Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8247a22-72e7-4f19-92cf-38c756acbded.roa
File:                     d8247a22-72e7-4f19-92cf-38c756acbded.roa (raw, json)
Hash identifier:          p9N7VJyVB7RJAA4n/DB7k6m9RoM4C1Ww8Jv0ia3oxi0=
Subject key identifier:   43:9E:15:C1:C2:09:39:7C:1E:F6:F4:FD:46:A2:EF:51:7A:06:A4:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2FA3382758F7871817C9AE0CAB3003F2378D5F8C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8247a22-72e7-4f19-92cf-38c756acbded.roa
Signing time:             Mon 20 Oct 2025 03:11:29 +0000
ROA not before:           Mon 20 Oct 2025 03:11:29 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:38:27:58:f7:87:18:17:c9:ae:0c:ab:30:03:f2:37:8d:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 03:11:29 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=01d4fc0e79cfb6593b11326df44f524999c3b821b957ca546f63ccc50997c743, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:b5:a8:d0:88:c8:fd:d1:82:e6:67:9e:69:
                    fe:69:7e:81:c2:e3:d1:b4:a1:2e:2a:66:54:e4:a8:
                    f4:25:4a:79:28:08:b1:c8:d0:3b:fe:57:4d:c8:c4:
                    12:89:58:a7:a8:56:bf:bf:d8:d5:f7:80:54:a7:76:
                    d2:e5:d8:0d:2d:8e:42:cd:81:d8:87:ff:64:f5:73:
                    df:ca:c0:d1:7d:4e:3b:e7:fc:0e:7c:1d:71:37:b1:
                    88:f1:75:17:ff:74:06:d5:ca:cc:cc:2a:31:94:c9:
                    cb:b3:f2:cc:af:cf:65:52:55:f5:75:f3:2e:a2:c5:
                    23:9a:9a:cf:d4:7b:95:8f:83:84:f2:5c:3e:1b:9a:
                    6c:18:63:b7:03:d9:02:66:c2:9f:ae:28:65:19:fc:
                    f2:f1:88:6f:f8:c2:27:5e:f9:17:f1:2b:32:c9:54:
                    8a:ce:91:7a:13:59:74:65:7b:c6:e1:9e:5b:8c:47:
                    c5:a8:b3:1d:89:4f:87:e1:29:96:6b:aa:d5:e4:0d:
                    7c:81:08:a8:aa:89:7e:53:56:4c:6d:c1:e3:af:12:
                    e6:84:e0:3d:0a:9c:70:70:79:78:4c:02:ff:2a:93:
                    41:da:ba:f0:57:0f:49:cd:08:e8:d6:55:ff:64:99:
                    c6:eb:b9:84:d0:e7:68:eb:69:ed:83:a9:50:ee:00:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9E:15:C1:C2:09:39:7C:1E:F6:F4:FD:46:A2:EF:51:7A:06:A4:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8247a22-72e7-4f19-92cf-38c756acbded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:2f:56:93:d5:7c:de:e7:4b:82:7b:07:f1:56:0b:99:57:
         1e:c4:ff:0b:cd:56:88:d3:80:de:18:a8:53:33:10:5b:9f:f2:
         b8:4c:9b:4d:7f:d2:21:1f:6e:94:51:39:a8:ed:3a:62:84:53:
         0c:e2:3f:f2:27:e0:08:de:b2:59:bf:8e:c1:41:14:e6:a1:86:
         dc:01:9c:a2:28:e9:4d:98:eb:8f:72:20:5b:46:e6:ba:9b:4d:
         93:ca:d5:21:dc:10:06:d6:08:d8:e1:33:dd:2c:b3:10:3f:20:
         a8:8b:a0:d1:d4:00:69:f3:b9:04:2b:75:e1:15:db:e6:3f:13:
         20:e1:3d:97:81:c0:87:98:30:0f:c3:86:4d:3c:13:e1:b9:2b:
         26:c3:9d:01:25:a2:88:87:65:1e:32:66:09:4b:31:8f:a3:65:
         7a:85:74:20:4c:f9:97:b4:a6:b6:f9:42:e3:18:4d:34:cf:58:
         94:7f:8d:8f:6a:90:62:5d:ae:e9:61:7d:65:cd:9c:1f:e6:73:
         4c:81:ce:e2:4f:9c:10:64:b6:f8:dd:b1:98:cc:bf:20:60:b1:
         44:c4:07:98:67:fe:57:3b:6d:94:cb:aa:12:39:1c:8e:a7:8e:
         42:a1:7c:4a:97:ad:2c:c3:f7:5d:c6:12:b3:45:4c:d9:e4:b7:
         9c:cc:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----