Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1241daa-442c-463a-9107-f61ea68aa0b5.roa
File:                     d1241daa-442c-463a-9107-f61ea68aa0b5.roa (raw, json)
Hash identifier:          Z4rRqA43IAnx3dvLd4qw0yqLxVzlHI2/FMY5qcjz6KI=
Subject key identifier:   0D:B6:E6:87:E7:AC:EC:20:57:E8:B8:D5:F5:23:62:F6:FD:1A:7E:4B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A956A5C24B5DD64CBE8641111B31E5B754A4509
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1241daa-442c-463a-9107-f61ea68aa0b5.roa
Signing time:             Sat 10 Oct 2026 00:10:08 +0000
ROA not before:           Sat 10 Oct 2026 00:10:08 +0000
ROA not after:            Fri 08 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        23.238.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:95:6a:5c:24:b5:dd:64:cb:e8:64:11:11:b3:1e:5b:75:4a:45:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 10 00:10:08 2026 GMT
            Not After : Jan  8 23:59:59 2027 GMT
        Subject: serialNumber=04b119801ab58a762a6e5eb0fc17c5e6242e3f6b6fa7d5738307e2991c264d91, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c8:67:bf:a3:50:c8:ba:5b:fd:db:c6:75:8e:
                    85:c5:d9:9f:d0:11:0a:61:ca:3d:37:3c:b3:05:7b:
                    98:2b:aa:37:55:e6:bb:b7:3b:e4:e3:18:35:8b:52:
                    a1:31:74:ac:cc:6b:39:9a:e1:04:47:ec:03:f5:f4:
                    8e:ff:0a:9b:89:e7:6a:b5:c7:32:e8:4c:43:47:e7:
                    8a:a4:17:6c:26:58:25:f1:f4:cb:4f:19:4b:c7:cc:
                    47:f8:36:c6:79:d0:c5:f5:6c:af:d9:2b:92:a1:b4:
                    98:20:48:dd:8a:c8:c6:4f:b1:23:3e:72:51:68:8c:
                    ea:c3:64:07:27:8a:6b:bc:ea:68:6c:a2:d2:0a:a6:
                    81:a7:f1:df:86:99:26:11:e4:f1:68:86:c7:a2:aa:
                    5a:62:b8:5b:4d:e7:ad:f4:2c:dd:1d:ce:92:80:96:
                    e5:db:6e:72:75:fe:2e:44:a2:3e:62:16:1e:81:95:
                    14:de:f1:b5:1e:76:da:f6:15:2b:05:71:f3:40:9a:
                    cb:1f:ec:48:01:d0:1f:3e:f4:46:b8:c5:25:8d:c2:
                    9e:db:4e:be:a8:9f:94:69:a4:93:44:97:72:6a:75:
                    f8:66:26:3d:d1:36:f7:84:cf:b1:35:31:79:32:9b:
                    66:2b:00:87:31:0b:56:ed:3f:46:c6:72:f4:ee:cc:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B6:E6:87:E7:AC:EC:20:57:E8:B8:D5:F5:23:62:F6:FD:1A:7E:4B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1241daa-442c-463a-9107-f61ea68aa0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.238.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:5b:9f:93:d1:87:5f:5d:96:0a:f3:70:12:46:7b:5f:b5:
         52:b2:13:3d:e3:61:27:8a:f6:48:05:ee:8f:c1:21:3e:bc:22:
         15:5a:de:9d:86:37:8c:3a:71:70:09:61:20:89:d1:84:a5:4f:
         f8:cd:d0:01:04:11:bb:4c:fd:d5:75:75:9a:4d:cd:89:49:c9:
         6b:11:e0:6b:36:a0:02:21:3c:a7:8d:32:3e:a9:02:7c:2e:6b:
         b5:67:01:bb:12:7d:72:4d:dd:f1:89:78:60:81:28:a6:68:9e:
         47:11:53:fe:dd:6f:13:79:26:44:58:a8:15:32:33:bc:d2:8d:
         97:f0:c7:6c:28:26:39:a1:db:b3:74:cd:5f:5b:1b:61:11:65:
         c3:c7:ef:88:63:7e:e6:27:b4:db:b8:04:a3:d6:be:68:ad:d0:
         3d:f5:59:57:e8:7a:a1:3c:2c:ce:45:30:83:20:5f:36:47:d4:
         34:f2:5a:2e:6d:f0:5d:9b:23:b0:75:e6:63:4e:e9:62:6e:a5:
         db:5c:01:36:de:a2:9a:79:d6:0e:28:05:11:7e:68:90:d7:3a:
         a9:98:cd:7f:28:49:7d:e5:12:6c:fd:7c:cd:d1:29:51:af:cd:
         ab:c0:33:79:30:4c:bc:f3:b9:26:49:f6:c5:f0:fa:9d:63:14:
         73:01:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----