Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd9e4e76-e2dc-4ab3-84f0-195614969c03.roa
File:                     cd9e4e76-e2dc-4ab3-84f0-195614969c03.roa (raw, json)
Hash identifier:          dqvzbI5qILL9zzdcP8nYmWxGislcu9ABvznP9XY+ej0=
Subject key identifier:   BE:C3:E0:DB:7C:28:9A:0F:9A:06:20:1D:75:2B:6F:DA:5F:91:28:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       382073C26175C97FA7567DD9BD3658DF4B1BAB61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd9e4e76-e2dc-4ab3-84f0-195614969c03.roa
Signing time:             Mon 20 Oct 2025 05:01:40 +0000
ROA not before:           Mon 20 Oct 2025 05:01:40 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:20:73:c2:61:75:c9:7f:a7:56:7d:d9:bd:36:58:df:4b:1b:ab:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:01:40 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=77ce8a0baad392ee5cbaa5b5785f7954423d854bdc3fb36037e187e44f0d961f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:96:f6:02:32:8f:ad:a8:3a:5a:7c:72:1b:
                    fe:6d:68:d0:8c:ea:09:4b:fd:ea:81:14:9d:0c:1e:
                    15:b5:9a:73:fb:a0:91:5c:21:0e:f5:70:0c:1f:5a:
                    ab:46:b3:7c:2c:94:00:df:07:9f:0e:19:01:6f:a8:
                    3b:f1:49:17:52:e6:14:fe:a3:99:5f:78:09:46:00:
                    d9:b0:d1:13:3f:c5:7c:21:a9:5b:12:be:ce:b8:15:
                    9d:a3:6d:90:ef:06:87:4b:67:30:88:f4:04:24:fe:
                    99:48:6c:2d:43:70:3c:6d:29:9b:99:74:b2:54:6a:
                    20:c7:bd:73:27:d1:7d:de:7c:89:af:f9:b9:7a:09:
                    71:8a:21:5a:50:1c:83:0c:46:b0:b4:fc:a8:e0:7f:
                    f0:83:0d:a5:7c:9e:1b:74:2c:ea:df:e9:28:4d:0b:
                    28:d8:7e:df:25:c9:9f:34:18:0d:67:f7:78:c6:3b:
                    b1:5d:f8:2c:7d:f0:66:05:ce:16:2a:3c:ba:68:9b:
                    b2:24:e2:16:8b:45:1f:9b:0a:b6:d0:82:a9:88:14:
                    26:0e:a6:cc:30:30:28:7e:e7:4b:d2:82:2e:94:8e:
                    dc:4a:b7:fd:4f:85:27:27:47:5e:6e:d9:08:9b:84:
                    ef:a6:89:ca:85:71:98:8e:1c:52:da:a9:7a:83:49:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:E0:DB:7C:28:9A:0F:9A:06:20:1D:75:2B:6F:DA:5F:91:28:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd9e4e76-e2dc-4ab3-84f0-195614969c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:7c:e6:1e:a1:ab:00:1e:a6:3d:50:d5:55:a6:06:9e:92:
         ce:1a:3e:76:c9:78:a3:7e:14:1a:5a:e7:e2:a7:e1:e9:23:e4:
         75:99:65:13:1f:6f:7c:40:45:5c:af:6b:d7:65:55:7b:0c:57:
         f7:d5:a0:2b:42:6b:0b:a0:98:89:18:a4:66:7d:c1:57:87:f2:
         94:f5:af:ed:0e:98:10:c9:bf:7e:21:3e:f2:c8:24:b8:66:70:
         b4:6f:6b:2a:04:58:b2:75:a0:a5:d5:e4:2b:17:ec:d2:10:3d:
         c0:61:79:86:06:c9:91:4b:35:cc:22:fe:ac:2f:6c:72:a8:93:
         08:65:05:72:05:13:37:ed:c9:3d:1b:a7:b8:f6:89:a1:f0:eb:
         c6:ff:00:5d:96:86:99:ab:95:36:1e:8e:9d:60:e5:d2:7a:7a:
         e2:9b:52:b9:68:a2:0f:ad:c1:f7:7e:e4:e4:ae:68:e7:63:62:
         99:3f:55:8a:8d:1f:04:f9:bb:ae:4c:07:e6:8d:7b:2b:d3:2b:
         b9:e3:55:a3:d1:da:c4:c5:c2:a0:18:c3:df:50:f7:ef:0b:12:
         7a:bc:68:14:d7:67:19:48:74:1b:18:27:d4:ba:4a:6f:75:c2:
         19:e9:1b:76:5c:5b:3f:3d:c8:67:1e:79:3e:92:f2:cb:2b:9c:
         3e:42:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----