Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e3c9049-83e6-439b-b4c1-366c4e186e04.roa
File:                     2e3c9049-83e6-439b-b4c1-366c4e186e04.roa (raw, json)
Hash identifier:          89AxQKL0XeDguVLc2obizSBEdyArvEbkPTuMHHGQqLY=
Subject key identifier:   60:65:59:99:BC:4C:4F:AD:3C:1D:27:B4:7E:8C:23:20:58:46:34:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15233D97C9BB9BA263C9AA6032B3739178CA23CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e3c9049-83e6-439b-b4c1-366c4e186e04.roa
Signing time:             Mon 06 Oct 2025 16:11:13 +0000
ROA not before:           Mon 06 Oct 2025 16:11:13 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.215.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:23:3d:97:c9:bb:9b:a2:63:c9:aa:60:32:b3:73:91:78:ca:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:11:13 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=6a102694b1ebdf7ee6be5ce40755fbb7211ee98ebc235edfa9e324aba52a7d08, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:4e:82:7a:e6:10:e6:39:0f:6e:f7:86:cc:
                    69:c6:51:b1:1d:82:9f:56:53:23:f8:e4:f2:6d:2b:
                    2f:8a:14:31:c0:e4:63:4d:4c:de:d5:78:3f:b3:d2:
                    f0:bb:a5:c9:d4:15:4f:c4:70:1b:55:9f:1f:31:31:
                    d8:fc:1a:29:33:ed:38:65:90:e0:f9:29:d7:8d:b7:
                    c0:cb:2e:12:9a:5e:a9:df:61:8e:ce:27:1b:6a:c7:
                    31:38:02:0e:62:fb:26:da:f8:ef:4b:93:d0:6b:57:
                    83:28:a5:ba:dd:4a:7a:9a:b6:0d:99:a8:ff:46:d3:
                    2a:ab:a5:78:2d:a8:a1:bf:bf:0d:e9:20:f7:99:77:
                    dc:e9:b4:12:b9:b8:a2:30:8e:78:80:7f:cd:5c:cb:
                    80:0c:26:d8:3f:25:59:31:92:14:a7:28:60:ee:2c:
                    66:dc:d6:18:37:2e:cf:d7:4b:9c:c7:cc:fc:12:d6:
                    43:22:25:c5:f4:68:1c:e2:5e:62:a9:53:b7:b6:2c:
                    80:22:c1:86:40:09:42:3d:77:9f:d6:75:e7:5a:10:
                    2b:e5:ae:b1:40:27:93:6a:af:43:2b:8f:bc:5b:7a:
                    51:97:95:82:52:66:53:5f:02:06:c1:93:84:15:24:
                    d2:1e:d2:13:f0:1a:bb:57:22:56:df:a7:ff:62:b3:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:59:99:BC:4C:4F:AD:3C:1D:27:B4:7E:8C:23:20:58:46:34:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e3c9049-83e6-439b-b4c1-366c4e186e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.215.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:75:d2:bb:8a:a4:f7:5b:b3:a2:17:1b:48:4c:60:77:d5:
         c6:9c:1b:5f:8c:32:e4:cc:fb:c2:2c:92:b2:94:3f:cb:7c:c7:
         d7:fa:a7:8b:ae:30:1c:49:99:05:62:8a:c4:a1:25:c2:1f:e9:
         ec:0e:2c:6c:aa:cc:50:1c:ee:9a:cd:10:0f:f9:a4:67:f1:14:
         6b:5e:8c:02:95:e1:8c:8e:c3:0a:70:02:40:ae:4a:6f:37:0d:
         94:f1:82:ab:e7:97:9a:0d:69:74:6b:90:e3:31:47:14:e6:14:
         40:a0:8a:4c:de:3f:e9:0c:9a:f3:be:61:32:c7:2a:9d:50:de:
         78:ef:94:26:ae:f8:9d:04:e0:ce:3c:54:87:9a:1d:50:e5:a9:
         17:17:fb:76:51:6b:e6:73:69:72:88:b3:b1:1e:50:fa:b0:60:
         42:0f:86:57:69:a9:86:a2:99:4a:45:5a:25:44:8c:89:7d:f1:
         3e:41:89:4d:b7:34:7f:1e:66:80:13:ed:98:34:55:46:d8:35:
         9d:ec:1d:57:54:e2:79:c9:e3:6c:8a:9c:48:18:07:f0:6f:dd:
         08:39:0a:bc:0a:4f:82:1c:1c:b7:31:cd:7a:20:3e:1e:73:3a:
         34:55:56:67:ff:f6:5f:dc:19:68:e9:fb:09:63:53:74:02:f7:
         32:55:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----