Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b0be13-a853-41f8-b066-3a9c347a1824.roa
File:                     b5b0be13-a853-41f8-b066-3a9c347a1824.roa (raw, json)
Hash identifier:          hAzim+Knj2FGkec3z3f/UOS6D20h6hDtu3FUfi0pBk8=
Subject key identifier:   C0:87:D6:44:B4:0C:DE:85:34:CC:1F:7C:B0:38:95:24:2A:A6:90:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41FB47A096138F883E89E51053883341F3880DA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b0be13-a853-41f8-b066-3a9c347a1824.roa
Signing time:             Sun 19 Oct 2025 01:20:55 +0000
ROA not before:           Sun 19 Oct 2025 01:20:55 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        220.157.72.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fb:47:a0:96:13:8f:88:3e:89:e5:10:53:88:33:41:f3:88:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:20:55 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=03fb5dd2b2cff439a18caf9f626e2aff01269e29070ff9f531e23992f2655bb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:b9:d8:81:81:20:0d:77:a6:27:b9:c7:14:
                    1a:82:d5:6b:64:a7:66:9b:1e:74:7d:75:7c:30:7b:
                    7b:a1:81:bd:75:d5:21:b8:72:a7:68:f3:95:03:4b:
                    dc:71:b6:21:e8:97:ae:3f:a7:46:9f:8d:75:d7:a1:
                    f5:09:0c:f3:f8:18:e6:77:db:7b:53:76:44:07:95:
                    16:ff:b0:95:db:e9:4a:39:13:24:7d:71:46:40:1a:
                    7f:69:67:24:aa:96:8d:70:1a:05:50:b4:4b:7c:58:
                    41:fd:7c:b3:4f:ab:05:15:93:c9:32:00:a6:06:59:
                    4a:48:ef:e8:12:1e:2f:0d:63:e8:95:a7:54:18:66:
                    81:cd:f8:e8:72:f8:d7:4f:3c:96:97:d2:a8:d8:93:
                    86:0a:3b:d9:56:c6:43:7c:61:e1:36:c8:f2:ea:03:
                    85:10:2d:88:da:25:71:b4:22:6e:8d:f9:3a:f3:cd:
                    83:22:16:b4:20:f9:02:ea:ee:54:f1:c8:2c:19:09:
                    c3:57:69:5e:80:8e:d1:b7:99:e9:c7:ac:cd:62:3d:
                    9a:ad:41:28:18:7b:48:98:1e:2a:97:05:d3:aa:6e:
                    d5:e7:e2:1a:65:f6:e0:d6:11:4d:45:c6:0c:cb:b5:
                    49:d1:2f:30:0a:17:e8:d7:99:1e:18:74:d0:af:83:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:D6:44:B4:0C:DE:85:34:CC:1F:7C:B0:38:95:24:2A:A6:90:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b0be13-a853-41f8-b066-3a9c347a1824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.157.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:44:40:a9:c4:bc:8f:29:02:c2:cf:9e:0b:2c:9f:60:79:7d:
         76:3f:18:a1:a6:77:06:30:2c:ed:5e:5f:f4:0d:9b:60:f2:ea:
         fb:13:03:2a:35:0c:3e:b3:b5:5e:a2:03:02:8f:b9:9b:b2:c4:
         f6:b4:1b:5c:c6:32:2a:b2:89:0d:a2:c6:96:a8:44:ec:de:76:
         f7:07:1a:d0:98:92:5b:f2:9b:35:81:a1:59:1f:77:fc:ea:83:
         ee:7e:85:d4:1b:fd:07:e3:9a:ab:54:3a:bb:63:f0:da:0d:2f:
         4e:7e:69:22:04:72:48:2a:ff:a8:41:d4:83:c5:66:01:eb:a7:
         d1:1a:b3:0a:d9:02:ff:5a:af:76:b7:98:61:9f:56:22:42:c9:
         ea:c4:49:6a:6e:dd:12:27:1c:d5:92:a7:35:e4:55:99:60:44:
         44:fa:0f:7a:7c:27:b1:46:1d:04:c5:1c:c6:49:e3:ca:3c:ca:
         7d:3c:34:3e:cd:93:db:bc:3f:75:f3:f9:f4:f7:d6:04:83:13:
         f1:5c:ae:8d:37:8e:c8:34:58:c9:c5:dc:70:69:85:9e:5e:aa:
         05:4b:c1:d8:2b:d2:c2:a8:4f:1e:86:67:82:f7:ee:13:57:7b:
         89:3a:0d:26:80:a3:5b:d8:98:9a:83:26:38:74:6e:98:65:7f:
         a9:96:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----