Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0019cb4-b119-4b98-b8e9-7dd8e2f909de.roa
File:                     d0019cb4-b119-4b98-b8e9-7dd8e2f909de.roa (raw, json)
Hash identifier:          Wq9TZP/ocTzWme4K95kuwpT6HVEINLOoz6WYOAanB0g=
Subject key identifier:   35:3E:79:22:90:F0:E6:6F:E1:D2:1A:2C:3E:01:21:75:5D:E0:7E:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75538160266D0E1844A54AD08B848AFC075A81F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0019cb4-b119-4b98-b8e9-7dd8e2f909de.roa
Signing time:             Mon 20 Oct 2025 02:32:29 +0000
ROA not before:           Mon 20 Oct 2025 02:32:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:81:60:26:6d:0e:18:44:a5:4a:d0:8b:84:8a:fc:07:5a:81:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:32:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=dc5c1791b3caabc3b05a570e2f9bec9fb5bcf0d45fe34b0193befd2cbb50fa11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:9c:d8:ce:9c:df:66:1b:ba:8b:97:12:6f:
                    8c:22:a5:1a:5b:d3:e2:91:9c:a4:8b:c3:f6:ae:e1:
                    5d:f1:77:73:9b:0d:06:71:a3:6e:97:e3:f3:66:01:
                    e4:ee:fb:aa:76:6d:8b:d0:72:86:70:31:09:0f:3d:
                    4b:3d:64:f1:97:27:aa:79:ac:05:ad:2b:98:40:2a:
                    8c:9d:b5:95:33:75:84:f8:5d:b4:42:29:f3:06:4d:
                    5b:b9:68:25:b3:0c:5c:45:7c:4a:26:6e:2d:d5:b4:
                    da:6e:ad:32:46:37:af:bb:6b:7e:04:0a:83:8f:52:
                    f5:4d:c7:cb:f8:2f:0f:80:fd:b1:92:fe:a0:c3:c8:
                    66:6e:98:10:3a:16:3e:10:e3:e5:1e:8b:5a:b5:8e:
                    08:a2:2c:7e:81:04:9a:9c:fa:c8:2a:cf:2f:24:ef:
                    cf:25:f1:bf:84:e2:cd:00:4d:85:98:d5:6a:41:88:
                    8c:5f:81:a1:bf:bc:44:b4:61:b1:f9:b1:10:64:7f:
                    85:ba:06:dc:63:e2:c0:b2:a0:c5:6f:e5:db:38:a3:
                    96:17:7d:6c:79:23:fc:b2:df:e3:0a:2a:ac:2b:bb:
                    b1:23:24:30:53:b7:fd:88:78:9a:7b:be:f1:e9:21:
                    c4:7c:4c:8e:c2:8a:97:07:76:c0:11:1d:30:76:9a:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3E:79:22:90:F0:E6:6F:E1:D2:1A:2C:3E:01:21:75:5D:E0:7E:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0019cb4-b119-4b98-b8e9-7dd8e2f909de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:11:c8:3e:22:92:83:57:1e:52:90:3c:d2:9a:c4:d5:58:3f:
         fc:60:9d:a4:7f:87:5f:82:ff:c7:e3:fe:c6:10:d2:13:42:3d:
         1a:9e:e9:e2:26:bd:74:4d:a8:67:b5:56:01:74:e1:4b:8e:17:
         fb:c4:1e:95:13:72:1d:0c:dc:d3:8e:fa:71:98:31:38:b1:e8:
         93:3a:b3:39:9e:7d:0e:8f:d6:14:90:89:37:74:c1:0a:18:b5:
         3e:7b:50:99:80:31:0a:21:bc:01:1b:a0:06:ba:80:14:6a:c4:
         a0:30:36:ac:33:9b:b4:bf:3f:7c:9a:f9:fc:b3:b8:01:27:86:
         9e:5d:cc:9e:f6:43:ce:e6:c5:30:bf:55:e2:c0:5d:44:b8:5d:
         69:0b:fe:b8:71:78:fb:fd:11:cb:e9:5a:1c:13:6e:bf:3f:7a:
         49:67:59:fc:49:1c:e0:fe:ab:12:e6:4e:45:d7:a5:50:c7:73:
         c3:a6:c9:f9:42:c6:d1:ce:cb:6e:67:18:cb:9a:a1:3f:a6:fe:
         98:68:cd:37:6c:57:38:61:e5:8a:f0:ae:1a:09:c8:b3:44:c8:
         d2:7d:f4:ba:2f:d8:7d:c0:0a:14:17:2c:81:63:e0:ac:b6:c1:
         f6:00:02:73:13:fa:5a:ee:fc:32:41:43:53:f8:d1:de:aa:36:
         27:92:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----