Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bd0b6b-bfec-4895-8cbc-7935652362fe.roa
File:                     e8bd0b6b-bfec-4895-8cbc-7935652362fe.roa (raw, json)
Hash identifier:          l8lY2GQh8MQZXdV7s3MA6bNddlWNtLz3uoFku03UEl4=
Subject key identifier:   52:01:B8:9F:0B:5B:DE:52:FC:FD:81:B7:C6:C0:3A:AA:57:FC:BB:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70D53C397E059823735DF46916B49BC6808957
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bd0b6b-bfec-4895-8cbc-7935652362fe.roa
Signing time:             Sun 19 Oct 2025 00:51:30 +0000
ROA not before:           Sun 19 Oct 2025 00:51:30 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:3c:39:7e:05:98:23:73:5d:f4:69:16:b4:9b:c6:80:89:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:51:30 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=52360b6a6ebc3e049718b1ab91263c5991c80d7bc41937e8db7f4189c7c06ac3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:29:03:02:76:2f:05:6c:6b:ca:fb:21:23:
                    33:64:d6:cc:17:ba:a5:a6:1d:63:7b:cd:e0:6b:db:
                    ee:ae:d2:15:f1:07:c7:d4:86:c3:a0:f5:59:70:f1:
                    42:0a:55:16:0a:93:df:12:ed:8d:a4:d9:fc:7d:0d:
                    95:30:4d:3e:9d:0d:95:2b:b3:79:d4:7e:f4:12:26:
                    34:ff:a0:5c:02:92:d2:5e:3d:e5:ea:19:3c:67:90:
                    96:ab:ae:b4:f7:f3:12:97:92:d5:88:eb:df:ad:c4:
                    9d:9a:2d:76:1a:ef:d0:99:47:f9:d6:2e:a2:2a:ba:
                    00:2e:e6:70:ef:3a:19:e7:b2:dc:c7:e0:8a:97:03:
                    23:c7:63:14:1c:ed:e4:5b:79:11:e8:de:70:a9:41:
                    6c:33:c7:f2:c8:48:bc:58:ba:06:b2:30:73:d0:fb:
                    98:eb:8b:98:83:40:2a:7e:a5:81:18:fb:77:de:97:
                    8a:78:cb:d8:55:1d:9c:92:aa:2b:ea:91:69:a1:90:
                    62:dd:31:c5:7c:82:4f:f1:a7:9f:3b:5e:33:5b:b7:
                    ee:e2:4c:8c:99:a2:74:6b:85:16:9f:73:bb:f4:3e:
                    7b:87:c8:a9:34:a8:fd:1b:f2:36:18:5e:00:45:be:
                    7f:54:f0:4b:f2:06:02:2b:d9:6a:cb:9b:1d:53:60:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:B8:9F:0B:5B:DE:52:FC:FD:81:B7:C6:C0:3A:AA:57:FC:BB:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8bd0b6b-bfec-4895-8cbc-7935652362fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:81:8f:62:71:9d:5f:f9:b9:c9:3c:b7:cd:88:a5:b4:06:32:
         5a:74:c5:83:18:88:93:14:1c:b0:5b:5c:32:b5:37:dd:04:8c:
         46:05:bf:f7:9b:8c:cf:a2:42:37:51:f3:73:b9:7b:19:91:65:
         b3:8c:d0:d9:c8:11:6f:1d:76:53:77:2a:95:b6:6e:fb:65:cb:
         37:6c:6a:31:8b:0b:1c:22:7b:77:e8:4b:2f:27:85:e5:a7:9f:
         4d:74:a8:38:38:62:d8:c0:14:8a:68:ff:28:c1:74:80:00:a3:
         df:85:18:80:53:01:6e:69:f3:3c:17:81:61:b6:97:55:2b:30:
         f2:02:b0:16:06:f5:97:8c:f4:1d:3b:77:ba:85:f7:7a:2c:f7:
         75:33:ba:ff:b5:09:fc:e8:92:87:da:7f:b4:54:2f:a6:b9:2d:
         2b:7f:10:f6:97:6d:43:d0:a9:96:0a:3d:81:ee:f8:93:c6:54:
         2e:78:11:91:d9:8b:4f:29:fd:b4:3c:b5:7e:42:cd:eb:3e:35:
         1d:25:97:89:58:1a:4a:84:f2:13:9a:63:dc:cc:97:80:52:a3:
         61:3c:d2:ba:d0:c0:0c:29:b7:20:d4:75:35:32:87:6e:84:87:
         dd:d0:a1:53:cd:8e:13:03:82:3d:28:42:6f:72:23:04:32:6c:
         82:72:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----