Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa
File:                     ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa (raw, json)
Hash identifier:          cpQCNBxqmpb9ZtWW+ZOMSLFEUz6864nS5yjlnZ8bd6U=
Subject key identifier:   F8:8A:8E:8A:6D:E3:17:CA:8E:DC:57:0A:BD:A6:D2:DA:8A:9B:A1:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7245963416273C72CDA16164F5CC676CDD55F5D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa
Signing time:             Sun 19 Oct 2025 02:10:10 +0000
ROA not before:           Sun 19 Oct 2025 02:10:10 +0000
ROA not after:            Sun 23 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.224.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:96:34:16:27:3c:72:cd:a1:61:64:f5:cc:67:6c:dd:55:f5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 02:10:10 2025 GMT
            Not After : Nov 23 23:59:59 2025 GMT
        Subject: serialNumber=3884210109fe4f6a3a0a66939343e601f9990df1278d65e20516ca3c0b95855d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:b5:cc:b9:50:37:a3:85:92:a9:55:3a:a8:
                    55:90:f3:18:77:99:34:d9:af:7a:5e:34:9a:5e:d5:
                    8b:11:69:df:32:6c:a4:ac:d0:cf:25:e1:16:9f:21:
                    f8:9f:70:25:be:1f:58:1e:7c:77:8d:5e:48:e7:21:
                    77:32:80:db:0a:43:15:54:77:0e:15:bd:4a:42:bd:
                    79:b9:81:4b:0d:4c:86:21:26:ef:0f:f4:ee:8c:8b:
                    1a:1c:e9:c9:1f:11:a3:f7:7c:71:a8:fd:5b:80:c4:
                    43:0f:66:ff:cf:46:8c:8f:f8:ba:3b:94:21:98:97:
                    a6:49:d6:3c:82:1d:99:e4:34:c7:b0:c0:58:75:9e:
                    64:2f:7c:d3:9b:65:2c:51:29:0d:fa:45:8e:80:42:
                    fd:1b:8e:48:68:71:2d:aa:4c:a4:e0:60:c2:2d:2d:
                    56:26:85:fd:36:ae:b3:9e:50:c0:47:c6:69:5f:d5:
                    3c:59:86:b8:a5:74:da:0d:db:8a:67:e9:e7:00:ad:
                    85:65:71:b7:4f:5c:fb:78:99:d3:d3:72:fa:c7:fd:
                    f5:b9:f0:1b:c2:db:26:05:18:ef:b6:b1:dc:51:54:
                    47:b9:6c:0a:45:fd:81:7a:de:56:0f:1b:4a:0e:2f:
                    87:56:66:f7:59:f9:81:87:bf:f7:94:05:5c:50:a1:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:8E:8A:6D:E3:17:CA:8E:DC:57:0A:BD:A6:D2:DA:8A:9B:A1:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ead37bf2-7aaf-49af-a2fa-0d2fe92a200f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:63:df:83:03:f0:ac:62:76:62:f7:81:43:de:38:2d:5f:64:
         55:a2:80:60:37:94:91:57:b0:7d:86:87:40:90:90:78:aa:73:
         4e:53:d2:08:27:cc:81:f7:5a:28:fb:c1:d0:f3:9c:a8:71:96:
         04:18:db:0a:a9:79:95:c6:2c:23:e8:47:c0:f9:b2:19:00:6e:
         8f:c1:95:ff:5f:3a:0f:2a:e2:a2:e6:0f:c9:58:85:ec:a9:3d:
         01:fb:6b:b1:97:e6:86:e3:e2:cb:08:b2:fe:63:fe:03:42:62:
         5f:c8:e1:bc:78:32:19:5c:aa:0b:75:eb:69:78:d7:43:3a:9d:
         38:ce:18:d5:30:47:15:a0:c3:3f:d9:cd:c0:7e:90:cb:dc:57:
         2c:d7:61:a9:bd:a1:4e:a5:0e:76:ae:36:fc:96:63:fd:82:cc:
         ca:a5:e5:6a:15:70:ab:5e:df:3f:a7:17:4e:7e:c9:e6:bc:79:
         7d:a2:1f:96:42:64:df:d7:c3:30:8d:db:43:de:68:62:44:53:
         43:51:d8:e0:2a:6a:25:ab:58:46:ff:9d:80:8b:41:3d:c1:64:
         e9:34:f1:f6:04:63:cb:c6:cb:e7:0e:ef:e1:2a:06:6d:f1:8a:
         27:a3:51:89:10:9d:a9:4f:41:c2:c9:f0:e2:28:96:04:9b:f4:
         0e:8e:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----