Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa
File:                     c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa (raw, json)
Hash identifier:          5vkbciTe688h92KzvXwGRIxNyzvVk3KY9ptgdrLuEpo=
Subject key identifier:   2A:EE:82:0A:1D:AA:7B:83:A8:A9:F1:5C:B4:DB:98:21:B6:4C:F9:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5821962CF4B4113261EF87C4AF0FE63DEA0308CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa
Signing time:             Fri 26 Sep 2025 06:06:55 +0000
ROA not before:           Fri 26 Sep 2025 06:06:55 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        24.110.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:21:96:2c:f4:b4:11:32:61:ef:87:c4:af:0f:e6:3d:ea:03:08:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 06:06:55 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=5157d15fab02bceaba739f295d47607fb72cffd0172960934ef356e929bf426d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:c9:00:c8:62:73:9d:6d:10:62:0a:1a:cc:
                    81:70:b4:c7:ac:80:84:14:0b:4e:eb:81:f6:3b:91:
                    f1:2f:cf:c5:e1:f5:f1:73:42:a7:c3:55:66:0b:19:
                    1e:87:0c:a8:92:11:92:c2:5b:c2:1b:d6:77:51:f1:
                    65:19:83:ef:db:f9:4f:82:57:6c:e1:97:94:65:9f:
                    78:fe:c2:f0:22:78:6b:c2:d2:3e:7f:8a:96:43:4c:
                    ef:3b:bc:35:b3:18:cd:94:8f:38:25:7b:3f:85:3a:
                    8f:b5:f2:17:30:cc:fe:6c:14:1b:72:e5:ab:a5:f6:
                    c0:c3:83:4d:15:13:54:f5:7a:ee:60:76:e0:77:ff:
                    8a:09:14:7d:3d:c4:47:86:45:48:e8:7f:69:33:9f:
                    61:0e:95:da:96:56:c9:6d:bd:6a:43:e9:f7:02:66:
                    1a:58:52:6b:b5:a8:02:b3:b1:1f:06:d6:0c:4c:f4:
                    cb:c3:0d:35:67:b0:38:94:fb:0e:c7:58:9c:75:77:
                    b3:a2:6c:98:fd:43:4e:4e:64:ae:83:03:ea:50:67:
                    e9:9c:60:3c:76:51:ca:e2:ec:0d:a5:64:c2:29:15:
                    dd:27:86:7f:18:87:7e:1c:a7:e3:6e:a1:ea:01:d5:
                    4e:5a:ed:d2:a1:25:02:71:73:1f:3d:32:70:8b:2c:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:82:0A:1D:AA:7B:83:A8:A9:F1:5C:B4:DB:98:21:B6:4C:F9:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b2:a6:89:65:04:27:60:da:3f:99:74:df:45:ea:10:64:67:
         1d:c3:71:c1:72:22:f8:a7:71:9d:d9:0e:98:8b:b4:4e:80:c9:
         ab:7d:d6:4c:d4:4b:14:3d:28:09:61:6c:b7:87:76:7c:e4:91:
         9c:3c:6f:a5:e6:26:40:22:fc:06:81:78:d7:0f:ed:a0:ad:74:
         dd:f9:de:39:a4:51:aa:35:b6:0b:ea:fd:b8:77:7f:6c:bb:6e:
         66:02:c9:ed:99:1b:a7:bd:d6:5a:70:05:41:71:c0:b1:22:ff:
         1e:fd:c6:83:c1:05:aa:fc:01:ac:a0:db:a1:3f:8c:a9:f6:d4:
         94:ea:d7:b2:d0:fa:54:88:e8:06:fd:1d:8e:8b:90:4c:84:1c:
         2b:9f:a6:21:d8:92:a8:fb:da:01:4a:28:76:4b:56:e5:0c:6c:
         2d:0d:40:bf:c5:04:06:81:f8:40:64:1e:48:25:73:d0:52:5c:
         41:5d:50:0f:b0:0d:36:23:c8:ac:57:00:38:5f:1c:bf:46:d0:
         08:c6:d8:3e:21:cf:2f:a3:ad:63:86:d3:48:45:19:61:c5:49:
         25:ec:cb:97:90:2b:77:1f:3b:2a:f2:13:2d:86:b4:df:82:29:
         34:cd:ca:30:51:c9:2a:9a:05:b9:ef:4d:a2:57:48:d7:07:82:
         f2:d3:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----