Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53184af4-f986-49a3-ab4d-d209c978feb2.roa
File:                     53184af4-f986-49a3-ab4d-d209c978feb2.roa (raw, json)
Hash identifier:          jm0bZxIURlUXyQp0Py/OZLOiIPOpjrjBIGe2Nd2t5m4=
Subject key identifier:   E6:C2:57:B6:EC:B1:26:C4:0D:F4:AE:9C:FE:BD:F8:BA:8D:B5:EB:48
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       584B1735CEB028B00C65754D4E74EE24DC8FEA6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53184af4-f986-49a3-ab4d-d209c978feb2.roa
Signing time:             Tue 30 Sep 2025 15:52:10 +0000
ROA not before:           Tue 30 Sep 2025 15:52:10 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:17:35:ce:b0:28:b0:0c:65:75:4d:4e:74:ee:24:dc:8f:ea:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 15:52:10 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=5d4611666b60af0a5a3800c9daed883b101cc112c61c382e3565c15317593838, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:72:ad:d7:e3:b9:8b:a3:e7:e3:46:3f:ab:
                    61:ec:ab:e9:b3:e6:77:88:e1:94:7e:80:5c:57:40:
                    75:d7:62:cc:86:c4:a7:d3:60:df:94:85:c0:46:a1:
                    ed:87:7a:43:59:9e:04:27:7e:7d:e3:b7:5e:47:fb:
                    c7:2e:39:63:45:72:5a:d3:b7:41:55:a1:3d:2f:fd:
                    6c:21:af:bf:c7:27:16:58:c7:cf:be:fa:11:ff:9d:
                    92:e8:40:a6:5e:80:8f:0b:30:ea:83:1f:52:50:9f:
                    78:1d:a8:92:3f:81:9b:a8:ef:ec:2f:e8:85:a0:c9:
                    90:59:a5:9e:de:95:44:96:70:2f:3e:5f:95:d5:f7:
                    54:64:62:ff:3d:55:19:24:fc:d4:5f:d1:f0:5f:0e:
                    b9:37:1d:97:78:98:d2:ff:7b:ca:65:8c:d8:3a:87:
                    b1:98:e2:c9:24:3b:4b:ad:e0:81:d4:b6:01:89:08:
                    00:f2:68:88:a5:4b:da:86:41:a1:22:b9:26:b2:88:
                    9f:12:ab:ce:5d:67:bd:aa:be:88:ca:aa:d2:55:56:
                    5c:f4:54:de:6e:da:c4:45:4a:f0:18:ac:41:46:44:
                    01:90:45:b7:4c:ec:aa:50:68:b3:7c:ed:fe:6a:2a:
                    c4:27:3b:e4:22:6f:a4:0e:ff:90:a3:a7:8b:2f:9e:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:57:B6:EC:B1:26:C4:0D:F4:AE:9C:FE:BD:F8:BA:8D:B5:EB:48
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53184af4-f986-49a3-ab4d-d209c978feb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:fd:37:3d:47:90:4f:c9:1d:ee:05:72:fa:67:ad:ba:79:
         91:38:40:a8:1f:8e:28:22:14:8d:26:67:4e:02:fe:a8:c8:ba:
         29:39:b8:cf:db:ed:5c:4b:32:a3:11:0a:0e:1e:cf:9f:b6:d6:
         a3:95:a0:e3:da:72:5d:b7:fd:bf:44:e2:ac:9a:3e:0b:f5:66:
         09:eb:1a:09:ea:b2:0d:5e:35:4f:23:50:cc:7f:3d:e8:ef:df:
         aa:8a:a3:29:d9:c7:71:04:5b:fc:31:d5:82:61:d0:59:a3:9b:
         72:4f:a3:04:4a:ae:b5:79:9f:1a:75:34:73:9d:bd:99:5c:e1:
         85:6a:7b:f8:56:f5:3c:2d:56:5a:15:85:c0:78:2f:89:c0:1c:
         bf:b1:80:b9:7d:f9:02:a8:19:c2:05:bf:ba:2e:a8:45:f8:11:
         5f:70:e5:3d:78:b3:79:4c:4c:52:40:7a:65:cf:b5:26:8f:3e:
         97:42:e4:a6:18:ba:88:6c:d3:50:6a:53:b9:f3:b7:3f:4a:b8:
         05:9a:ac:34:4f:96:81:71:35:91:c9:a1:19:d5:44:df:a8:a5:
         04:f6:61:d1:7c:a9:64:cf:5d:9a:80:7c:6e:55:c3:84:4b:0c:
         64:26:06:0a:8e:1e:00:bc:3a:0b:c7:fe:58:ac:be:6e:e2:a8:
         c3:93:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----