Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa
File:                     714cd314-c418-4e0b-9ec6-d0e6db63a509.roa (raw, json)
Hash identifier:          UR2nK/5aX4xx/y8oDjLkrV/2Aa9a2E0NoIgZNYmj1Oc=
Subject key identifier:   99:28:47:B0:23:7F:85:F2:10:01:96:E3:C7:32:45:3B:7E:C3:7B:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A8A3F0CAC89147850A8BF7E388D7290A7A670F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa
Signing time:             Fri 03 Oct 2025 00:40:20 +0000
ROA not before:           Fri 03 Oct 2025 00:40:20 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        63.246.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8a:3f:0c:ac:89:14:78:50:a8:bf:7e:38:8d:72:90:a7:a6:70:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:40:20 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=9622b3548ff953e876c64f68b22d17cb49728840294c90611dd28fff0cf2d15b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:7a:c9:0d:0b:ef:ad:5d:91:5e:ce:9c:36:
                    35:ed:01:ff:86:4d:43:4c:94:dd:84:47:a3:8f:f0:
                    8c:1e:14:01:9d:04:5b:3a:86:f3:7a:80:73:79:fc:
                    50:cf:98:72:39:c2:33:ee:51:cb:13:49:49:c0:e3:
                    a5:6e:af:73:d3:24:e7:55:ef:5d:88:c0:c3:03:08:
                    2d:2d:9b:88:e5:df:9e:fb:ff:4e:c2:db:83:4b:ff:
                    54:09:72:97:b2:63:4c:09:81:5c:35:77:80:54:75:
                    63:b8:f7:9c:12:b1:bb:25:1f:82:fe:6d:15:89:29:
                    0a:91:e1:cf:9b:17:a2:0a:e9:1f:38:29:00:f0:e0:
                    1e:49:e8:61:5f:19:86:3f:ab:ea:d9:09:43:77:d5:
                    7e:82:0d:74:39:ca:29:77:c6:2c:7e:b0:23:3e:f2:
                    24:50:12:08:f7:61:a2:01:c6:b5:94:84:de:cc:6a:
                    66:2c:7d:00:ad:18:7f:c3:8b:ef:90:75:01:67:cf:
                    34:38:2c:52:70:63:06:91:e5:86:83:df:4e:a2:3b:
                    7c:01:6f:83:e7:07:6e:24:ee:31:6f:7f:05:a9:9b:
                    b6:10:e1:8e:c5:89:10:bd:c1:fb:24:90:32:1c:53:
                    7d:fa:ee:dd:ce:75:cb:7d:bf:fd:37:f2:fb:7c:ac:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:47:B0:23:7F:85:F2:10:01:96:E3:C7:32:45:3B:7E:C3:7B:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/714cd314-c418-4e0b-9ec6-d0e6db63a509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:bf:75:c8:ae:e6:63:92:57:79:70:23:09:af:65:89:b3:6c:
         fe:07:ae:c6:e6:bb:0a:c9:41:8d:b8:7b:43:97:35:ed:b3:c1:
         b2:f3:f0:a8:b6:93:7d:61:e5:75:59:fd:f4:40:66:89:f6:f8:
         cd:2b:a8:24:73:4e:a1:9c:88:09:11:09:5f:17:6e:60:c3:eb:
         8b:ff:a0:be:a9:35:e8:94:b2:ff:4d:9c:4f:1c:d5:9a:35:58:
         20:84:25:f7:05:f1:14:55:ff:eb:b0:b2:6c:1f:30:26:7c:2a:
         43:89:e9:82:fc:40:7e:72:5d:df:31:2e:b5:c2:b1:93:a5:c5:
         9b:cc:ae:43:8b:6a:e1:92:a9:f5:bb:47:31:74:88:37:82:29:
         6a:fd:84:51:0e:04:33:ea:fe:c6:c9:c1:42:7b:a3:b7:b1:d0:
         76:30:65:53:71:f4:64:56:3c:0d:55:65:25:78:c3:b5:5e:eb:
         46:6b:41:37:eb:c5:19:9a:cb:c1:71:cd:92:59:b8:b0:ac:cf:
         4f:12:ef:d5:1b:84:90:82:b2:88:e3:b0:ba:20:9f:2c:17:ec:
         db:82:65:51:2c:c0:2c:a1:87:08:2b:1e:f5:be:db:bb:4c:a8:
         a6:c3:5d:a5:f3:fc:af:4d:40:63:88:40:3d:6b:c2:15:7e:47:
         06:a5:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----