Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
File:                     3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa (raw, json)
Hash identifier:          5wl6zqL2u1G/MsgLh+EG+9hxCn1mEIegGRAVV0Z7Lr8=
Subject key identifier:   08:9A:99:5B:3B:4A:EC:69:3B:71:27:28:57:F7:38:3E:25:DF:FA:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E8897247674EDDC7B491413425790770213D865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa
Signing time:             Wed 01 Oct 2025 00:03:08 +0000
ROA not before:           Wed 01 Oct 2025 00:03:08 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.223.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:97:24:76:74:ed:dc:7b:49:14:13:42:57:90:77:02:13:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:03:08 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=edbb8fd7ea06746a247109a798b87b9c845e73ad947c853add48f01ee8b0ef81, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:f0:f4:6e:a2:87:99:03:36:51:10:8d:fa:
                    cd:5c:7d:b2:6f:8e:5f:f4:cd:e0:de:c4:09:c0:ca:
                    09:86:35:2b:95:0c:ff:50:63:97:ab:d5:66:dc:01:
                    13:5f:24:76:1c:cb:4f:69:94:41:70:7b:0f:84:78:
                    e6:53:61:4b:e5:0f:53:64:22:ec:1a:44:85:1b:4b:
                    66:c1:89:55:47:2e:bd:56:8b:43:49:01:dd:72:37:
                    8e:f1:e5:96:fc:bf:9c:d1:50:94:0d:93:f5:68:1f:
                    ab:b3:3a:df:c8:4b:39:e5:3e:17:38:8b:88:b2:2e:
                    ea:1f:e4:91:3c:c0:f2:d1:7a:a3:80:60:e7:e7:fa:
                    dc:12:19:ff:c1:9b:c5:51:64:c9:d2:dc:ea:6d:8e:
                    7e:1e:3b:ed:22:a9:af:62:0c:9c:c8:cd:12:e5:41:
                    e5:61:f0:d8:52:92:53:5e:ed:6e:30:d6:dc:77:b7:
                    21:65:c7:fb:74:26:7e:66:4b:e9:a5:db:e5:89:ff:
                    f5:0f:a0:eb:96:aa:11:96:00:ef:1d:96:bf:8e:a3:
                    20:2c:d1:95:dc:7e:64:87:3a:e8:5f:34:19:5d:28:
                    b0:18:9c:c1:96:ff:9a:15:b2:fd:b0:30:7c:82:0d:
                    1c:cf:8a:9f:7b:37:a4:f7:92:48:9a:e8:63:fb:2c:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9A:99:5B:3B:4A:EC:69:3B:71:27:28:57:F7:38:3E:25:DF:FA:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdf456f-39bf-47ec-82ce-a350e31d0d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:75:b5:f0:56:6b:7d:7c:4d:16:50:c1:eb:4c:7a:e2:56:
         23:4c:80:b5:44:e9:6b:94:7e:a7:38:c8:0a:0a:f5:bb:3f:54:
         cb:9b:94:86:20:87:49:cd:21:ba:07:46:d5:7d:da:a6:0a:26:
         92:b6:b3:31:c6:7c:e9:0c:a7:e2:32:03:91:b4:b1:03:dd:88:
         36:92:dd:a1:c5:e3:37:76:1d:f0:3f:e0:0c:a2:93:0f:73:8a:
         c3:4b:4b:89:28:33:e1:5a:6e:26:7f:6e:03:3f:3b:88:06:4f:
         bd:60:9b:82:9a:86:0f:83:52:a2:1d:ac:95:88:59:de:a1:2a:
         22:b0:7a:b6:c1:9a:47:14:ff:c9:f3:fb:c9:d7:a2:27:4d:52:
         2b:b7:89:4f:54:2d:a2:b9:d4:80:41:2a:f5:0b:f9:f9:62:36:
         f3:6b:92:33:b9:bd:a6:31:f9:b6:48:ba:60:fd:29:70:5b:2c:
         5e:20:4d:1c:ec:0e:6a:67:04:46:60:1c:58:cd:ae:bf:ca:14:
         60:7d:84:4c:77:e7:3e:2a:ba:cc:1b:7f:c9:89:5d:4f:f0:4e:
         92:22:0b:86:f8:be:92:4d:78:a1:bc:fc:e4:41:ec:49:10:f8:
         19:a9:31:d4:e2:a8:0b:15:b6:74:53:49:3a:b9:e3:21:52:2f:
         83:d2:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----