Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa
File:                     de1f98bc-ae50-4803-b2e2-2d125089d719.roa (raw, json)
Hash identifier:          7WT7UeFNoygWyR5JEc3fRpk4QpohJPiXV2vXkQMWfME=
Subject key identifier:   6E:49:33:09:7A:45:FF:71:18:B8:EE:90:EE:91:0E:57:3E:EC:56:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       24E7E5887C163A07B7A909B1FBC0F0A1075F560E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa
Signing time:             Mon 13 Oct 2025 15:51:09 +0000
ROA not before:           Mon 13 Oct 2025 15:51:09 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.91.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e7:e5:88:7c:16:3a:07:b7:a9:09:b1:fb:c0:f0:a1:07:5f:56:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 15:51:09 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=3938211409ce0fd3cf90e5e9dfa4a5fcc94fedc5a61b1bbdb50a3c9bcab87dfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:09:8a:b2:a9:71:ec:9d:a2:4e:89:14:db:
                    ee:39:e1:32:f0:e2:76:6e:e2:69:d9:a0:1c:f2:ec:
                    62:e2:59:f9:40:e2:3f:9b:67:69:61:3c:61:cc:06:
                    63:4e:be:2d:51:be:5e:7b:4a:fc:ff:d2:35:47:a8:
                    5d:16:ee:f9:bd:9f:0d:f4:c7:4f:6b:40:3b:0a:89:
                    7d:e1:ea:65:27:25:d2:86:ba:1a:de:44:8a:a6:06:
                    3b:1b:23:2e:1d:07:72:bb:09:be:9d:c4:b6:fc:fb:
                    40:25:80:91:02:a0:78:8d:7d:96:4e:91:f1:9b:92:
                    35:10:c4:2a:94:8e:c9:60:05:23:3d:ca:95:c4:5f:
                    a4:b6:4f:5f:50:83:75:8e:1f:8b:65:37:f4:44:92:
                    97:cf:ab:d0:7f:91:f3:0b:07:62:04:e0:55:aa:77:
                    c7:13:37:4f:c1:5c:c3:20:2a:4b:43:ff:7b:e6:8d:
                    37:43:9b:85:f8:7c:d9:32:e6:c3:8e:20:15:bb:f5:
                    2a:e1:0b:79:99:c6:0f:99:39:52:77:05:f4:c9:78:
                    1c:73:ab:c0:81:54:44:b3:c7:a4:9c:55:07:35:b7:
                    c3:37:c0:e7:4a:1d:51:8d:89:28:b8:51:98:72:82:
                    cc:37:8a:96:86:c2:d2:db:04:ab:00:67:d4:50:1d:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:49:33:09:7A:45:FF:71:18:B8:EE:90:EE:91:0E:57:3E:EC:56:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de1f98bc-ae50-4803-b2e2-2d125089d719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:ba:35:48:aa:98:a5:06:39:f6:f4:36:2f:d7:83:8b:b9:
         e0:98:d4:06:d0:ef:eb:3e:91:4a:25:38:d5:7e:44:a3:00:c6:
         aa:d6:3f:f3:8f:f7:f8:cb:3b:30:8c:e0:99:e6:6f:56:0e:0d:
         e4:5a:29:9a:14:67:c1:0d:84:53:6e:c5:30:2e:bb:51:fc:7d:
         cb:10:46:e9:cc:f2:18:0d:9d:36:d6:7a:96:70:12:ec:01:d9:
         18:a3:a0:37:4a:cc:32:3d:cc:55:64:24:cf:c0:3e:07:0f:d8:
         82:27:15:3b:43:44:6e:08:cb:55:8e:53:61:c7:9d:1f:8e:3f:
         9c:e2:0a:83:ed:d4:e7:ac:88:b4:1e:a4:93:cd:e2:64:22:0b:
         35:33:ef:df:62:64:cc:90:14:24:7d:93:7f:6b:72:53:09:44:
         09:ba:99:4d:b7:df:bf:e0:b1:c7:e5:c0:44:29:ca:48:ab:ff:
         0a:63:62:b2:bd:f8:c3:b1:b3:34:53:fb:85:63:a2:f4:1d:41:
         ec:ad:38:23:93:a5:84:a7:4c:e2:22:a8:02:f5:b9:5a:b2:10:
         4a:cb:c6:17:b0:3a:79:18:ac:7c:ce:73:fe:a1:80:c5:84:86:
         06:78:f9:fd:25:68:4d:21:dd:f9:4c:ce:54:da:eb:a7:84:47:
         48:b9:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----