Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e8897e-4079-4a30-9383-aa5483968b7e.roa
File:                     e5e8897e-4079-4a30-9383-aa5483968b7e.roa (raw, json)
Hash identifier:          LB5zvdB1jMOhQYnjWzyFjsxhFdsUxqX1oBzsReHEvoY=
Subject key identifier:   F7:B7:84:D9:70:5D:53:CD:9C:54:60:7D:41:8E:51:EF:38:06:EE:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4583612EE96DC1F1AFDAF8E3AC409A4514A21970
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e8897e-4079-4a30-9383-aa5483968b7e.roa
Signing time:             Mon 20 Oct 2025 03:50:06 +0000
ROA not before:           Mon 20 Oct 2025 03:50:06 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.157.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:83:61:2e:e9:6d:c1:f1:af:da:f8:e3:ac:40:9a:45:14:a2:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:50:06 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=5dc06fc965664c9cf19c7877f3d8649a7f62b43b02b4851a4f00ef66793e169d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:b2:17:db:8e:71:70:07:25:55:31:74:ad:
                    f3:0a:dd:ca:a8:57:9d:fa:33:99:d0:ef:bd:3a:79:
                    7f:e9:de:13:cf:42:1f:9b:5a:83:09:5f:cf:3f:f2:
                    22:63:46:88:21:07:f2:a0:57:37:c3:f1:5a:77:3a:
                    56:7b:ab:96:c8:f7:25:3e:c5:44:46:f9:9c:78:a3:
                    78:2c:21:0b:b7:57:07:29:9b:7e:c8:07:2e:04:a7:
                    48:b4:e4:cd:1c:c0:a0:e8:8e:ef:22:b8:6e:06:59:
                    d1:7c:31:6c:ba:55:27:b4:84:c5:cf:36:1c:8c:f3:
                    6c:65:36:2d:2b:81:46:6d:16:6f:02:1a:84:72:1c:
                    8a:01:f5:35:c3:a8:38:c0:d1:2f:81:a3:1d:f2:18:
                    a7:f3:33:2f:c1:92:04:8c:1d:af:c6:fd:8d:28:df:
                    b0:8e:cc:de:0f:c1:27:d4:b1:1b:f2:27:53:80:73:
                    82:56:60:ff:97:be:61:cf:74:a6:4b:2e:4c:28:16:
                    01:93:a5:a4:56:e8:96:dd:ca:bf:a6:b9:eb:c9:4e:
                    6b:db:29:15:26:fb:c8:98:a5:af:9e:d4:6e:0b:ed:
                    cb:f2:24:c9:da:76:1a:5e:c7:bf:03:a6:5e:ff:b8:
                    1c:2b:88:a0:6f:32:cb:e7:cd:fb:0a:9c:70:1f:3a:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:84:D9:70:5D:53:CD:9C:54:60:7D:41:8E:51:EF:38:06:EE:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e8897e-4079-4a30-9383-aa5483968b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.157.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:62:f8:3b:8a:89:4d:fe:a6:d8:cc:97:c7:15:2e:8b:d4:
         18:e5:54:ec:61:bd:cd:a5:6a:65:42:4f:d5:35:d2:3f:5a:d3:
         2a:fb:9f:6c:07:37:67:6e:d8:eb:6d:c5:4d:2e:ca:72:2a:a3:
         d3:bc:55:ee:cd:0d:33:b3:a3:3b:32:cd:43:20:6f:95:50:b5:
         b9:5d:d5:86:60:c0:8e:7e:8a:cc:53:d2:69:5a:6c:48:70:af:
         ee:b1:2e:2b:5a:3b:b8:8e:4d:83:78:35:c3:51:41:a7:04:c4:
         e3:52:be:44:90:2e:06:d6:fd:4b:80:85:01:07:b8:1a:c3:ae:
         10:78:c7:f4:3d:cb:9b:17:1d:c2:54:2d:5a:c6:2a:12:4a:27:
         38:b5:c8:eb:fd:a8:49:b3:4f:7e:9b:b9:8f:b1:84:76:26:be:
         4a:49:28:2c:5a:f3:3a:99:3d:a5:77:59:b3:81:22:84:f6:7d:
         ae:fb:5e:23:5a:ad:08:b6:71:cc:8b:9c:bb:3f:1e:fb:5e:3b:
         11:a0:9e:31:95:97:07:62:93:00:23:cd:a4:2d:83:1f:f0:35:
         ea:bf:71:70:09:df:4b:e7:d3:6e:df:56:87:83:8f:90:f9:9a:
         48:85:3e:56:5a:4c:ad:06:d6:c4:60:bc:1e:42:bb:9c:83:87:
         05:85:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----