Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e580ec2e-f862-4a57-8b5a-c203866154d9.roa
File:                     e580ec2e-f862-4a57-8b5a-c203866154d9.roa (raw, json)
Hash identifier:          pCR1hXDI/nD4DPAMjm4IeXUMzU1CZLYpFsy5cY+oUu0=
Subject key identifier:   6A:44:AB:97:04:11:13:EF:95:C8:8C:0F:6B:FD:4D:EE:5F:80:C2:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       493922F1E278721B75E7BA9671A7AB5D007D7CCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e580ec2e-f862-4a57-8b5a-c203866154d9.roa
Signing time:             Tue 30 Sep 2025 00:37:53 +0000
ROA not before:           Tue 30 Sep 2025 00:37:53 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:22:f1:e2:78:72:1b:75:e7:ba:96:71:a7:ab:5d:00:7d:7c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 30 00:37:53 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=1e6dd96d87a1917bd3572d5f0f43c20facb2db64e62659b51e1d5b799119f93b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:b8:d7:3e:f2:6b:27:4b:12:41:47:fc:9b:
                    c6:c4:fc:e1:8d:8f:e8:05:27:26:52:fc:f8:c9:7c:
                    4e:78:80:07:a9:6e:a7:8b:2e:f3:b4:57:0d:cf:ad:
                    07:fc:f4:57:68:c4:2c:8a:e9:83:e2:dc:66:56:e6:
                    28:ff:25:ca:85:e7:8c:56:02:d9:c8:64:a8:be:40:
                    91:79:56:0e:f4:82:66:79:a2:c2:07:94:ea:d3:7d:
                    fe:6d:bd:99:04:47:dc:02:d3:e1:c0:9b:9e:5c:9a:
                    88:cc:84:5a:25:fe:ca:c2:93:74:03:86:8b:d1:40:
                    66:58:01:21:33:31:fd:ab:63:69:2f:58:a1:3b:d8:
                    6c:25:c4:34:34:3e:7f:a2:e3:33:37:cd:7d:3d:a6:
                    b3:89:af:59:41:20:94:5a:54:3a:af:84:d4:d1:99:
                    3c:0c:91:40:38:c3:bc:7c:9a:ba:bc:21:79:6f:7a:
                    b9:b9:3c:f2:26:bc:4d:ff:d1:ff:73:44:92:3a:68:
                    6c:d2:b3:61:a5:78:94:63:3b:77:b8:86:bc:63:86:
                    8a:d5:1d:cc:40:1f:a1:8c:19:57:2d:e1:94:7d:a5:
                    4a:4a:42:c0:33:c0:a0:e8:2f:c9:96:1b:74:fc:c7:
                    03:dc:73:33:6e:9b:a4:0e:23:db:02:b1:09:8c:a1:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:44:AB:97:04:11:13:EF:95:C8:8C:0F:6B:FD:4D:EE:5F:80:C2:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e580ec2e-f862-4a57-8b5a-c203866154d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:ca:50:df:8f:98:08:94:7c:19:e7:60:4b:fa:46:e3:2f:c4:
         23:80:84:ae:2e:95:a5:a6:0e:3d:66:2a:08:0b:2b:75:15:7f:
         28:86:0b:7a:4e:ce:e5:62:9d:a9:9e:0e:1c:96:01:3d:72:ee:
         99:49:fb:3a:d5:3c:ee:1b:52:1e:3f:fa:fa:dd:43:b4:3c:14:
         0b:da:27:a9:6d:49:14:27:d4:f1:fd:ed:11:4e:7b:e8:90:53:
         2d:6c:cf:2c:ad:86:66:7b:58:1e:70:b2:6a:3d:cd:d6:39:be:
         aa:62:3c:70:a3:90:d7:fc:30:aa:46:a9:6c:64:8d:4d:2a:a1:
         07:f6:a4:af:2f:6d:22:15:de:22:75:a6:ad:87:b9:af:12:93:
         5c:5b:da:b6:c9:64:b3:d3:65:85:a9:c0:3e:1a:01:63:d2:88:
         b0:6d:dc:91:41:8a:ca:19:80:f9:7f:d4:07:c8:f4:75:d0:af:
         99:15:17:a7:6c:d9:86:76:77:e8:62:cb:e4:e2:7a:a6:76:26:
         38:fc:f9:ca:3f:f1:eb:4e:1f:8f:a4:56:7e:cd:a6:d7:1b:5f:
         5d:5c:f9:c2:85:24:c6:fb:95:e2:71:1f:2f:1e:a0:31:5b:c0:
         53:f7:4c:d6:36:6b:d0:7a:d7:7c:eb:41:23:42:96:ea:0e:d8:
         33:7e:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----