Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c35d6d63-04f7-49a8-80f8-0abd263e7356.roa
File:                     c35d6d63-04f7-49a8-80f8-0abd263e7356.roa (raw, json)
Hash identifier:          eR0jWc4yBhFM1ZpKInFUK/KToMAmnEWFetfA4dqJrPU=
Subject key identifier:   75:83:4A:7E:17:24:95:29:76:4C:66:EE:64:07:2C:FB:6A:99:11:04
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02102CE6EF14FB4B552B54EE6385DFA4A44D2617
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c35d6d63-04f7-49a8-80f8-0abd263e7356.roa
Signing time:             Tue 14 Oct 2025 17:39:15 +0000
ROA not before:           Tue 14 Oct 2025 17:39:15 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:2c:e6:ef:14:fb:4b:55:2b:54:ee:63:85:df:a4:a4:4d:26:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:39:15 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=b1563c14af28cce02ea8016df7bbbfd72054eb8824d00d6a44a54ee93960a1bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:87:da:ef:ec:b0:d1:ca:13:cc:26:e6:db:
                    50:91:43:73:78:9e:e2:b4:fb:5b:a5:07:3e:64:45:
                    df:34:26:bb:56:78:0b:d6:31:7c:e5:c1:81:b3:e1:
                    bb:04:f7:bf:f9:bb:77:bc:03:05:0a:df:0a:8f:dd:
                    de:8c:14:ce:ad:ba:28:58:c6:cb:77:8a:a3:68:d1:
                    8f:71:68:44:74:4c:6c:fc:4f:a9:7e:c7:02:f4:77:
                    f4:63:37:a2:e5:52:b6:73:02:2b:d6:d2:bd:14:39:
                    16:69:ba:c4:33:4c:62:8c:fa:75:f3:e2:c4:a8:08:
                    13:6b:79:a2:8f:99:cf:6b:73:30:f3:e3:aa:29:b8:
                    2d:4e:be:bb:3c:9c:bb:0b:9b:e7:da:fc:a7:81:8d:
                    92:f5:9b:3d:92:ac:2f:99:86:83:95:6f:92:af:ec:
                    e8:0e:8c:fa:5e:2a:95:1c:66:66:cd:c7:70:d1:7d:
                    e8:27:43:08:0b:12:d2:3f:62:69:32:85:d6:13:d6:
                    64:1f:02:cb:bb:da:e5:4c:f0:3a:e5:4d:26:a1:fc:
                    29:c7:0c:37:de:06:e7:d8:80:1d:27:c3:f2:61:f1:
                    08:19:a4:d8:41:8c:48:bd:c4:86:f0:a0:9a:ff:de:
                    fe:b1:24:fc:9c:b5:b8:e5:62:0e:ca:14:c9:60:46:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:4A:7E:17:24:95:29:76:4C:66:EE:64:07:2C:FB:6A:99:11:04
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c35d6d63-04f7-49a8-80f8-0abd263e7356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:89:36:a9:e8:ef:d7:2b:36:f4:bc:87:bb:f5:17:73:11:
         3a:57:be:c3:77:e2:49:31:46:67:78:23:f7:f6:88:9b:03:b0:
         86:20:58:20:14:97:07:b7:a9:82:14:73:c4:20:8e:1d:86:85:
         2a:2e:42:d6:8c:4a:5e:e8:b3:df:91:d1:6f:1b:9d:b9:c4:50:
         07:38:91:cc:a3:a7:05:3a:51:40:1a:11:18:3c:b2:b8:1e:ab:
         e7:5c:5b:fb:ae:f3:31:4e:b8:e0:29:a9:81:66:9c:f2:ff:8e:
         38:2f:9e:e8:6f:48:92:68:1d:d9:2b:da:a2:25:1e:0e:ba:df:
         db:cd:64:13:10:ee:a3:64:8d:4c:77:89:37:93:52:ee:64:08:
         74:ba:da:e8:b5:c3:2c:9e:92:03:64:c5:42:7f:84:75:56:ca:
         31:3b:06:9b:fa:b8:75:db:08:36:ff:41:12:9d:8d:2b:d7:4d:
         f9:9d:b5:f3:06:fe:4a:51:93:29:c8:ef:28:3c:a5:bf:6a:17:
         ee:e7:e9:8e:84:84:9b:76:2f:79:58:bb:d0:97:4d:dd:b1:30:
         c1:44:d0:f4:40:2d:b5:b2:27:a8:6e:fe:b3:99:70:24:a2:fc:
         f4:0c:8a:3f:23:81:98:7d:0f:66:11:e1:af:40:73:da:67:75:
         6b:4c:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----