Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa
File:                     a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa (raw, json)
Hash identifier:          C6dZcHj1R1kspPeFJVr4ng/bB9zTWnB6Qt56I9k8/Fs=
Subject key identifier:   2D:E1:12:C6:33:EE:26:93:41:C4:CB:94:BF:FC:C8:6F:E2:F0:03:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       580979A0B341C0EC17A4161D8FEBDD459203DA0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa
Signing time:             Tue 14 Oct 2025 15:42:18 +0000
ROA not before:           Tue 14 Oct 2025 15:42:18 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.174.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:09:79:a0:b3:41:c0:ec:17:a4:16:1d:8f:eb:dd:45:92:03:da:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:42:18 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=27f1a82b829c1f56ada82ef0ad0070e24e786ca51b41aca2e95f7dc22053a93e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:2a:09:98:3c:a9:de:13:3c:84:c8:f6:8c:
                    1b:c9:78:eb:92:7b:cd:74:82:71:af:e7:39:26:ab:
                    5d:e2:b2:d4:e5:86:86:a4:ac:8f:29:60:87:03:b8:
                    47:7f:66:42:2d:de:e9:90:b7:46:9c:b1:63:73:6c:
                    8e:df:76:48:c3:00:2f:44:67:69:77:80:99:41:6c:
                    cf:f4:6a:10:34:10:a9:8a:14:be:61:bd:6b:5b:3c:
                    b5:ab:a8:b3:c2:33:cd:6d:30:d9:52:6d:ba:72:90:
                    61:54:a0:b1:d6:52:45:c9:1a:d3:ea:6b:f9:2c:f7:
                    ad:a8:6c:73:80:ba:d2:e3:32:b2:68:cb:b3:69:79:
                    f9:51:c2:53:08:a5:1e:06:2c:00:38:0c:40:82:8a:
                    7f:3a:3c:f6:c6:b1:33:30:a8:ec:68:ec:1b:d6:fc:
                    8d:ef:a3:26:cb:9a:7d:b5:77:a1:6a:a0:bb:c4:e9:
                    3c:93:56:29:16:dd:cb:29:8d:53:5a:18:fd:fb:b4:
                    69:86:45:ab:38:25:de:02:38:cb:32:b3:a9:42:90:
                    b8:3d:48:e0:a4:cc:8f:77:02:12:a2:f5:b4:1e:be:
                    96:47:8a:11:01:45:b6:88:c4:40:12:95:cc:ad:dd:
                    f4:8d:bc:36:4c:7f:37:48:0d:5a:00:87:60:af:32:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E1:12:C6:33:EE:26:93:41:C4:CB:94:BF:FC:C8:6F:E2:F0:03:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a099bbc6-22a8-4c4a-8d91-f0638e2fde13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:48:3a:d0:dd:88:05:85:2b:ba:1c:71:ae:14:08:e3:e0:
         dd:b7:e5:5f:a0:ac:4f:41:a3:ef:8a:76:85:c8:17:3e:b5:b5:
         07:d9:00:f4:46:00:70:a8:44:49:d2:fa:53:23:3b:5c:c8:ee:
         9d:d2:80:e4:0b:b3:c1:93:72:a5:4e:b6:d6:c6:dc:ab:ea:4e:
         27:d1:64:f3:8b:0e:9f:2c:59:e4:fc:4a:b4:ce:02:c5:1a:39:
         b0:f8:46:27:0d:60:6b:c1:07:cf:f3:fa:21:66:9f:8f:40:e6:
         af:ca:8e:4b:b6:1d:b6:11:59:5a:fb:c0:e4:01:6c:0a:01:d9:
         f6:77:6e:b3:44:4b:28:ee:8c:21:b3:63:9e:a7:f6:45:78:ed:
         37:58:25:a7:6d:70:b3:c0:38:e9:4e:65:f8:2a:59:8c:ee:9b:
         c8:86:7a:6c:78:40:cd:64:83:89:06:6a:e9:7a:7a:75:25:b7:
         a5:8c:a8:de:f4:8e:32:d6:78:86:2e:75:60:88:71:c4:d4:9f:
         71:32:e8:56:79:c6:eb:b4:bf:b3:ec:e4:95:9b:62:b8:14:f8:
         24:f4:1f:bb:2c:0c:fb:f2:74:3d:68:b6:06:c8:cf:c6:3b:65:
         da:79:65:32:7e:4d:56:64:62:21:19:04:a5:c8:7b:2e:15:b8:
         87:9e:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----