Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12b6201c-9d02-4277-832d-0f1c79e967c0.roa
File:                     12b6201c-9d02-4277-832d-0f1c79e967c0.roa (raw, json)
Hash identifier:          LvxArtwurIvJPNnX7fR8E/SAOCsJkBE/WpLfSF7JVAw=
Subject key identifier:   D3:F6:F3:A5:01:A8:FF:18:DC:56:34:CF:4D:5E:34:7D:AD:0C:F7:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3D41EF2CB00F66F8F7C2E4CB879730BB8D3239FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12b6201c-9d02-4277-832d-0f1c79e967c0.roa
Signing time:             Sat 18 Oct 2025 03:21:34 +0000
ROA not before:           Sat 18 Oct 2025 03:21:34 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.23.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:41:ef:2c:b0:0f:66:f8:f7:c2:e4:cb:87:97:30:bb:8d:32:39:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 03:21:34 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=2404e9ce9faed8893ca7014386244ff2c9357631e4266c72318c8d00ba7c63ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:80:d6:93:55:a3:af:9c:3b:9f:12:7a:fa:
                    cf:bb:60:aa:d1:6b:c0:86:a2:83:c0:4f:2a:c6:48:
                    ed:7a:ad:bd:93:cb:d9:ce:bf:fa:32:e9:90:df:c6:
                    8c:99:e2:2f:49:5d:93:24:32:c3:df:f6:9c:f8:6f:
                    87:fb:e0:74:c2:4c:bf:7c:37:46:b9:88:5a:f3:d0:
                    fa:29:31:89:12:e9:13:3a:0a:05:97:e9:2c:a4:e3:
                    d7:7b:2a:26:0d:71:07:6c:36:45:31:3b:7d:16:93:
                    b8:91:86:0f:ce:bb:f2:f7:8b:01:08:f7:12:d4:f3:
                    93:f3:1c:88:bf:ed:9d:07:2b:5b:c0:ea:97:85:c4:
                    d4:82:fc:13:ad:a8:ea:f7:be:84:11:d5:06:6e:22:
                    2a:c5:9c:a6:ee:2d:16:4e:c5:2e:cc:3b:91:13:09:
                    81:66:3d:57:09:59:48:69:cb:7b:1f:05:3e:f8:c3:
                    00:5e:08:bc:f2:3a:6a:76:13:5a:4c:bb:6e:94:b5:
                    ef:3a:b9:e4:d6:7c:ee:d6:4d:22:9f:44:db:17:ee:
                    e1:47:58:78:52:30:ed:7f:d2:e1:bb:03:d0:1e:ac:
                    d1:5f:4f:13:81:97:26:6b:b0:7a:d5:3a:60:e0:80:
                    52:4f:58:13:81:bc:33:ab:f2:f3:75:61:b7:31:d3:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F6:F3:A5:01:A8:FF:18:DC:56:34:CF:4D:5E:34:7D:AD:0C:F7:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12b6201c-9d02-4277-832d-0f1c79e967c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.23.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:84:9f:ce:b7:4f:95:a4:9a:00:4e:a7:e6:19:c4:8f:e5:
         ff:8f:00:bf:65:6a:6d:7c:9c:fd:52:be:5f:6c:07:40:04:5d:
         1d:94:21:79:51:ae:b6:5c:0e:fe:1d:d3:fc:df:6e:02:58:70:
         a8:cf:91:13:ed:c4:45:05:32:1e:ed:d7:5c:bd:c9:c6:31:84:
         07:fe:42:4c:61:ac:a5:d4:ce:6b:22:0d:c9:43:8f:95:d5:72:
         63:23:4e:5e:00:4e:31:e7:f6:35:1d:a0:aa:8f:67:23:40:ec:
         86:2a:0a:7b:72:3a:ef:d1:88:23:1f:1c:6a:97:5a:6c:be:75:
         4a:31:a4:29:a3:d7:7f:7e:6f:18:a0:cc:5b:19:a4:5d:38:28:
         bb:c5:d1:74:ba:d8:e3:c5:33:44:6c:d6:5e:6a:77:35:0f:ce:
         d0:02:bc:6f:21:30:f1:7e:92:cc:11:fd:98:12:39:22:f8:93:
         4b:85:1c:9b:d2:dd:63:00:fe:b9:65:e1:f4:da:b5:77:3b:52:
         95:0c:0d:53:66:2e:aa:e6:2c:b2:67:c9:e7:a0:85:a9:93:ed:
         83:f0:5d:9f:b3:95:8e:2e:1a:d7:67:d1:63:ad:89:fe:d0:e8:
         c5:ff:2b:95:5d:50:16:3b:96:a9:6e:88:03:4d:27:a3:11:43:
         5e:c4:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----