Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
File:                     b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa (raw, json)
Hash identifier:          4THOst3Jc1AylcSDAZDIB3ogWBqEXsbFD04w6tMDyZI=
Subject key identifier:   55:C2:E2:C0:0E:52:77:1C:A0:0D:AE:6A:53:80:2F:77:CD:EA:B3:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       55CA9C493817A5D9DAD3AF07F142D845DFE1C7E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
Signing time:             Tue 07 Oct 2025 00:41:11 +0000
ROA not before:           Tue 07 Oct 2025 00:41:11 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.248.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:9c:49:38:17:a5:d9:da:d3:af:07:f1:42:d8:45:df:e1:c7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:41:11 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=2859a6939deb1ac6dcf2b3567be7da421d065c5dd4d526c9f30088c976cbc867, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:0a:92:9e:05:bc:56:99:57:88:5d:ad:c1:
                    a6:56:4a:14:66:b2:c8:10:9e:88:61:df:61:04:3f:
                    a6:0b:b6:3d:12:77:94:12:b3:ba:a7:f4:a9:7f:bc:
                    89:81:2b:88:ea:fe:70:3c:4d:8f:a3:0d:7c:62:c6:
                    cd:0f:14:ce:00:5b:27:c6:1c:0f:1a:23:6d:e0:f9:
                    66:5e:72:a6:4f:f6:14:26:c9:77:f9:e9:89:0c:b3:
                    fb:19:fe:87:21:ad:fb:4c:6b:98:99:87:45:1b:01:
                    35:2a:5f:85:9b:17:dc:47:67:67:47:a9:e9:6f:d6:
                    42:bb:27:32:ad:67:4d:d3:40:74:92:e1:7b:1b:41:
                    cd:fb:99:67:4e:ed:78:c9:28:ec:f8:bd:f6:87:42:
                    41:aa:c0:cb:3d:d7:5d:58:d8:d7:fa:68:3b:ab:58:
                    b2:6a:d3:7b:f7:d2:e0:83:bf:5e:73:c2:5c:fd:1b:
                    1c:85:82:fc:c8:ca:7b:43:04:43:fe:d6:f7:05:ec:
                    b0:e3:b5:cb:72:a5:48:7a:76:63:31:41:a3:72:3a:
                    5f:73:43:8d:89:bd:ff:8e:2b:ce:14:25:e0:a0:d1:
                    0c:0d:87:c4:57:48:bf:1c:ad:a8:9a:59:23:be:c2:
                    c8:5e:7c:91:7b:f8:2a:8b:4e:32:1b:50:c8:44:0c:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:E2:C0:0E:52:77:1C:A0:0D:AE:6A:53:80:2F:77:CD:EA:B3:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.248.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:0f:29:d6:c1:03:34:52:41:13:ca:4f:75:84:8e:28:7d:
         f3:88:03:8e:9d:be:57:b2:d1:6a:99:6a:e7:4a:1d:54:4d:39:
         71:dc:54:4d:8d:d6:3e:01:8b:39:ba:ea:e6:d2:8e:c3:9e:2e:
         60:63:d5:a8:7c:6f:23:34:a6:95:4f:63:55:32:70:62:fc:a6:
         d7:0d:f4:6c:99:66:05:17:d5:4e:32:52:3f:b0:05:cb:db:f0:
         0c:aa:89:a4:9f:d1:88:16:a8:cd:fe:5b:40:43:46:8a:14:1b:
         db:39:ac:0c:06:5a:78:77:3f:b2:49:a0:2c:e6:69:c9:af:c8:
         6d:2a:49:76:68:7c:00:35:a9:36:8f:69:3e:76:9d:1e:f1:0f:
         85:95:16:d7:51:0d:2b:d6:f7:85:1a:47:d4:ec:1b:5e:f5:a5:
         5a:ba:e5:b0:8f:a5:98:32:4d:7b:01:03:d2:f7:ea:8a:7f:a8:
         f4:48:57:7c:6d:cf:c0:ff:c3:f2:62:9f:22:2a:fb:ca:3b:bb:
         28:ae:a4:68:a9:ee:fb:dc:ce:a1:2f:69:d9:e4:b2:4c:66:8f:
         c2:e4:8a:21:f6:f1:c8:5a:d8:47:af:d4:d7:23:09:23:52:24:
         8d:8e:8d:35:52:01:03:c2:98:df:b8:da:60:79:74:39:6a:23:
         44:58:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----