Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cc13dd8-6b04-430d-8589-a2a87cb15247.roa
File:                     4cc13dd8-6b04-430d-8589-a2a87cb15247.roa (raw, json)
Hash identifier:          AC4Yu0ROQJdHwPjW4McIuiVENboz1kzQh+sW3hpVBdM=
Subject key identifier:   B2:64:D1:6C:D5:02:CC:EA:91:08:1D:99:FB:BA:A0:97:C4:4A:01:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4EE97DB484F38C3E788E678A8BCC7D4D5995A509
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cc13dd8-6b04-430d-8589-a2a87cb15247.roa
Signing time:             Tue 14 Oct 2025 00:21:55 +0000
ROA not before:           Tue 14 Oct 2025 00:21:55 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        114.57.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e9:7d:b4:84:f3:8c:3e:78:8e:67:8a:8b:cc:7d:4d:59:95:a5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:21:55 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=9c6d39d2662c8d25de176a4bd13ec25945ec534cae5fe1491575114c417a0806, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:75:36:63:95:4d:13:d6:f3:b8:83:2c:09:
                    a7:66:42:bb:cd:f2:18:a7:9f:50:18:86:51:24:37:
                    ce:c9:35:2d:7a:64:8e:30:a5:a5:10:c4:2c:b7:23:
                    9b:8e:01:33:df:30:58:cc:1d:1b:a2:39:4d:c3:4d:
                    9d:48:9f:82:93:d3:6a:76:29:ad:60:98:49:e5:a1:
                    14:ba:d7:7e:52:a7:b9:80:53:e2:c6:c3:67:ac:cd:
                    ae:51:5b:e1:8a:68:ad:d1:fc:fb:80:f2:40:55:fa:
                    02:57:39:9f:c8:4c:cb:32:ad:c7:57:39:75:01:73:
                    79:a3:c5:68:3f:00:d5:ce:71:f3:91:7a:d6:6f:9a:
                    83:6a:88:ae:23:8a:37:bc:16:1e:8f:ad:07:1d:c0:
                    76:cc:53:4c:fa:e9:87:94:61:67:de:39:65:4c:dd:
                    76:95:df:a6:96:51:c5:ca:ec:46:8b:4e:ae:61:83:
                    10:99:91:81:67:ed:3d:17:50:6f:31:4b:f3:ae:3e:
                    f5:b4:d2:4e:8b:2d:7c:0c:fb:22:ea:72:69:a1:f7:
                    16:76:18:37:50:f8:cf:02:58:b5:11:9b:8f:3f:57:
                    80:76:24:ac:d5:e0:fb:a6:f8:b5:80:7d:be:59:0f:
                    cc:b8:24:24:1f:51:1f:46:36:fa:58:3b:6d:0e:6b:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:D1:6C:D5:02:CC:EA:91:08:1D:99:FB:BA:A0:97:C4:4A:01:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cc13dd8-6b04-430d-8589-a2a87cb15247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:2a:fc:e6:5e:66:ae:11:81:5f:e6:f2:ef:e4:50:ac:f0:c7:
         2a:e0:86:e9:83:ca:fa:a0:26:96:bc:a6:9f:e4:3a:78:51:47:
         84:66:f1:07:50:61:9a:f9:52:4b:8e:71:77:69:ef:e4:80:df:
         c9:45:31:2f:e9:96:74:68:93:c7:21:be:f6:55:c9:91:a7:75:
         c4:dd:f1:55:0b:42:07:b6:a4:04:b0:25:1b:4d:d1:49:17:51:
         10:13:45:dd:5d:a1:55:82:13:bd:76:0f:f6:22:81:8b:09:45:
         43:57:f3:ea:f8:2b:02:29:70:e6:b1:51:be:36:47:7a:e4:4b:
         63:a8:43:2c:d6:9a:90:70:5d:90:67:7f:28:58:93:fa:de:37:
         fe:39:bf:c6:53:58:b2:18:4b:c2:fa:ba:f2:d5:4f:b9:c6:68:
         0d:39:18:a2:24:16:e6:1a:c4:ea:e3:3f:4f:28:3b:c4:c5:f5:
         46:8f:04:06:29:95:0c:26:c2:28:0c:27:02:2c:77:5b:34:0d:
         b0:8e:b8:33:e7:7f:62:12:9b:96:6a:45:7f:49:72:cf:84:8e:
         3b:8c:15:90:e3:14:53:34:40:cc:fd:8c:1f:f8:5a:d4:87:c9:
         9f:fa:6e:66:4f:7a:54:2d:67:8f:09:39:29:ca:1c:f0:09:a4:
         51:da:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----