Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          1jIjg4pUql5CKaB5uzkzVMTDt+Yk2Rki4RO5eK3XKq4=
Subject key identifier:   62:ED:B6:51:FE:4A:32:5F:E1:8D:5B:1D:B3:CD:F5:9E:0E:10:08:3F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3709FFC8031E6531097E71048AA3588273AC2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Sun 19 Oct 2025 01:11:03 +0000
ROA not before:           Sun 19 Oct 2025 01:11:03 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:37:09:ff:c8:03:1e:65:31:09:7e:71:04:8a:a3:58:82:73:ac:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:11:03 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=05f7e45999d8a766b746a867e071673c6e752fd9a7bbb97891975eee10af53f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:25:81:63:55:4d:cf:e0:12:e9:ea:61:13:
                    c0:d5:c3:67:94:5c:a5:af:f8:f6:de:c3:3a:12:b8:
                    c5:92:06:01:2b:42:7a:d6:59:c5:02:91:f3:a8:3c:
                    77:33:3c:74:02:f6:8f:c0:42:93:93:da:db:95:ca:
                    e2:19:9c:30:5d:8d:52:f6:e4:ae:b3:91:50:9d:43:
                    43:60:30:0f:e5:a0:0f:70:a1:c9:5c:f5:5f:99:09:
                    89:ed:82:65:9c:e7:06:ac:04:84:12:59:a5:6d:10:
                    67:fa:8f:2b:9a:2e:c5:10:77:11:5d:ba:bc:10:dd:
                    a2:db:9a:02:5f:88:7e:37:18:f8:a7:34:b6:13:94:
                    72:41:dd:75:7f:2a:4a:43:44:81:cc:c3:f7:0d:47:
                    44:19:b1:26:52:a1:84:a6:ba:23:a6:42:25:fe:09:
                    eb:fe:43:06:55:4e:f0:f9:1f:9f:9f:e4:8e:55:76:
                    98:76:02:78:3f:a2:82:fe:6e:7a:ee:da:da:b8:f9:
                    0a:cd:3f:1c:50:69:9b:5d:43:cc:77:45:55:e2:b3:
                    d7:46:d3:60:a3:d7:8d:52:ce:28:86:80:1a:8f:04:
                    39:dc:82:9f:ef:0e:e0:da:38:69:60:48:85:bd:27:
                    2d:6a:78:0c:48:41:92:9c:5c:66:57:f4:73:62:af:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:B6:51:FE:4A:32:5F:E1:8D:5B:1D:B3:CD:F5:9E:0E:10:08:3F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:2e:65:cd:99:ea:5b:75:a6:df:51:85:db:2d:14:03:c0:
         43:0c:70:c2:61:53:9e:82:2f:55:32:8e:26:33:83:56:57:16:
         48:15:b7:fb:db:f7:ec:af:5d:fa:12:ed:59:73:ba:1f:1f:8c:
         ab:3b:ce:dc:0e:29:3c:da:fb:b6:cd:b6:68:b6:a8:f8:14:f7:
         e2:0e:2c:9a:3f:20:66:49:12:dd:d8:e2:38:93:57:d3:8b:32:
         c3:93:53:61:ac:f0:f2:b3:3d:84:e9:57:86:f2:1d:0a:d6:fd:
         9c:a3:8c:d2:68:3f:e7:5c:11:65:a8:32:cd:f4:27:ea:24:bb:
         b5:77:ea:0d:03:57:1e:8a:3c:41:1d:72:60:39:85:47:b2:4a:
         4d:88:15:9e:cf:75:33:e7:ea:1c:66:6d:b8:08:8a:10:c8:fe:
         d8:81:f0:8e:9a:0b:b2:69:62:80:ab:2e:58:66:e0:df:33:e1:
         62:58:2f:34:c1:6e:61:cd:43:a9:7d:04:32:bc:a2:62:ad:97:
         9a:7a:5c:9d:b3:d7:b9:13:45:46:d6:1f:84:5f:26:e9:16:5a:
         3b:4f:87:b8:23:26:f6:35:f6:9d:57:59:42:53:b5:d4:43:ec:
         a1:bb:1a:64:1b:11:7f:f4:51:5d:67:bc:9b:cd:d4:2e:e5:b0:
         73:d3:da:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----