Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa
File:                     ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa (raw, json)
Hash identifier:          am93jZydpBsD+3rcO4wnaKmUeR8gmsboDFy71EnMn10=
Subject key identifier:   75:1B:13:16:32:2F:F0:21:04:4C:E9:F4:FA:C2:05:10:6A:CA:A2:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DD7EFB3C1DAC7A092E09EF7EBEC8573731F6F9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa
Signing time:             Wed 01 Oct 2025 00:41:13 +0000
ROA not before:           Wed 01 Oct 2025 00:41:13 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.94.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d7:ef:b3:c1:da:c7:a0:92:e0:9e:f7:eb:ec:85:73:73:1f:6f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:41:13 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=dab5dc542edbcd4b41ebd11f6253a05f5d68dbcf66710063c7866afa49f32019, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:d5:65:ef:62:d1:f8:62:08:51:c9:52:3d:
                    15:81:b0:ee:c6:66:a6:f5:aa:bd:08:bc:38:47:0b:
                    4c:0e:d9:3b:48:c0:e0:ea:78:8c:09:13:36:9c:f9:
                    41:4a:e5:52:0c:5a:7f:3b:f8:77:fd:96:4e:6a:8e:
                    7b:41:31:8e:e0:cb:0a:d2:ba:2f:e4:37:cb:15:5c:
                    bc:29:33:d4:a0:b5:c2:86:70:ff:90:ca:5c:3f:17:
                    33:bc:63:fe:e5:14:c4:bc:c4:42:97:5d:c3:e2:5b:
                    7d:66:12:64:77:f0:48:4b:88:19:44:c3:47:84:33:
                    68:a6:88:7a:b4:e3:01:73:49:b8:46:35:78:82:ef:
                    c9:10:97:f7:62:57:d3:45:8b:bd:b8:59:44:90:71:
                    f5:5a:61:0d:bb:bb:c3:4e:42:46:f0:d6:ff:a7:6a:
                    f6:b4:be:00:ec:32:23:03:44:a0:a6:35:91:96:5a:
                    71:a6:8d:e2:15:9e:81:cb:54:49:9f:c6:8e:81:6f:
                    c3:8e:37:02:8f:ed:1f:94:a8:30:0e:7d:75:96:6b:
                    3e:c4:58:00:08:9d:4f:86:14:36:85:34:eb:aa:53:
                    d1:90:a6:92:ad:e2:cf:9d:58:c5:e9:80:6d:63:a3:
                    ef:10:07:7d:8b:bf:ed:51:76:44:8b:48:5b:aa:4b:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:13:16:32:2F:F0:21:04:4C:E9:F4:FA:C2:05:10:6A:CA:A2:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddc23231-c1b0-40d8-b316-5c2afc8ead56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:72:6f:48:74:b2:6e:4d:37:9d:25:3e:96:18:ba:41:59:
         d1:f1:5d:51:1b:3c:d5:85:1b:50:d7:52:33:6a:58:0c:95:c0:
         52:c9:92:f8:b9:cc:78:83:e5:06:90:0e:77:3e:fd:89:4e:a9:
         e1:5b:9b:6a:c7:53:6b:fd:71:28:f2:81:02:21:be:b8:64:0b:
         68:9c:bc:8e:05:99:6d:7b:3a:94:46:01:6a:eb:11:37:83:cc:
         46:a9:6e:4a:71:63:1f:b2:b1:ca:e4:3e:cf:15:66:45:d4:cd:
         96:89:ba:05:65:76:2a:df:3a:1a:06:09:98:e1:b2:f8:3d:a3:
         00:90:0e:39:2a:91:06:b4:bc:23:07:9a:bd:a2:6f:ca:1c:94:
         b6:ab:67:9a:6b:19:33:65:78:1c:82:d4:d6:cd:f7:d2:62:7b:
         d5:c2:c5:96:0f:74:97:b9:f0:47:a6:29:97:3c:a4:08:a9:e2:
         e2:42:02:7e:82:77:d7:95:28:ae:04:21:49:ad:e3:c8:bd:f2:
         ea:6e:eb:ce:02:91:6d:25:6d:ef:36:99:77:ae:1c:1e:3b:3e:
         67:74:75:41:13:d2:ba:7e:95:3e:1b:e5:43:04:e8:5e:46:ac:
         59:d5:39:c6:57:28:30:c5:83:e6:a9:df:73:19:08:8a:6e:cd:
         72:e9:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----