Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90ceb0ee-66d3-4c56-8825-2c68b02e5693.roa
File:                     90ceb0ee-66d3-4c56-8825-2c68b02e5693.roa (raw, json)
Hash identifier:          MZQjhvH54ZrynlZUc+muShYph1kY2cV0njfpa5ApVRw=
Subject key identifier:   A3:C5:AC:1B:95:27:71:2B:42:97:F3:9F:66:25:55:65:8B:11:0D:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2EB4EC3DD4CDAEADAC80C35F844F7D5AFE69C5CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90ceb0ee-66d3-4c56-8825-2c68b02e5693.roa
Signing time:             Fri 03 Oct 2025 00:41:43 +0000
ROA not before:           Fri 03 Oct 2025 00:41:43 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.0.92.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b4:ec:3d:d4:cd:ae:ad:ac:80:c3:5f:84:4f:7d:5a:fe:69:c5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:41:43 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=2b402b6800a92d44ffeaff78c093c60e3dd64dc6b5132211f14bc9052d0fb792, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:dd:ea:ea:76:5b:db:ca:38:74:f4:f9:55:
                    ca:9c:40:30:47:ec:c2:6c:f3:55:77:bc:03:ef:1b:
                    8b:ea:8e:58:cc:30:66:8a:3d:31:aa:df:db:b8:2a:
                    38:bc:e3:25:87:35:08:af:9d:32:2f:7c:65:2c:44:
                    93:4c:4b:91:9a:05:1a:4f:ba:3e:ac:95:f7:03:53:
                    71:7c:fd:99:d0:18:d4:16:09:a8:3e:1f:53:1c:a6:
                    e4:1d:af:b4:a7:e9:e9:e2:11:2d:83:fe:32:5b:28:
                    fc:92:ae:f7:56:a5:35:0a:94:fb:ec:de:92:e0:cb:
                    42:87:ff:52:5e:7d:38:a1:40:d1:48:ec:c5:63:47:
                    b3:22:c9:05:4b:48:7d:6f:6d:fa:32:00:fb:5e:38:
                    91:d0:3e:8f:de:ca:2f:a5:31:6b:31:f0:14:09:5f:
                    68:e7:ce:5b:fb:31:70:1b:72:39:b5:3b:d2:bc:f7:
                    e4:b1:09:10:c9:2f:fd:ba:bd:f4:f7:f3:42:78:6c:
                    ec:d1:a5:73:90:42:e0:4d:98:0d:f4:49:cf:72:e8:
                    50:20:b8:1d:b8:9d:cc:61:b2:d3:ad:00:09:d8:9b:
                    2c:3f:8f:06:6f:d7:19:dd:90:b3:b5:22:81:5a:7d:
                    16:16:4d:8d:9a:3c:4b:7e:68:87:71:4b:28:2c:a4:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:AC:1B:95:27:71:2B:42:97:F3:9F:66:25:55:65:8B:11:0D:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90ceb0ee-66d3-4c56-8825-2c68b02e5693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:0a:2e:95:9c:59:6d:3e:85:57:49:e4:3e:cb:33:d3:b2:5e:
         c8:29:74:2b:d1:24:de:31:f8:25:28:f3:aa:cd:1b:1a:1a:a9:
         2e:00:7d:d2:df:ba:45:51:f5:33:58:78:65:cb:c0:32:1f:f5:
         96:9f:cc:22:46:a2:37:05:6e:88:8e:87:8f:dc:4d:f9:82:b1:
         33:76:db:04:1f:dd:bf:59:a5:60:e1:b1:01:29:43:9b:ef:e8:
         99:09:d3:df:ef:1f:71:f3:4b:54:42:eb:58:9e:a4:f5:90:cc:
         c1:7f:a5:06:c7:6d:42:52:15:17:26:e2:cb:a6:4b:17:3e:67:
         4c:42:2b:4c:62:84:db:ce:4a:9c:d6:99:24:bf:79:db:7a:17:
         7a:fe:05:c6:70:d4:ea:99:15:6d:27:10:a0:59:1c:e9:81:6d:
         7c:75:43:a1:ee:67:c5:fe:42:86:b6:28:6f:e6:65:a5:c1:8a:
         2e:39:66:9a:da:56:25:fa:b1:aa:6e:1c:d5:62:3a:16:63:d5:
         c2:8e:29:91:9b:09:34:86:f4:91:12:96:1e:29:b6:47:96:7d:
         48:e2:be:b4:36:c8:06:65:64:10:25:55:d1:44:4b:fd:c5:e1:
         9c:e5:5f:0c:22:62:c8:86:32:00:f6:c1:8a:f9:16:7a:62:07:
         a8:b8:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----