Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa
File:                     a25a98f5-7804-4094-8cb7-934444d2052d.roa (raw, json)
Hash identifier:          mn2X8YGPowD81h4MCXO4ytFqxF7CEFkZb34sTsR7eEI=
Subject key identifier:   49:B1:2E:2C:69:17:FD:BE:E0:C7:98:B8:8D:E0:28:D1:5A:30:43:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C1DF9A758989F8A6AEC84DEF779E11D6BBD2A4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa
Signing time:             Sun 19 Oct 2025 02:10:10 +0000
ROA not before:           Sun 19 Oct 2025 02:10:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        192.31.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1d:f9:a7:58:98:9f:8a:6a:ec:84:de:f7:79:e1:1d:6b:bd:2a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:10:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=94f65e4af280377fe5263240b370befce7f633a4f788030c0091012a442b84d7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:3a:fe:b5:49:01:3a:c9:0e:6c:be:e2:41:
                    17:2d:17:82:c4:f8:1f:dc:40:95:cb:86:60:00:a5:
                    83:ad:6a:b7:6a:2e:e0:ff:47:f2:90:29:55:6d:32:
                    97:4d:3e:18:82:09:72:b3:ab:e5:a8:d9:7e:56:ea:
                    52:b7:16:78:fd:a0:01:1f:15:80:1a:ba:ca:32:58:
                    2f:fa:72:05:94:a1:2a:55:e0:cf:7b:34:0a:ff:86:
                    ee:74:29:ba:89:9d:71:cf:2e:42:a3:97:6b:90:54:
                    0b:6e:60:57:cd:e3:8c:4d:2d:f8:c4:c8:0f:78:6f:
                    4a:48:ca:76:fe:70:db:89:22:78:8a:dd:de:14:d7:
                    2a:9f:d0:bd:7c:1a:48:fb:85:6e:1f:6e:b7:3d:91:
                    85:34:a4:53:29:a5:87:f5:c4:ce:1d:9e:d4:7b:56:
                    0c:46:3c:7d:5a:35:80:cc:9c:cb:03:06:9d:ec:44:
                    48:01:9f:46:65:7a:ef:9e:44:6b:3f:e0:03:02:08:
                    b7:8b:b8:73:48:92:63:74:b4:ea:ae:7e:90:9c:20:
                    a0:0a:66:68:1e:78:7b:e3:a0:2a:e4:b2:f8:c9:b4:
                    8f:a3:37:d1:93:8c:f2:17:50:87:1f:a5:15:1c:0f:
                    1c:13:55:5f:df:1c:7b:6f:35:69:0c:b5:e1:1c:63:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:2E:2C:69:17:FD:BE:E0:C7:98:B8:8D:E0:28:D1:5A:30:43:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a25a98f5-7804-4094-8cb7-934444d2052d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:ba:98:92:05:c5:84:db:7b:47:4c:09:79:b6:17:8f:8a:
         7c:0b:44:61:2e:86:fe:9f:71:fc:40:03:cd:56:7c:23:82:3e:
         72:28:1f:ba:0d:dc:14:b8:88:eb:49:8a:34:84:ec:d3:d2:ec:
         e8:1a:90:ff:93:0e:b0:0d:c0:4a:46:48:13:38:b4:7c:be:21:
         1c:de:24:8f:bd:df:a5:7c:c8:d7:6b:05:ec:ab:54:30:6b:6f:
         93:4f:b3:6e:52:33:1a:d9:79:34:5a:77:8d:67:32:94:5c:1f:
         a2:0e:88:10:ee:46:fe:d3:a6:8c:c0:90:3d:70:7c:6c:6a:ce:
         76:8e:8c:83:22:f7:b9:76:06:3e:d4:f5:ca:31:09:40:0d:55:
         ba:a1:c2:f8:d4:5c:ae:dc:15:c8:0e:08:22:78:c2:70:a9:62:
         21:6f:71:b3:a4:5d:bf:41:81:59:c3:e2:39:c2:4c:82:ae:bf:
         63:a7:03:01:8c:f3:bc:5e:77:a1:3c:d6:58:98:5f:e0:4d:1a:
         7c:a4:12:c7:bd:00:7c:56:ad:97:4e:5e:e4:bc:29:2a:1d:96:
         8d:2b:ce:04:b3:14:57:36:05:d6:f1:6b:f4:6a:2c:85:91:2a:
         c5:dd:7a:81:5b:f0:6d:8a:d6:1f:3a:18:5a:9b:90:db:d9:b5:
         df:84:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----