Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
File:                     85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa (raw, json)
Hash identifier:          7T3rNPjSnqmanST5RWfn0tt1fCIz8FCTjI5+ozX06Fg=
Subject key identifier:   D7:A4:C9:F5:95:57:6A:46:77:F3:19:C3:7F:D8:EE:5A:4F:1E:6A:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24EC8F6200B2C9B5D3B9469E5D0DE08D3D1993F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
Signing time:             Fri 17 Oct 2025 00:40:03 +0000
ROA not before:           Fri 17 Oct 2025 00:40:03 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ec:8f:62:00:b2:c9:b5:d3:b9:46:9e:5d:0d:e0:8d:3d:19:93:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 00:40:03 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=052fbc734cad3be6e18f079eb3236eedeafa480b2504ce02d0cbcfaa986dcdae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:f9:50:c9:62:b8:51:f6:ed:aa:99:2b:7b:
                    24:5f:8a:93:2a:d8:26:ce:39:b6:8d:2c:f4:e0:9c:
                    17:95:ad:f3:7a:de:96:a8:57:d8:73:35:99:3c:88:
                    e8:02:31:ae:59:27:1e:84:bf:6d:70:b2:e8:82:d8:
                    3e:23:9b:86:e6:1a:47:b0:22:8f:75:77:23:bc:58:
                    32:84:57:3a:60:b0:56:ac:49:f4:ea:e5:01:e4:03:
                    28:94:64:f8:fd:93:d9:9a:20:9b:fb:a6:f3:e9:07:
                    f5:a9:29:b3:10:27:68:d4:ee:1c:46:c2:47:ea:95:
                    1b:75:a8:4d:97:73:be:55:4d:01:ad:c6:4b:2b:14:
                    1f:e4:2c:29:c1:4d:f4:2c:90:67:e9:9e:83:31:5d:
                    3d:a1:70:1e:35:5a:55:cb:b2:ba:6a:26:f5:24:ff:
                    d5:a3:d4:77:2f:7f:7f:ac:a9:cc:ea:14:ad:28:b4:
                    ac:69:41:7c:a6:91:14:61:75:62:35:fd:bc:b5:66:
                    4f:ff:d0:66:4d:df:f3:50:ad:b4:df:04:75:8d:8d:
                    db:b1:bd:f6:ef:38:7f:c4:7f:7a:a4:02:85:ce:82:
                    f3:1a:0b:4d:49:6f:e1:96:49:2a:8c:d5:31:f2:9d:
                    46:35:c9:d7:1b:c0:38:9d:65:f8:89:7d:77:4e:3a:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:C9:F5:95:57:6A:46:77:F3:19:C3:7F:D8:EE:5A:4F:1E:6A:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:ae:63:0f:5e:b0:65:33:83:61:b3:db:f1:0a:13:fd:7f:
         e2:0e:d1:2d:a6:cc:b4:27:0f:4e:2f:5b:4c:1f:b6:c2:66:43:
         2c:e2:f9:73:10:d3:8b:e9:0f:1b:0b:e6:3f:2e:c3:4a:a3:ee:
         c3:ea:d5:b4:6d:5a:02:f3:29:8e:27:2b:55:a4:d1:89:a8:9b:
         ee:ae:5b:a9:4f:94:07:10:f4:74:9f:da:a1:aa:ef:87:0b:64:
         a9:b0:84:b0:0c:7d:b6:d2:e4:de:a8:17:f3:4d:f1:02:da:f9:
         73:42:5e:77:1d:b8:47:14:20:1e:83:48:5f:0d:81:f2:81:ae:
         c7:5f:77:64:b5:9d:1a:2d:b0:52:f1:8e:96:90:f5:6a:49:78:
         9c:52:b8:0e:c4:be:d6:9f:b1:ee:ff:75:a8:5d:0d:c0:70:70:
         38:28:f2:91:7d:cd:bf:f3:f1:01:93:df:77:fd:f3:c6:3d:e3:
         db:db:0a:57:5a:08:a2:7f:64:39:6e:1e:d7:c0:25:31:ab:30:
         42:9b:d6:c2:aa:95:19:01:46:ef:4e:ff:57:aa:bb:3e:3a:87:
         eb:64:69:39:96:25:73:9c:27:e2:03:80:46:ec:26:59:8d:27:
         da:e1:9c:3f:a0:fe:60:73:7e:59:64:d5:dc:e9:f4:97:86:62:
         45:9f:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----