Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa
File:                     a583480e-e1d9-4d35-8137-1605a5cfffc9.roa (raw, json)
Hash identifier:          Yqj3xetx9t8JsN3WhlNSx/t2gGHwynYayD8AP2VmvjY=
Subject key identifier:   68:DF:A6:9D:E1:F1:45:D3:74:FB:7F:9F:2B:B3:96:D9:EC:6E:BC:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       731FD01DCEBFC3A4BAFC8FB4A23B0BD52A8049CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa
Signing time:             Mon 06 Oct 2025 16:11:54 +0000
ROA not before:           Mon 06 Oct 2025 16:11:54 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        37.203.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1f:d0:1d:ce:bf:c3:a4:ba:fc:8f:b4:a2:3b:0b:d5:2a:80:49:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:11:54 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=ce8acae9eb72b8bc4204db08eceed49380ca074f38be8367372ab721f875365a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:b1:4d:be:11:f8:79:fb:57:d2:eb:01:b6:
                    09:b0:e1:23:33:63:84:39:08:02:1e:c0:60:12:d2:
                    5e:bb:b0:65:41:e5:71:a6:98:1c:51:a5:b6:7a:54:
                    b1:c5:ca:cd:0a:79:71:9a:89:61:0d:2e:5c:d6:56:
                    ba:0d:71:5b:28:a1:40:84:6b:8c:26:52:ef:9e:dc:
                    8a:8e:ea:c1:6d:f8:65:bb:b0:0d:0e:96:ba:3e:e9:
                    b4:79:47:78:98:da:7a:45:db:45:32:92:26:ad:02:
                    6a:e2:e6:29:62:f6:a9:14:2b:a6:44:34:18:e2:77:
                    ce:d0:ee:c6:99:3c:7b:c9:bd:e4:ad:c1:52:48:c4:
                    31:8c:a3:cb:eb:9c:38:8b:94:bd:a3:06:40:d3:9d:
                    be:7b:13:ad:17:a1:75:f0:71:70:3c:b1:97:23:e9:
                    53:52:72:a2:4e:ff:0d:98:20:6a:14:16:09:4b:36:
                    ef:22:9f:29:49:63:a9:c1:36:c5:67:23:88:6d:2a:
                    06:b3:73:1b:0a:c1:ae:91:25:a0:71:06:d2:d3:89:
                    7c:ab:28:b9:7f:d6:9e:3d:a5:56:21:37:46:fa:dc:
                    aa:ef:76:96:ee:de:c4:45:96:49:60:b8:03:7e:00:
                    bf:cf:88:f7:04:1e:53:3a:22:53:71:c8:1d:9e:f2:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:A6:9D:E1:F1:45:D3:74:FB:7F:9F:2B:B3:96:D9:EC:6E:BC:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a583480e-e1d9-4d35-8137-1605a5cfffc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:66:91:9b:3b:01:50:ac:9b:dd:26:c7:66:64:cd:e3:02:93:
         08:5c:54:3a:db:44:ac:9a:ee:6c:d0:20:0d:11:f2:db:bb:55:
         b6:f3:6b:e1:69:9f:4e:c4:7b:8e:3d:24:b5:75:7d:17:bb:80:
         92:93:25:cd:de:8f:8c:a8:53:61:f1:5a:a0:e4:c8:62:35:f7:
         24:09:4f:7e:c5:d2:0c:8b:01:9f:0e:21:70:19:fb:e5:f9:30:
         2f:53:16:99:62:f6:3c:41:0a:b4:a3:48:6b:e7:b8:df:3b:09:
         40:c3:60:b7:60:b5:41:66:37:84:57:34:cf:ed:35:75:4f:2f:
         79:c9:26:18:c9:1d:a2:4d:ab:58:60:56:e8:b4:06:81:af:09:
         a2:37:6c:db:bf:3a:73:9d:ad:91:29:f0:19:bb:b1:45:ba:d4:
         a6:44:f9:5f:c3:a7:45:9c:1b:eb:37:89:ac:f4:45:f2:8e:f8:
         3f:92:f8:f8:b4:37:8d:00:d1:0b:81:ed:c4:af:43:2b:8e:e9:
         a8:f7:ac:95:97:0b:1e:e1:7d:0a:57:f6:f3:cb:46:73:00:c7:
         a7:ce:44:04:01:af:04:e0:4c:3c:2f:19:ea:ea:a0:06:23:c3:
         1c:2e:da:f2:88:15:5a:ee:5c:6d:10:70:d9:cd:9e:1e:35:c0:
         df:a5:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----