Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f0ed130-c978-4135-ae3e-448821f3a86f.roa
File:                     3f0ed130-c978-4135-ae3e-448821f3a86f.roa (raw, json)
Hash identifier:          Lk4G0+3HGnLZUuWfI48ISfWlPJVOrJcdzby9215ZlbM=
Subject key identifier:   A1:89:F4:35:88:92:92:68:DD:C6:2C:33:9B:05:BC:A7:6A:1A:94:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F374DCDCA05B8D06F522307FE121244EE592EB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f0ed130-c978-4135-ae3e-448821f3a86f.roa
Signing time:             Fri 03 Oct 2025 00:40:16 +0000
ROA not before:           Fri 03 Oct 2025 00:40:16 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.196.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:37:4d:cd:ca:05:b8:d0:6f:52:23:07:fe:12:12:44:ee:59:2e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:40:16 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=c9fcba17e6c57af28c4614a78acf1196e6d865a6f129d1080d777a3efd2ae17b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:76:35:59:f3:67:f6:6d:e1:41:c0:20:f5:
                    eb:e1:92:e6:8d:76:c2:e1:11:db:5e:b0:f1:7d:86:
                    b0:5a:a3:e9:a0:f5:9f:5a:70:9a:37:71:cb:9f:45:
                    5b:18:d6:f7:36:54:b5:67:47:0c:3d:89:54:dd:9d:
                    17:a5:ca:04:bd:12:5f:b5:8a:a4:02:02:1a:06:86:
                    fc:21:bb:d3:d0:ca:07:5b:aa:ef:a5:9c:12:1d:42:
                    2f:0a:35:46:f1:bf:a6:2e:b9:0e:ba:84:1e:b7:fd:
                    20:dd:7a:9f:3e:a7:0a:f6:e0:2b:21:3f:67:95:08:
                    b6:e5:27:05:50:25:67:ec:f8:25:ed:df:76:4c:25:
                    47:26:4b:64:87:1f:02:ab:37:45:6e:18:20:4d:58:
                    bf:46:bd:62:92:f7:74:94:83:90:ba:82:49:75:db:
                    61:61:ca:6f:07:8f:62:ba:6a:76:db:23:c3:39:c6:
                    40:9e:33:f8:9b:f0:20:ab:0c:e5:c8:0b:d4:92:6b:
                    52:d7:c5:73:e4:6a:be:8d:b9:20:f0:68:1c:21:59:
                    9b:eb:c8:8a:e3:89:7f:2c:18:e7:79:7a:44:0f:46:
                    78:73:c5:b3:15:21:98:40:e5:b3:c3:b9:20:d7:8b:
                    5b:03:3f:ee:3a:52:45:44:51:4a:4f:00:24:86:c3:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:89:F4:35:88:92:92:68:DD:C6:2C:33:9B:05:BC:A7:6A:1A:94:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f0ed130-c978-4135-ae3e-448821f3a86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:3c:f8:62:c1:7a:a9:69:d6:28:04:c1:ba:09:30:3f:5d:
         d6:24:0b:bb:1e:da:51:c4:79:6c:ca:37:44:74:65:7b:78:5c:
         15:d5:e2:79:4f:b7:e5:e3:8f:90:dc:09:d1:2d:3a:6f:74:72:
         89:06:18:bc:5e:55:22:d4:6a:a7:e1:89:3e:f8:2b:b0:b6:01:
         5e:65:8e:66:35:e5:10:37:35:0d:22:49:58:30:8f:40:02:dc:
         d1:1e:b3:07:44:aa:77:51:86:ab:4b:5e:83:e7:a2:66:de:a3:
         9c:1b:53:4b:01:d1:4b:dd:78:98:c6:b5:53:35:3e:42:61:bc:
         51:91:5b:11:92:a1:36:03:f6:50:cc:2c:4e:13:46:67:c2:51:
         e5:60:50:d6:6a:95:54:fa:38:19:12:46:14:27:7c:cc:aa:d0:
         ad:e5:ca:48:51:be:4f:fb:4a:f6:f0:a3:3a:a4:f5:0d:a4:6e:
         18:a2:67:47:29:1e:bf:07:17:74:31:ef:d5:00:64:ec:cd:d4:
         0d:61:2c:7c:39:fc:d0:04:4e:2d:65:80:a0:06:0b:d9:03:d4:
         4a:4b:a8:40:5a:bb:0f:6f:a5:18:ca:c1:79:4a:73:24:a3:c3:
         d7:19:0d:32:de:cc:12:98:04:8e:4b:fa:8a:62:4d:7b:81:30:
         81:54:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----