Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88ae200-3a03-4b32-8730-9d4e1ad69f5e.roa
File:                     f88ae200-3a03-4b32-8730-9d4e1ad69f5e.roa (raw, json)
Hash identifier:          oj0BduJH7f3kZpGvzMHBRSF8DwBteZhIv5oeBSktrw4=
Subject key identifier:   0C:CB:A2:8E:51:FA:9C:C3:1C:8A:8E:E6:30:5B:8F:E0:9F:8D:9E:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36200B64A3B760DA62573959EED8D40EFC88A38D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88ae200-3a03-4b32-8730-9d4e1ad69f5e.roa
Signing time:             Sun 19 Oct 2025 00:10:40 +0000
ROA not before:           Sun 19 Oct 2025 00:10:40 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.139.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:20:0b:64:a3:b7:60:da:62:57:39:59:ee:d8:d4:0e:fc:88:a3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:10:40 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=4c9ff9963ab4cc06f4ef6ce4b3d7deb22fa303186486b5b2c7f51a119dcce71a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:44:e4:a0:92:4f:7d:7d:97:1e:29:57:17:
                    65:e6:11:bd:5e:35:8a:68:d4:e5:2d:d0:8b:ba:d5:
                    ba:73:12:bc:bc:4a:25:a9:6f:59:fa:b8:20:15:91:
                    8b:ce:86:c1:2d:c7:27:95:2c:bb:3b:e3:e3:c7:0f:
                    1a:04:3d:c3:63:0e:d5:29:be:61:c9:1f:55:0d:d1:
                    6c:12:cf:de:51:08:ca:d5:a7:a1:a6:d3:c6:8b:bf:
                    3e:3f:b3:75:46:af:b8:43:8b:a2:23:ac:53:fa:45:
                    df:80:22:a2:58:da:8b:a9:18:b0:ae:3a:c8:41:c8:
                    88:67:49:bd:6a:de:83:dc:dc:69:49:c4:59:40:f9:
                    d0:a2:50:d2:18:a7:43:d5:9c:94:28:c2:10:f4:76:
                    e4:7a:5c:43:2c:47:75:40:ed:56:91:71:5b:5a:23:
                    e2:11:0b:9b:bb:85:0c:25:c1:61:a6:92:54:83:0b:
                    8a:e6:44:21:bb:75:01:5f:c1:bd:2f:f3:13:57:d6:
                    b7:fe:05:20:3f:0f:be:e9:00:a5:f5:8b:11:45:09:
                    5f:0c:a2:2b:ea:a0:95:88:3f:13:c7:a1:ea:60:df:
                    1a:7f:59:8e:45:f9:0b:b7:12:ba:d0:da:73:7e:4d:
                    29:3d:c1:49:c5:4b:5a:a1:5c:e1:ef:f1:be:29:d2:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:A2:8E:51:FA:9C:C3:1C:8A:8E:E6:30:5B:8F:E0:9F:8D:9E:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88ae200-3a03-4b32-8730-9d4e1ad69f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.139.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:53:63:d9:04:97:7a:8e:2d:85:32:77:e5:a3:73:ce:29:
         41:7a:68:98:d6:e2:28:97:b8:01:61:e2:fc:1d:e7:d1:e7:f3:
         02:47:42:84:28:69:02:35:f7:81:53:19:fd:fa:41:cc:dc:ec:
         83:96:5c:d5:40:7d:01:04:5b:1f:f9:34:6a:1f:c1:78:a2:29:
         9e:b4:aa:65:d5:af:f1:0d:a6:99:52:df:f3:fa:d2:e5:f7:e3:
         d1:1b:3d:5d:ee:26:c9:bc:37:c0:ce:d6:89:d7:38:fa:84:fd:
         2a:c8:d1:9f:42:29:74:dd:2f:9b:0b:c7:63:a0:1a:5a:ad:47:
         b7:14:63:76:b0:6b:2e:d1:e7:22:00:77:a7:4d:12:6f:56:17:
         26:a7:3b:a2:95:80:8e:d9:87:84:42:4e:6f:b3:f4:78:cc:e3:
         0c:79:dd:09:86:63:7b:c2:63:a6:20:44:83:47:fa:a2:36:82:
         22:c3:e1:c9:aa:b5:56:45:9b:dc:35:e3:fd:43:a1:b9:ed:d7:
         b8:ed:ef:ce:2f:a1:57:8c:68:8c:bc:a2:33:2a:2b:a0:80:ef:
         f9:19:72:14:2d:df:e2:e9:86:72:60:54:d7:34:28:b3:d1:e0:
         fc:71:b7:b8:1f:20:68:14:c9:9d:7e:47:12:36:9e:fc:98:bb:
         76:19:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----