Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa
File:                     a2f87879-6b97-4c65-aad0-f64bdcf78081.roa (raw, json)
Hash identifier:          hkX7YE/HMNOiNPKFdNDRYjIaAySejNg3cp6iukbeNqk=
Subject key identifier:   61:84:61:81:CE:29:05:94:39:74:60:CC:02:63:BB:C1:F1:95:B4:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6162618E3B717CF8D0A175A7F09A118A932C77CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa
Signing time:             Tue 07 Oct 2025 00:23:21 +0000
ROA not before:           Tue 07 Oct 2025 00:23:21 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        172.106.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:61:8e:3b:71:7c:f8:d0:a1:75:a7:f0:9a:11:8a:93:2c:77:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:23:21 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=32ae75037c33b7d72ef428c7310c360db8bd1cd18c6f8b03928151ff4b3b6bd2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:33:1a:1d:b2:40:75:79:9f:c0:7b:79:c7:
                    37:15:dd:60:6d:81:3c:83:c7:4f:ce:7f:02:56:81:
                    98:0b:ec:62:34:57:c6:3c:9b:a7:f2:ac:53:05:32:
                    a4:e1:5a:28:eb:d8:bf:4a:01:25:67:b6:ee:3c:d8:
                    b6:0b:dd:c4:f6:62:6e:e2:df:2d:93:00:bf:04:23:
                    22:54:70:79:9b:01:39:28:79:c5:fb:db:82:10:0d:
                    0d:32:4b:42:65:e5:c4:cd:5e:bd:d6:65:f4:93:9f:
                    bf:76:74:fe:e7:9c:24:b0:32:ea:d8:3f:b9:93:37:
                    e2:f9:fe:b4:9c:6f:f5:e2:86:ac:99:80:d4:8c:50:
                    e1:6e:97:8a:8f:43:85:d6:35:48:a4:a8:ca:ea:3c:
                    9c:5a:6f:f3:27:a4:34:1a:10:7b:85:83:ce:a0:ca:
                    1f:10:85:06:67:de:2f:c9:69:f4:15:55:4d:b1:be:
                    fc:02:ee:02:95:86:8e:a0:61:9f:ed:7b:cb:54:6b:
                    06:cd:84:72:2e:45:e6:9f:54:65:88:c7:9a:c4:bb:
                    ca:fc:3d:a4:70:93:74:3e:ca:3c:4d:d6:e5:e2:3a:
                    6b:6b:b0:36:42:50:de:62:28:a6:96:67:43:0b:14:
                    eb:06:28:75:91:fd:48:2c:92:a4:2e:55:08:ce:d1:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:61:81:CE:29:05:94:39:74:60:CC:02:63:BB:C1:F1:95:B4:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:be:e6:37:f0:10:99:3c:3c:94:d2:d0:26:51:a4:4e:aa:
         75:82:b8:51:fa:6f:83:4b:d1:ef:3f:20:10:1f:73:23:56:d3:
         d8:56:9f:28:52:09:cb:f2:27:a3:e7:95:05:66:cf:25:1d:56:
         f9:ee:f1:a7:1d:f2:ed:74:69:f4:cb:b3:0e:cb:22:b7:d7:db:
         95:3b:1e:0f:0c:8d:3d:82:a2:b2:c5:f5:cf:f2:7b:b8:d6:29:
         73:bc:75:10:05:59:b5:85:30:9b:98:0c:04:3d:3b:5d:28:01:
         88:42:43:a6:ac:4d:74:24:17:73:17:23:03:a5:2b:ef:57:a6:
         63:47:6b:4e:5f:e1:10:b0:76:54:a2:19:1b:fa:4c:81:b1:90:
         4f:58:1a:f6:8a:28:28:06:4a:2f:65:97:2e:cf:25:89:5f:5f:
         6d:22:7c:f8:92:7a:1b:34:0b:24:4b:ff:1a:2e:66:33:5f:42:
         85:06:64:25:aa:ac:41:0e:27:d1:b4:f7:1a:2f:17:ca:5e:5c:
         4a:3a:e8:8b:92:ce:ea:64:1f:df:86:fd:92:c1:66:91:73:16:
         32:79:70:dd:28:37:16:fc:c5:60:7a:69:d4:55:b7:21:e1:35:
         78:b4:f8:5f:35:72:70:1a:1d:04:1f:fc:fa:54:f7:d8:e7:00:
         1e:46:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----