Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa
File:                     d40ce859-6725-4b9d-a6c6-30915d571df2.roa (raw, json)
Hash identifier:          pM+9a36gNWMWKLzZsqCEW13rIG1L2YsQ0oD7gIzp/wA=
Subject key identifier:   5C:00:9E:7D:B3:A2:F7:6E:DE:F9:36:53:6B:98:86:70:82:3D:14:00
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       263E471C3D61C0C22BEC6679406E59D2F22A775A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa
Signing time:             Mon 06 Oct 2025 16:22:49 +0000
ROA not before:           Mon 06 Oct 2025 16:22:49 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.220.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3e:47:1c:3d:61:c0:c2:2b:ec:66:79:40:6e:59:d2:f2:2a:77:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 16:22:49 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=241ea7a6c4a0afcebc2eec8b3f40789c2d420608437758e4e765738569b3cb82, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:77:29:f4:e8:ee:e7:b0:7a:e9:c2:7d:a2:
                    b1:db:d2:14:35:5e:2d:6a:39:c8:54:15:2b:92:5c:
                    db:82:9d:4e:60:aa:c4:2e:08:9c:71:de:65:37:17:
                    55:60:21:27:44:7e:c1:37:8c:54:7b:ce:73:17:09:
                    e9:01:30:41:77:a9:68:d2:56:eb:ed:fa:16:e0:79:
                    9c:86:ef:1b:98:9e:fe:a9:ee:66:aa:18:17:20:e4:
                    b2:54:44:7d:cf:03:35:35:ba:b6:30:74:22:49:0a:
                    07:f4:90:02:76:e7:5a:7e:13:05:7e:be:44:9d:b3:
                    4b:be:c7:d9:a4:1e:90:57:94:54:5f:5f:9c:eb:69:
                    77:a6:00:2b:e4:9d:69:3c:67:8e:f6:86:87:70:b7:
                    44:4f:89:f6:31:85:9a:f1:dd:b2:6c:a6:10:8f:36:
                    ec:e1:c1:42:ac:95:fb:51:82:d3:be:f0:21:aa:08:
                    4b:02:f2:73:c3:5a:e0:18:8c:fe:7e:e1:fc:e4:74:
                    04:04:2e:d0:07:44:8f:ba:ba:5b:19:ca:9c:15:1f:
                    16:f1:ca:12:8d:7f:2b:ed:fb:7d:d8:f6:64:84:18:
                    26:03:1c:fb:d8:b6:d5:7e:55:db:e8:59:4a:65:41:
                    fd:89:e7:b0:7c:dd:0d:8e:02:d5:4b:2d:d5:35:f5:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:9E:7D:B3:A2:F7:6E:DE:F9:36:53:6B:98:86:70:82:3D:14:00
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.220.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:30:fa:71:89:2e:f6:f9:7f:5a:c5:c0:86:c2:12:0d:0c:cf:
         21:af:e1:02:a6:b6:07:b8:5e:87:a1:31:45:fe:55:a4:36:d3:
         5c:47:68:45:3d:4c:1c:15:3a:7b:b6:64:b6:4e:c9:41:61:85:
         25:85:12:86:ab:2a:46:d4:e1:67:7b:4c:d5:df:97:02:ce:d1:
         32:17:36:8d:0f:f1:a6:8f:b8:d8:cc:4f:45:de:84:df:14:ab:
         ef:f6:7f:2d:15:d3:b2:a5:97:c3:32:30:41:e6:3c:9a:98:8c:
         fb:50:b6:69:4a:a4:35:5c:b9:09:c9:59:72:3b:57:01:b3:9a:
         71:89:18:81:aa:3a:a0:1b:e4:23:44:1f:f2:69:60:16:f3:98:
         12:8c:43:00:fb:85:46:99:4c:5a:2b:9e:60:a5:d7:74:ac:00:
         70:9b:46:44:d9:2d:57:19:e7:e2:51:66:7a:79:50:7f:8a:50:
         94:6d:dd:f2:3b:08:f1:a2:15:7f:79:af:72:57:cf:68:fe:7a:
         ad:d3:7f:ef:6b:f9:45:60:2c:cc:2d:88:1c:f5:7e:87:fd:e6:
         67:b5:6f:65:0f:dd:26:3c:be:2d:a5:b7:94:0c:89:19:c9:b3:
         ad:47:f7:71:c6:87:c8:49:8c:bb:44:ca:8e:87:cb:fc:91:59:
         c5:83:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----