Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cabb7e-c1dd-421a-b413-c9e21ab52400.roa
File:                     d2cabb7e-c1dd-421a-b413-c9e21ab52400.roa (raw, json)
Hash identifier:          HdbZtiiHm9dlZl0mXMQ++CpryDLMzTcV8CDQqlkbtrs=
Subject key identifier:   C3:AC:A8:73:47:97:50:2E:DE:CF:F6:71:61:E2:19:EF:57:98:2F:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5210DD216CEA743506E15C988CDF393CD08BF6DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cabb7e-c1dd-421a-b413-c9e21ab52400.roa
Signing time:             Mon 20 Oct 2025 00:21:36 +0000
ROA not before:           Mon 20 Oct 2025 00:21:36 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:10:dd:21:6c:ea:74:35:06:e1:5c:98:8c:df:39:3c:d0:8b:f6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 00:21:36 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=4f72d897977e5d98e904e0574e0fcdacae14c3440658abaa12357764ddb5f96c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:7d:91:b2:ce:6f:c9:6a:81:b9:3e:4f:d8:
                    91:a6:a8:20:53:be:21:5d:40:f3:99:00:9f:28:2c:
                    fb:e3:e4:3a:e3:f8:73:c3:29:c8:f4:e2:eb:1f:d5:
                    dd:aa:52:df:f3:32:77:ed:b9:22:c0:8a:60:ff:32:
                    2f:bc:92:b1:dd:44:71:f6:a1:79:98:3a:33:13:e3:
                    36:16:c9:7a:e8:27:a5:d2:f8:40:3e:3a:b4:24:6d:
                    de:3f:a4:41:1e:07:4e:ba:96:06:8b:71:28:ee:92:
                    45:96:70:e7:e0:53:13:26:b2:5e:d2:9b:8e:ba:4e:
                    32:96:e6:b1:34:9a:f8:48:41:c4:fd:96:3b:aa:87:
                    a9:d3:fa:a4:39:6d:41:e0:3a:da:eb:3e:4e:c4:8d:
                    59:e6:4c:e2:3b:4e:a0:71:46:ed:a8:9b:87:fd:80:
                    13:34:f6:21:c7:04:dd:d4:f9:5c:50:a6:6e:db:4f:
                    8d:e8:3d:45:0a:2a:57:47:8b:4b:fd:55:fb:e2:3b:
                    4f:0a:51:0f:7d:22:b1:17:28:c9:ce:d1:71:7d:97:
                    34:f6:7e:53:81:3a:79:a1:76:b6:4a:a6:d2:c5:26:
                    a2:6e:bb:49:d7:e2:04:cb:0e:3c:b6:3b:56:1b:45:
                    45:ac:df:e5:56:b1:6f:cd:53:67:95:b4:05:54:8f:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:A8:73:47:97:50:2E:DE:CF:F6:71:61:E2:19:EF:57:98:2F:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cabb7e-c1dd-421a-b413-c9e21ab52400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:a0:6c:72:46:fd:5f:db:d3:bf:2b:96:71:a3:e2:9d:15:
         34:a1:e8:9d:ef:43:6d:f8:3f:ff:3c:53:22:3b:a1:23:07:50:
         c6:0e:71:1f:c1:fd:94:ed:db:a5:2e:d7:9e:b0:95:f0:b6:cd:
         7e:ed:c6:cd:81:d5:00:d4:27:a4:37:26:bc:72:0f:da:d9:56:
         30:b1:fb:24:8e:19:26:20:d5:7a:2a:b5:17:9c:5d:d2:5f:3f:
         22:55:d9:63:5e:ad:09:b3:af:c4:c5:c2:f7:bd:ac:7c:0b:ac:
         a0:ae:75:de:08:af:2d:69:bf:c1:27:30:0d:8b:2a:68:2e:09:
         60:5c:82:10:1f:e4:d0:34:89:bd:50:e8:c8:49:5a:b9:dd:57:
         bd:75:44:12:c1:08:1e:16:f6:50:c7:68:d9:aa:6c:1c:fe:13:
         26:a2:73:f9:df:09:b8:2e:50:d9:fb:ff:0c:a0:2b:e7:6f:6c:
         09:c8:99:02:e4:f1:ff:83:51:c8:98:1d:15:44:9e:18:6f:73:
         f8:a4:65:86:d9:94:76:99:54:4a:d5:ef:d9:73:31:ab:f8:fc:
         4c:7d:76:14:95:55:ad:b1:be:71:f7:54:4d:f2:59:33:9f:c8:
         69:af:4b:7a:d8:43:09:52:8b:b7:64:be:17:94:01:ec:29:d3:
         07:8e:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----