Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d277fb43-a62e-4f29-b23d-ea235789ad63.roa
File:                     d277fb43-a62e-4f29-b23d-ea235789ad63.roa (raw, json)
Hash identifier:          uxAI9IQohJMkGP0tp49Ad3Ri2MF5RFR6sg9uQK7an/4=
Subject key identifier:   C4:A9:3E:A6:B0:19:AB:96:B9:EC:19:2F:E7:D8:A0:52:C4:47:21:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B5DB985C634B1C357089929BF6D69D1B572CBC2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d277fb43-a62e-4f29-b23d-ea235789ad63.roa
Signing time:             Fri 17 Oct 2025 21:20:59 +0000
ROA not before:           Fri 17 Oct 2025 21:20:59 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        174.129.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5d:b9:85:c6:34:b1:c3:57:08:99:29:bf:6d:69:d1:b5:72:cb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 21:20:59 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=6bad5992cebc06912abf6a79ec50c08cf078499d03feda9d3b0b2863ac2e5799, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:36:d1:f2:72:c2:35:83:78:b2:df:69:7f:
                    d9:70:6f:9c:d4:d6:7c:4b:07:e6:58:90:9f:2e:79:
                    4c:e6:ad:60:36:7f:90:e5:ac:bc:25:ca:40:33:f8:
                    ba:26:8a:1f:01:15:34:d7:6a:9e:ad:d6:2f:56:ef:
                    98:0b:50:c0:e5:cd:b8:c9:eb:8e:9c:b9:2e:ff:fa:
                    63:20:7d:1f:70:f1:c0:af:92:c6:7f:9a:7a:e5:88:
                    f8:6e:a1:68:6d:1b:f3:94:10:82:c3:b8:c6:03:ac:
                    ad:c4:8c:c7:32:ba:0a:b5:79:6a:9b:4b:99:ec:35:
                    c0:38:07:5e:96:b2:63:0e:ad:84:9d:ed:65:de:dd:
                    7d:98:1e:86:13:e5:21:76:bf:86:63:ac:1d:c0:1e:
                    76:69:98:fd:c5:bf:84:b8:9c:3b:39:6e:1a:64:4c:
                    2a:c3:89:29:0c:fd:60:ce:89:51:c2:1a:48:5d:57:
                    ed:c9:f4:16:1b:c8:a8:71:31:5f:b4:45:54:bd:c9:
                    fc:c6:72:48:3e:d4:d2:4c:c6:c9:28:4c:ed:5b:78:
                    fc:77:4c:0e:af:4a:43:e9:8b:79:86:d4:72:35:85:
                    a4:79:3d:f2:ca:68:6f:95:74:a5:4e:93:6e:4b:bb:
                    85:7f:e6:11:78:1f:1e:1f:de:9e:bd:ab:d9:39:4b:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:3E:A6:B0:19:AB:96:B9:EC:19:2F:E7:D8:A0:52:C4:47:21:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d277fb43-a62e-4f29-b23d-ea235789ad63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.129.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:3e:c8:e6:52:a7:c6:b9:fa:14:8c:37:3f:d4:f9:fc:2e:
         bd:a7:e8:19:fe:20:74:a2:e1:29:36:26:77:2b:d1:40:32:be:
         61:ae:f2:6e:ad:d5:24:4b:50:2f:85:e8:6a:32:ac:9a:0f:37:
         02:3e:9b:8c:a6:ac:22:67:9e:62:09:e7:d8:09:c9:b3:ab:12:
         0a:52:48:6f:1a:b4:c5:da:dc:16:f5:4f:95:79:8b:ab:a8:24:
         c3:74:da:aa:ea:63:e6:be:f7:3a:36:09:4d:98:8b:34:42:ef:
         2e:87:90:d3:b6:e9:8e:7f:ba:e3:41:c8:fd:95:8e:8e:7d:5c:
         e2:e9:a2:1a:03:30:88:6c:77:60:86:2e:cd:03:f0:41:99:44:
         aa:2a:89:f1:82:fc:0a:e6:01:0f:75:a4:dd:4f:50:78:0b:73:
         e8:57:6d:c0:33:52:6f:35:76:07:c1:d1:de:e1:be:53:8d:2b:
         2b:71:6b:59:97:22:f2:81:b9:a1:d6:71:9a:39:08:80:82:60:
         b3:9f:37:d2:64:a9:69:3f:60:f3:08:c3:0e:87:ec:ff:0a:7e:
         01:37:94:83:66:01:32:88:7a:ca:b9:7a:ef:d5:87:d7:79:20:
         da:9b:61:c3:79:34:bd:d0:d0:c3:2f:76:4e:a7:11:74:a5:5d:
         8b:c7:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----