Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c14403-6b6b-499c-8333-f0c812c226ba.roa
File:                     d2c14403-6b6b-499c-8333-f0c812c226ba.roa (raw, json)
Hash identifier:          csZG7QSJBdeVas1RoYWM1fz/UzWCuPI+9nhgrpDYqTw=
Subject key identifier:   6D:0B:1C:B6:C4:BC:78:9A:2F:93:F8:F0:71:4E:90:02:13:1B:2C:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FED01F6A7E156D99D1E3C6544C0C66982C81DB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c14403-6b6b-499c-8333-f0c812c226ba.roa
Signing time:             Mon 20 Oct 2025 00:51:30 +0000
ROA not before:           Mon 20 Oct 2025 00:51:30 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ed:01:f6:a7:e1:56:d9:9d:1e:3c:65:44:c0:c6:69:82:c8:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:51:30 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4b5d7492afe05d6b18b2acba17fd862ed33a4438fbbeb3cf01029213075668ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:d4:13:be:42:bf:e4:41:ec:77:da:4b:c9:
                    5f:e5:a8:c3:3f:cc:4d:19:e9:07:5a:1c:de:ab:4f:
                    96:8f:73:4f:39:53:5b:cb:5e:17:7b:ea:71:40:e2:
                    81:7f:a4:62:01:69:ca:19:03:dd:91:05:9c:17:37:
                    b6:af:e2:b6:ac:74:18:f5:85:50:e5:cb:36:83:d3:
                    6a:eb:d8:fd:57:10:7d:45:d8:fd:6a:ef:39:86:b7:
                    86:07:93:a6:b7:57:3b:91:10:ff:5f:b5:d4:97:31:
                    fd:1e:de:6d:27:6e:db:83:47:25:f4:73:20:34:2f:
                    b4:68:ab:e0:c6:ca:3e:24:ca:a8:fa:10:56:03:71:
                    04:db:6d:f8:da:9d:b7:12:cd:f6:ee:b7:23:40:9e:
                    2d:54:ac:2a:04:de:4a:ee:22:7c:ed:69:30:fe:59:
                    08:68:66:6f:3f:ab:c2:16:ce:d6:d6:be:64:a1:cc:
                    26:d6:8f:81:aa:fa:26:2d:e9:26:b4:2f:62:3a:ea:
                    a6:a3:df:c3:98:e5:5e:f9:39:63:00:63:55:1c:40:
                    60:69:9a:36:05:f9:b0:d5:15:54:1d:e7:fc:4c:99:
                    dc:e4:9d:ef:cd:83:a6:d3:2f:0c:db:44:d5:11:7a:
                    e5:05:1f:b0:9a:a8:27:a4:50:e5:0b:15:68:bd:51:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:1C:B6:C4:BC:78:9A:2F:93:F8:F0:71:4E:90:02:13:1B:2C:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c14403-6b6b-499c-8333-f0c812c226ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:f8:86:9e:83:0c:88:49:78:3f:38:3d:b0:10:fe:5a:ba:
         53:e6:f9:da:cf:dd:41:bb:3e:8d:9d:48:92:0a:a9:37:4a:a6:
         9e:00:70:31:80:c4:16:09:9e:e4:fd:40:68:21:10:2d:36:8a:
         4a:11:d7:bd:d7:bf:93:b4:9d:5e:1b:89:b4:61:7f:30:54:b5:
         57:15:28:e2:12:22:3b:25:63:76:53:dd:0d:09:ac:ff:82:01:
         d8:52:9e:8b:fd:02:ca:a6:74:a1:7c:ec:9f:a4:f4:7d:6b:8c:
         fb:01:f8:1c:c0:6b:ff:e4:34:48:14:42:19:45:f4:3c:13:64:
         89:e4:d9:7a:20:28:91:a6:94:37:e5:a7:cf:fd:24:36:05:eb:
         d0:48:a5:ba:54:89:fc:91:01:ed:7a:a9:c7:79:02:05:89:4b:
         3c:c4:bb:38:96:6a:e3:45:d2:d6:d9:5d:8d:e6:63:f3:b0:dd:
         7e:29:18:56:f7:cc:2e:9d:be:a9:7d:ae:d4:98:1d:6f:da:da:
         95:fa:9b:ab:cb:6d:a9:81:69:03:d8:3f:df:69:2f:c1:bf:44:
         ae:3a:d2:08:45:2d:d5:29:4e:ec:04:1d:d9:c3:3d:41:a0:9c:
         ce:c2:e6:cd:10:89:09:9c:59:23:7a:af:f9:ac:77:2f:1c:d9:
         28:d4:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----