Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da81d0c1-6278-42a8-a038-7a7ba9a6c389.roa
File:                     da81d0c1-6278-42a8-a038-7a7ba9a6c389.roa (raw, json)
Hash identifier:          4/P7veAUHxrC/eV2sR4RAWPMKa5Xl1mlRpYkUhXH/Ic=
Subject key identifier:   F9:E9:49:DB:48:73:FC:43:CB:F4:B6:00:65:37:A2:D1:3D:42:F0:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E7D651FA43206C43B3F642284402CFC2D49D95D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da81d0c1-6278-42a8-a038-7a7ba9a6c389.roa
Signing time:             Sun 19 Oct 2025 01:50:44 +0000
ROA not before:           Sun 19 Oct 2025 01:50:44 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7d:65:1f:a4:32:06:c4:3b:3f:64:22:84:40:2c:fc:2d:49:d9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:50:44 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=9b1ace3433b90f98154154792c6cc3a0227b40e5effac5cb6e35c82883e6eca0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:f0:65:a3:26:ee:2c:39:da:53:7d:2d:85:
                    8a:d8:43:cd:4b:2e:67:84:a8:84:13:8b:dd:b3:db:
                    47:b5:aa:a3:b4:54:2e:c3:7c:6d:9c:8f:aa:14:5b:
                    97:20:a5:ae:ca:6f:ff:d0:15:6a:7e:0d:1c:34:1e:
                    fa:52:09:1b:d5:91:58:70:cd:6d:b8:10:f7:6c:b9:
                    10:95:9e:7f:53:6e:7c:64:e0:86:57:98:de:3b:03:
                    4b:61:f7:13:13:71:e3:bc:06:f8:79:92:8d:a2:1f:
                    e4:9f:12:63:39:ae:3f:be:bd:85:5b:98:32:e8:b2:
                    08:98:19:46:e5:0d:ab:ef:c6:05:80:14:c4:4e:d7:
                    6b:a2:ad:50:ce:e2:87:40:34:55:2f:7a:0a:85:b2:
                    96:53:eb:a7:48:e2:34:27:b4:17:24:06:1e:14:9a:
                    67:d8:36:72:85:c1:89:ac:d1:6a:38:99:4e:58:c4:
                    77:ed:ca:81:c1:83:8d:c2:80:67:1b:1b:3c:32:d4:
                    a0:5e:1c:c5:0c:93:a3:7b:7e:74:c9:ca:80:3c:61:
                    22:df:a3:97:2f:16:fb:31:18:43:d5:63:e0:56:f9:
                    ae:6b:89:0a:29:17:ed:01:8e:7d:ef:a9:af:fd:28:
                    4e:7b:f9:7c:87:a9:07:f5:94:d4:cc:7f:bb:61:2b:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:49:DB:48:73:FC:43:CB:F4:B6:00:65:37:A2:D1:3D:42:F0:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da81d0c1-6278-42a8-a038-7a7ba9a6c389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:d8:06:40:de:cc:b5:37:ed:4c:9a:5d:c2:ee:72:9a:d7:
         4d:3c:8f:56:9c:35:a6:17:45:5a:6d:c6:20:b1:91:d0:e2:fa:
         0b:87:84:14:5a:d2:e8:e7:4c:3b:eb:d8:c8:91:61:6c:21:8a:
         bc:40:3a:c0:a3:ec:db:b5:01:a9:48:5f:41:d0:91:3b:87:a4:
         a7:e3:23:f8:e3:cb:af:67:d4:60:84:68:5d:fa:8c:f6:93:6f:
         c3:35:ed:2a:7a:06:62:0d:7f:f4:b7:d5:d4:60:d4:cd:a3:31:
         4f:19:76:58:54:d8:ab:86:ea:86:fe:17:89:c7:07:27:7f:d8:
         12:4a:d7:3c:d1:fa:23:94:51:71:d7:0f:35:1c:1a:00:fe:15:
         62:24:61:fa:b6:50:ed:58:ed:3c:db:bd:8e:4e:f4:39:93:2d:
         59:4f:e7:c6:3d:0d:ce:04:56:68:80:00:91:d8:d0:89:80:26:
         bb:59:47:f3:7b:d7:73:fc:bf:a3:bc:2f:32:12:0c:6f:00:6b:
         e6:21:3d:59:8f:df:4d:77:15:96:95:db:65:8b:c1:56:1f:a3:
         f4:1d:e5:8f:22:12:a0:a9:ee:bc:2e:09:91:fd:4e:d9:e6:dc:
         4b:c5:98:a6:8e:46:ad:45:c7:7c:bb:00:cf:21:d9:1d:3f:79:
         c8:3f:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----