Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe94848d-19dd-4304-b176-832c3e8311af.roa
File:                     fe94848d-19dd-4304-b176-832c3e8311af.roa (raw, json)
Hash identifier:          xq/GV8drs7IYzkuisMBlLeW0WnUTzkKvnGKvDsD2/XE=
Subject key identifier:   72:E3:55:E8:D3:A0:AD:2E:5E:0A:29:F5:ED:23:1F:75:7F:D9:5E:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7539279956A461434C1CC6B2F21ABD95D3C5DA7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe94848d-19dd-4304-b176-832c3e8311af.roa
Signing time:             Mon 20 Oct 2025 00:00:55 +0000
ROA not before:           Mon 20 Oct 2025 00:00:55 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.156.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:27:99:56:a4:61:43:4c:1c:c6:b2:f2:1a:bd:95:d3:c5:da:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:00:55 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=b4716fe3340fb8fa5078bc070112fca0fc005f55e7b2e54de0a8760236e42b7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:a6:18:20:4c:18:c8:5c:cf:3f:95:72:58:
                    c8:b3:59:68:43:48:4f:8e:2f:0f:c0:7b:df:ec:73:
                    02:a8:1d:36:c2:75:42:ef:80:12:a4:ed:07:3c:84:
                    64:7b:cb:b6:7c:17:35:f2:99:6c:f3:88:69:bf:7a:
                    ad:33:45:d3:2d:4c:8c:a5:d3:c1:86:69:3a:dd:76:
                    d7:5d:b8:2b:d5:03:60:3c:cc:ae:75:6f:37:e4:cb:
                    7c:4b:b3:b6:1c:0a:6e:ce:cd:e7:2c:62:e2:d0:13:
                    a1:ef:fb:2a:e4:3c:6b:6c:db:9e:ba:c2:77:b5:a5:
                    5d:7d:49:53:bc:c8:81:9c:0d:09:67:31:3f:d8:3a:
                    2b:2f:7b:ed:9e:3d:44:55:45:90:8d:3f:19:7b:cd:
                    cc:d4:67:06:ab:b7:c0:a8:1c:18:9e:ef:49:ac:d7:
                    b5:0e:a2:9b:3c:64:d8:c8:0f:08:00:24:30:ca:24:
                    4e:97:c7:65:74:55:a9:ca:51:aa:4d:0a:b9:12:45:
                    61:10:aa:9f:8c:bc:5b:a9:34:76:16:23:75:7d:0e:
                    d1:79:57:15:75:ff:6e:8a:fa:a7:c4:aa:0c:49:d6:
                    63:65:79:fe:53:a9:44:11:a1:1b:8e:e9:a9:5f:a6:
                    59:dc:7f:fc:1f:8b:68:c3:f3:25:88:e6:a2:44:fd:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E3:55:E8:D3:A0:AD:2E:5E:0A:29:F5:ED:23:1F:75:7F:D9:5E:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe94848d-19dd-4304-b176-832c3e8311af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:a4:6f:8e:5b:5f:cc:b9:c5:7a:aa:39:df:03:6d:7c:68:61:
         b4:88:4c:cf:a1:5c:1b:cf:8b:0c:ca:00:03:42:b5:6d:b6:a1:
         a4:fb:87:67:62:fb:2a:fb:c1:e5:29:df:13:09:2f:e3:2d:67:
         c0:17:b4:b7:0d:23:c2:bf:85:df:43:84:2c:12:42:ba:87:1d:
         01:d9:de:1d:05:41:d7:02:d6:6f:8a:c6:1a:35:1a:6c:b0:3a:
         a2:ba:5f:ba:4f:a2:e1:14:82:e5:ec:22:1a:3a:49:a0:42:49:
         f6:33:58:b0:b0:69:9a:3a:cb:b7:15:32:8f:9f:62:4f:df:14:
         b9:62:3a:38:92:c7:2e:54:f7:83:35:5c:9b:5f:58:4c:56:e6:
         b1:81:96:c6:b3:70:e6:eb:76:8a:3d:a8:cb:1e:7c:db:84:37:
         9b:38:8f:e3:af:84:38:8e:5a:f4:46:42:99:69:a3:02:a5:0f:
         1d:ab:5c:5c:8a:fa:5e:9c:a0:f2:2b:8f:13:43:7b:41:7f:b7:
         c7:59:0e:1a:c6:c0:f0:87:f0:4e:88:f9:bf:9b:72:f2:86:4a:
         d0:e1:22:11:09:11:82:6a:5f:d3:bb:40:0d:44:4f:81:0b:7b:
         04:07:6f:4d:a7:2c:88:56:26:1b:47:9d:94:81:37:90:40:e9:
         e3:ed:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----