Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa
File:                     a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa (raw, json)
Hash identifier:          cElXMxoPcn0M3vZEaOLvfIntrfJ1HHSIbfXHZ1bvFNA=
Subject key identifier:   8F:1E:77:E5:37:0E:97:03:98:0C:BD:09:4E:84:D4:D1:DE:2D:A4:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60B6EECE945158BB9BD208FBF69DD203872D2152
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa
Signing time:             Sat 11 Oct 2025 00:41:23 +0000
ROA not before:           Sat 11 Oct 2025 00:41:23 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b6:ee:ce:94:51:58:bb:9b:d2:08:fb:f6:9d:d2:03:87:2d:21:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:41:23 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=ac74772c4c404805c0129c6aeed7def20a6ea8553d1846490a04b3f792660bc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:b4:34:33:86:06:15:34:7d:8b:a7:ec:d3:
                    7d:91:6e:19:41:e3:6b:ab:4a:9e:04:4c:5c:b4:33:
                    21:e2:68:54:d3:56:21:58:55:f5:9c:db:68:e1:b8:
                    ff:58:78:1b:e1:1a:1e:fb:3c:8f:2e:c7:2f:97:c1:
                    aa:d1:27:06:4e:5b:e3:8b:b5:ef:6f:ee:ad:ca:ee:
                    85:70:ba:8f:ad:71:1a:68:5a:f4:be:c1:f3:15:a6:
                    3a:48:93:05:f6:3b:8a:13:05:8d:d0:52:a6:69:94:
                    07:d9:13:5f:5b:2a:37:52:7b:51:c1:e8:60:44:ea:
                    90:53:31:e9:a2:24:fa:10:c6:14:28:61:75:3f:21:
                    b3:54:7a:5d:a0:9d:00:42:00:0d:8a:a6:65:eb:92:
                    fb:5e:57:64:37:f0:82:9a:2f:a1:a2:7b:b5:94:b6:
                    13:07:d6:6a:12:ba:50:1a:0f:ed:ad:12:58:e4:16:
                    a9:2c:0f:0e:4d:2a:60:51:27:7f:c9:3e:5a:0f:7e:
                    48:4f:de:d4:f2:1f:ed:00:a0:57:fe:4a:7a:1a:31:
                    46:a5:cd:bb:ff:38:00:ae:67:5c:34:b6:aa:de:07:
                    77:98:ca:34:76:92:0a:ae:79:bf:17:2c:2b:a3:cb:
                    3e:f8:09:30:30:79:ef:af:d8:1e:6c:27:7b:36:5d:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:77:E5:37:0E:97:03:98:0C:BD:09:4E:84:D4:D1:DE:2D:A4:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:fa:52:f5:c6:28:83:36:5e:37:93:f6:8d:d0:57:9f:48:
         1d:fa:84:1f:f5:2e:c5:9d:4a:3f:26:d5:20:9b:d9:97:06:7e:
         a6:91:e2:a9:da:77:1f:3e:c7:b5:26:6c:9b:a9:05:ca:ed:58:
         19:3f:f5:9f:7c:e9:36:64:e1:46:f6:07:b7:c4:cc:fa:1c:19:
         d3:f6:52:a1:6f:0a:6f:51:13:cd:8f:74:a3:85:62:f0:00:7f:
         21:5b:96:87:16:b9:b4:3e:ad:27:7b:52:2d:f9:06:63:69:b5:
         23:90:00:82:89:4b:40:be:d4:50:11:99:50:ec:0b:ea:71:56:
         a7:4d:8a:5d:51:e3:5e:44:f5:6a:d0:3b:2e:f6:94:be:34:46:
         45:90:aa:17:b3:fa:99:c3:e5:0a:33:bb:b6:11:38:41:c7:bb:
         e9:ad:ed:29:5b:76:4e:90:92:be:ee:3b:28:4b:90:e5:d6:87:
         4e:43:f8:57:cb:35:b0:07:72:d8:48:66:15:19:af:71:99:75:
         a7:de:93:92:d2:72:7a:3c:a5:ff:60:5e:b2:15:92:46:6e:9b:
         b3:da:ce:fb:c7:f9:9b:3c:5c:88:0b:fc:31:f0:35:a6:28:b2:
         a6:33:6e:ea:2d:87:16:8f:55:73:59:7e:05:bd:43:a6:a5:fe:
         ea:82:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----