Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854b0ccc-21b0-4120-9690-48e4d8492039.roa
File:                     854b0ccc-21b0-4120-9690-48e4d8492039.roa (raw, json)
Hash identifier:          8VZHtw+l1PfSepohwvZRrgqT6hiSjbPf49Bl2miTQEo=
Subject key identifier:   74:67:38:9E:6F:DF:A5:76:AA:A5:0A:2F:3F:C3:5B:A2:37:46:C9:76
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37789547E32D50EF2886FFE017EB0F1F625F88DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854b0ccc-21b0-4120-9690-48e4d8492039.roa
Signing time:             Fri 17 Oct 2025 20:31:34 +0000
ROA not before:           Fri 17 Oct 2025 20:31:34 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        164.152.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:78:95:47:e3:2d:50:ef:28:86:ff:e0:17:eb:0f:1f:62:5f:88:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:31:34 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=219dbf7eafb579ffc2cc36f9627488baced5b7c5759ffad47ef92019946808d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:83:88:c0:5f:67:c6:97:36:7f:1a:d4:4f:
                    e3:ac:fe:48:c9:44:78:94:f0:c2:78:64:1c:6f:85:
                    9a:ed:a5:fa:74:d6:95:a2:ce:44:4c:9d:e9:35:98:
                    76:e1:cb:64:07:52:e4:8a:92:8f:c2:d0:14:c6:b6:
                    4b:85:03:82:e6:1e:0d:c1:af:a1:9a:0e:d3:fe:a4:
                    da:fa:17:a4:92:83:eb:e8:87:df:de:e9:6a:a7:1d:
                    0e:48:e7:74:b5:19:f0:cd:a6:f8:a2:76:ea:7b:9f:
                    35:8c:59:46:89:4e:6e:2b:1f:5b:2e:01:5e:17:5a:
                    8c:89:28:23:42:e6:07:68:ea:51:0e:43:98:af:53:
                    fa:13:2f:91:a0:6b:30:e2:5c:d5:33:74:1d:1a:f2:
                    bb:68:87:89:f0:81:bf:b9:07:97:7a:54:2f:40:4b:
                    62:6c:f6:81:65:d6:2c:1e:52:d0:d0:09:43:85:40:
                    b8:24:57:a3:37:45:fd:9a:c3:f1:4c:4a:47:90:0b:
                    08:6a:8f:99:8d:73:5f:09:d6:4c:e6:44:42:d3:ae:
                    6b:b7:18:2e:6e:35:ff:6c:b6:1b:c0:c3:98:fc:1f:
                    b0:b2:e2:9d:a1:ef:9b:7a:06:97:e3:eb:ba:a2:e9:
                    90:23:e2:9b:36:a2:d9:b2:2e:91:4f:73:b6:0c:10:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:67:38:9E:6F:DF:A5:76:AA:A5:0A:2F:3F:C3:5B:A2:37:46:C9:76
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854b0ccc-21b0-4120-9690-48e4d8492039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:ed:ae:ed:f4:4b:92:06:3e:63:b9:c3:34:14:70:c8:c8:
         c5:e7:ba:52:5b:3d:47:5b:e0:b1:de:df:f6:82:5c:1b:3c:2c:
         7e:a9:8a:85:62:98:19:fb:c5:38:41:59:dd:b1:17:b5:94:44:
         b0:76:36:33:9b:f2:b4:1e:56:dc:ef:a3:6e:89:e5:4c:39:8f:
         d0:d9:aa:4d:78:00:79:e5:41:d9:63:91:62:fd:ae:24:af:5c:
         24:60:64:b8:62:77:ce:e3:e7:31:cd:4c:33:ec:89:b0:7c:54:
         7b:a0:a3:9b:74:f3:d2:b4:f8:d7:76:40:a4:66:48:81:2d:97:
         d9:34:e7:f2:27:a5:20:27:3c:44:4f:54:a9:19:e5:c2:19:e5:
         bf:60:bd:cf:69:f0:d6:1c:32:be:c8:5b:29:88:64:97:57:77:
         c9:fd:a0:a4:01:a4:1b:1d:f8:07:3d:ea:37:04:b7:f3:e7:e4:
         38:11:d1:97:23:e0:4c:31:c9:83:55:a2:e7:7c:78:69:64:1a:
         f9:e1:64:f5:b7:7f:cd:d2:f8:6f:61:62:a1:4d:bf:8a:6b:7d:
         51:68:70:d7:c7:80:8a:e3:e8:18:d8:dc:fc:55:2f:d8:4c:cd:
         ef:f3:0f:67:35:29:f7:65:6f:d9:eb:ef:0c:48:19:16:27:16:
         9e:08:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----