Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa
File:                     5ad7d350-34e3-4f44-858b-b36ac11a0165.roa (raw, json)
Hash identifier:          lb1e90XyUvsciup3c7mo26kNEl5Fwt+T3COi1z2Jf2g=
Subject key identifier:   1C:2B:C8:D0:97:BC:A6:B7:8B:3A:D7:73:9E:CB:D0:D3:07:B6:F7:99
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C42C1A0A8908E2512B8DCD0CF154651FAB85BEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa
Signing time:             Sat 11 Oct 2025 00:21:11 +0000
ROA not before:           Sat 11 Oct 2025 00:21:11 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        109.71.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:c1:a0:a8:90:8e:25:12:b8:dc:d0:cf:15:46:51:fa:b8:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:21:11 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=9bd83bdcba4bff986b48a5d852522f39c03d823c8e3060b60c0c8de4fcf4d9ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:67:00:6c:53:47:cc:fc:0d:25:c2:e4:37:
                    22:e5:e3:77:3f:4e:49:1a:f1:f9:11:4b:48:d4:c7:
                    2b:fd:ff:bd:9a:86:be:34:6d:ed:d3:05:80:fe:45:
                    0a:e9:aa:32:9f:96:cf:8f:a7:a9:e6:44:28:c1:60:
                    42:06:c1:22:f6:63:96:b2:66:69:ff:3f:14:ce:84:
                    d5:09:1f:10:0a:c3:53:dc:2b:f5:fd:91:d1:cf:8c:
                    ee:ad:5b:10:9c:9f:9e:32:0d:2c:77:43:1a:1e:84:
                    b0:6d:c4:00:f5:81:66:0f:4c:12:bb:69:38:11:a2:
                    f5:51:bf:2d:36:7b:70:e9:af:c9:ae:b3:1d:60:c0:
                    62:a1:c8:55:69:a8:49:b1:6d:3d:57:1d:ad:8a:82:
                    bb:56:f2:3f:c6:ae:a3:38:30:61:f4:af:0e:74:5e:
                    ed:56:57:0b:a1:0f:c8:7f:b3:74:fb:41:ec:22:3b:
                    5d:e5:5b:c8:33:7b:9c:37:35:34:b2:71:39:65:65:
                    98:38:74:88:88:9d:b1:dc:18:8f:84:c5:0b:9c:9b:
                    e0:b2:48:cc:13:b2:7f:45:29:95:74:4d:97:1e:2d:
                    3b:71:be:d6:68:fd:26:6e:7b:0a:74:d6:67:11:e5:
                    c9:b6:3f:66:08:cc:66:89:51:c5:52:26:66:6c:8f:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2B:C8:D0:97:BC:A6:B7:8B:3A:D7:73:9E:CB:D0:D3:07:B6:F7:99
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ad7d350-34e3-4f44-858b-b36ac11a0165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:76:d3:39:48:0c:57:00:99:c6:56:e6:2d:c7:f6:bb:a3:47:
         0d:66:01:14:74:e6:f4:0b:08:1b:a9:a2:30:bd:1a:9f:06:e8:
         05:26:d8:02:06:a1:7e:95:48:94:5d:e7:8a:20:af:d5:e0:2a:
         46:51:67:d7:1b:2d:9d:f6:3a:e5:e4:6d:f9:4e:68:01:4e:c8:
         f6:94:61:30:2c:da:68:72:cf:ce:95:d4:94:17:99:b0:35:d0:
         d7:c2:c9:fc:6e:4a:4d:43:0d:af:7c:07:4c:66:5a:d3:75:63:
         f2:43:e5:02:ee:80:1b:aa:e0:74:4b:d1:97:60:5d:bd:44:de:
         cc:19:10:b4:e9:34:bb:c7:3a:2d:a4:fc:06:bb:d7:a1:d6:1b:
         17:d4:bb:01:fb:ac:74:39:75:55:88:cb:29:e0:b9:81:df:3d:
         2f:49:23:87:81:2c:99:b3:8a:67:b0:e9:1e:4e:95:79:79:0a:
         57:56:b4:12:b3:48:09:69:ab:55:df:79:f8:c8:14:2b:ac:40:
         88:e2:45:56:64:a8:02:31:f6:5c:80:18:47:33:bf:7b:1e:53:
         3c:8b:39:34:58:4b:50:7f:5b:3b:2c:b3:6d:fd:fe:12:9d:e7:
         d0:dd:81:ef:cd:68:66:7e:63:60:c5:4c:5d:6d:87:ac:68:24:
         85:5b:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----