Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8bdb21-13ef-4fcb-bd54-6e345c8e3232.roa
File:                     ea8bdb21-13ef-4fcb-bd54-6e345c8e3232.roa (raw, json)
Hash identifier:          whPrUpExgodd6ImyJHUmdkZHUwir4uBDHxVJieHz1gQ=
Subject key identifier:   FB:A4:9E:C8:43:CD:5A:D1:22:14:64:DF:A6:82:8C:F3:0A:69:FA:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       114B7E0D1B79A09B45216C254D28FF312C0E4EC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8bdb21-13ef-4fcb-bd54-6e345c8e3232.roa
Signing time:             Sun 19 Oct 2025 01:21:37 +0000
ROA not before:           Sun 19 Oct 2025 01:21:37 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.224.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4b:7e:0d:1b:79:a0:9b:45:21:6c:25:4d:28:ff:31:2c:0e:4e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 01:21:37 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=991a0f420ff9b97a87c479e811cdf867176312ca7c4e1cb6bc4b54c0306a4ac7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:2a:c4:6a:f8:94:b6:3e:17:a9:90:58:2d:
                    86:ce:8c:13:09:2c:bc:46:91:50:8c:98:9e:23:19:
                    40:33:98:27:3a:df:4c:1d:6d:89:21:70:01:4d:4a:
                    96:76:b9:a3:e5:ef:8c:75:a4:97:4b:c0:06:a6:96:
                    e2:6b:e8:ba:87:5a:df:eb:d7:f6:30:27:e7:f3:f6:
                    09:28:a3:61:96:70:00:ed:57:7f:38:20:ec:5e:19:
                    7f:21:03:8d:65:05:48:79:4e:e0:84:ff:66:9e:c9:
                    8a:5c:a1:25:e5:38:65:d4:4d:00:e3:89:77:8e:8a:
                    31:ba:ff:e1:49:73:a0:e3:af:95:6c:4e:77:82:30:
                    41:44:c2:f3:b4:34:17:83:f7:5f:6e:81:cd:c5:da:
                    93:f0:e4:e1:75:81:30:bd:c5:4a:95:4c:4a:69:a7:
                    2b:7c:bd:a6:b8:0a:e6:37:5c:c0:cd:8b:f4:55:7f:
                    60:b1:84:f5:c4:29:a7:6e:8e:b9:ed:d9:98:a2:dc:
                    5b:a9:dd:3b:e3:2e:fe:71:46:8f:ee:e0:ef:c3:e7:
                    e5:87:92:f1:0b:11:5a:08:2c:ef:1b:ae:fc:39:c4:
                    bf:fc:18:99:48:fb:ec:44:00:04:41:4b:e9:e5:52:
                    10:68:ec:00:64:3e:15:8b:71:b3:69:3b:ba:32:67:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:9E:C8:43:CD:5A:D1:22:14:64:DF:A6:82:8C:F3:0A:69:FA:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8bdb21-13ef-4fcb-bd54-6e345c8e3232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.224.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:7d:83:ee:7d:6c:3a:33:c1:6d:fd:d3:20:56:37:7a:ce:
         2a:fe:30:ba:49:ce:a5:66:62:13:2d:a0:7e:f7:3f:8b:a4:5b:
         65:6c:59:1a:8d:05:38:b1:62:4e:09:e6:4e:19:39:54:cb:75:
         8e:d4:e7:51:93:55:05:c4:da:8a:42:99:22:c3:9c:93:71:32:
         16:61:bd:0c:22:c4:fd:ca:29:f3:2f:28:51:48:b2:3c:cf:ef:
         51:22:94:07:eb:0f:60:18:ef:15:2f:3a:7f:ef:04:15:78:f2:
         19:35:02:3f:c7:c2:1f:f0:3f:39:3e:79:cb:a1:29:06:1d:8c:
         01:b6:a2:3c:3a:1a:3a:99:a6:7e:71:14:b7:84:2a:64:5d:71:
         2a:56:b5:76:0b:81:81:f0:ec:84:5f:a3:8d:88:22:d9:59:4d:
         c8:81:71:2d:ce:79:62:11:ee:1d:29:3d:44:52:4c:4d:4b:9d:
         8a:4b:81:40:39:51:a0:fe:93:84:3d:25:48:a7:42:a2:f7:8f:
         c2:fa:29:76:3a:36:2f:1c:7b:8d:8b:21:56:59:b1:6e:76:db:
         21:16:57:7b:b4:bb:8c:51:66:76:55:ce:07:13:88:70:c4:e3:
         bf:d9:97:61:da:fa:67:06:e4:bb:ad:3b:47:1c:26:01:2d:51:
         95:7b:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----