Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa
File:                     789e08e1-94bd-458e-ab49-16492240f27e.roa (raw, json)
Hash identifier:          gQSn650gzaOIr3p4MGZaoqTGyiwThzxVvMXHjXxNbKw=
Subject key identifier:   3F:1A:FC:49:CE:DC:46:7E:4B:1B:6F:90:2F:53:14:5C:F8:07:2E:73
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5801A41810A40D02095C583141635F7DA086A309
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa
Signing time:             Wed 01 Oct 2025 00:03:08 +0000
ROA not before:           Wed 01 Oct 2025 00:03:08 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.223.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:01:a4:18:10:a4:0d:02:09:5c:58:31:41:63:5f:7d:a0:86:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:03:08 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=7e358f4b3e6c177fce0c9672c73c2334c95919f432fc6e4cd5ecbcedbb4be38e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:cf:7f:24:f1:be:73:8a:64:d9:d4:21:10:
                    17:b9:c6:e4:04:d8:6e:6a:82:b5:eb:2c:07:44:9b:
                    dc:cf:50:a4:4f:fc:e1:2f:83:3a:99:2e:f1:51:e9:
                    20:00:dc:5a:d3:28:18:42:c1:b9:c9:b2:d6:c8:5d:
                    01:08:76:ef:17:81:1f:2f:79:db:81:a3:55:b2:5b:
                    93:b3:83:97:6a:eb:c8:07:bc:59:80:6d:2c:74:75:
                    c8:f4:7e:20:70:9d:1a:77:b2:9e:92:c2:d1:b4:43:
                    60:40:c4:db:3e:f7:35:6e:c6:d5:0c:73:f3:ed:47:
                    d1:cb:3e:ab:8c:09:6a:7b:a3:ea:04:a9:75:90:4d:
                    18:90:ae:d5:be:31:41:c6:20:f5:1d:4d:c5:00:39:
                    7d:b7:1f:92:4a:d5:e9:ad:ae:a0:16:48:2a:2a:08:
                    4d:ba:17:d0:52:ad:c0:fe:eb:bb:f2:62:8e:8e:0a:
                    37:81:11:53:a4:1d:1f:ad:f5:18:b8:6e:eb:5b:2b:
                    f3:b8:41:f6:44:ae:56:04:be:f6:d7:f7:92:e2:29:
                    47:88:49:de:c9:26:c0:f6:56:5b:1f:5e:b8:ee:54:
                    3d:37:34:91:04:85:ab:87:b4:1e:1a:57:46:58:4c:
                    79:d4:19:8d:c2:3f:14:10:0d:44:9f:a0:ab:e3:4e:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1A:FC:49:CE:DC:46:7E:4B:1B:6F:90:2F:53:14:5C:F8:07:2E:73
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/789e08e1-94bd-458e-ab49-16492240f27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:5f:c8:57:cd:2b:33:d8:40:53:5b:dd:97:a4:5d:05:ef:
         47:a4:65:ce:62:9b:61:b3:b5:6b:5a:0e:ae:aa:48:a0:ec:b2:
         f8:28:ca:aa:65:b6:f1:6c:3d:b0:e2:04:ff:17:80:be:19:72:
         70:0b:3e:e4:65:07:45:fd:8f:aa:7d:11:4e:d1:dc:d5:9d:3a:
         4c:2a:44:c0:cc:a0:67:0d:d8:fd:ec:98:7e:a2:e1:47:5d:8a:
         49:20:75:a3:79:4a:90:1e:a9:d9:03:84:3b:77:82:6e:2e:9c:
         8b:1e:a1:96:e9:ff:98:97:18:f8:85:1e:27:89:a6:4a:31:23:
         bc:3d:96:3b:8f:13:72:69:5e:bb:c9:f4:c6:cd:48:47:7b:dc:
         48:31:36:b5:d1:78:df:3a:4e:d7:64:9d:28:0a:03:39:1f:9c:
         64:05:95:42:17:7f:1e:d4:ac:6f:bd:f3:b0:d6:2a:0b:53:34:
         8d:d2:83:99:84:58:2f:da:28:c8:26:c2:6c:50:e8:c5:dc:b1:
         0e:47:f3:0e:4e:be:c3:e4:14:d5:07:e2:15:30:bb:76:96:a7:
         23:f2:8b:11:c9:73:94:d8:67:81:8d:86:5f:a6:a6:cf:10:dc:
         84:98:0f:54:1e:4b:84:64:30:8a:72:ac:b8:84:85:94:0c:bc:
         2a:82:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----