f2:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----