Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa
File:                     f6194b27-8378-4959-8e87-076083a0e654.roa (raw, json)
Hash identifier:          Z64dDEYciGMNdHR8nKJbsfD93ttkrK9qDW2VjiCWGyk=
Subject key identifier:   06:A6:43:E6:42:D2:F3:68:8F:65:28:CC:B0:30:8F:76:C1:1C:88:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       330739603D0DA0C0600E7543C8EA830543479378
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa
Signing time:             Wed 08 Oct 2025 00:01:16 +0000
ROA not before:           Wed 08 Oct 2025 00:01:16 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.179.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:07:39:60:3d:0d:a0:c0:60:0e:75:43:c8:ea:83:05:43:47:93:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:01:16 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=a065dd5d08ce40b0ee8ed244448e3c96f61e186bcc251df73e9c08b91c442825, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:46:4f:de:96:65:28:f7:05:aa:10:2c:7a:
                    d2:59:fc:22:5c:6b:cb:16:3b:cd:42:2e:ba:36:4e:
                    ee:6f:b9:fa:55:be:66:fa:26:4f:6e:90:1f:6d:e1:
                    e7:a4:04:1d:74:e5:06:f3:e5:49:ee:a5:e2:5b:9c:
                    5d:25:16:89:32:13:d4:ef:60:3a:e5:d5:09:ec:ab:
                    47:a5:8e:52:5f:45:3b:68:95:80:df:4e:48:40:22:
                    54:ee:39:56:f2:fa:90:a8:2c:8b:d3:63:7a:1b:30:
                    18:66:fa:fe:fc:a3:d4:b8:a7:7e:7c:98:8a:e5:fe:
                    cb:94:d3:d8:48:57:03:71:df:05:2d:5c:5d:b7:aa:
                    ee:47:68:c0:72:c2:5b:11:4b:04:1d:c9:d2:46:75:
                    7c:26:fc:e8:46:27:74:53:3a:db:6d:d3:ae:c3:64:
                    c4:c0:2c:ef:ab:c8:87:c9:1e:08:4d:93:53:77:04:
                    47:62:8b:35:d7:ff:ce:62:4f:c4:b0:f5:4d:c2:97:
                    21:f1:49:cd:b5:9d:08:02:2e:6f:e9:82:83:c1:d8:
                    ed:52:ec:b7:11:87:a9:32:d8:62:fb:bd:07:bc:39:
                    d4:49:40:55:40:a1:86:a4:0e:f4:13:e5:d4:0b:51:
                    78:2e:ff:2b:a9:e0:cd:0a:27:e9:56:43:05:40:7e:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:43:E6:42:D2:F3:68:8F:65:28:CC:B0:30:8F:76:C1:1C:88:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.179.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:a0:7f:b3:18:72:80:1e:6f:59:69:bf:7d:1c:b8:0b:f9:17:
         f9:f0:81:ab:27:f9:6e:61:07:0d:2b:2d:ad:fe:32:79:82:c9:
         2f:4b:da:b2:60:e1:10:fd:67:72:dd:fa:0c:fd:23:fc:38:6b:
         f2:03:c3:3a:a8:39:ff:b4:a6:b9:18:e0:af:54:cd:50:f7:ea:
         b1:db:75:3d:9a:bf:a4:a1:67:c7:64:9c:95:f9:d7:e2:17:94:
         7b:73:fb:3b:9a:5c:d6:ca:de:f6:24:c3:84:15:41:cc:e0:ac:
         a2:9c:b8:14:93:20:3a:c0:14:75:82:c6:e8:9e:40:3c:52:49:
         46:4b:9a:33:bd:e1:84:03:de:d9:df:67:80:19:8e:8d:97:53:
         45:a3:ef:a8:e6:e4:64:96:7c:65:4f:5e:f1:4d:d2:4b:3e:a8:
         cf:16:9f:c0:eb:dd:67:02:70:dc:c0:15:29:d5:ea:a1:8c:2b:
         29:86:ed:82:bd:45:7e:e6:da:48:f3:61:f5:c2:77:0e:42:5e:
         c8:e3:a2:04:0c:0c:88:ed:81:c1:80:fe:6f:0a:e5:55:f7:12:
         96:ea:90:74:4b:a1:4f:99:45:7b:5a:72:7d:7f:29:3c:7d:57:
         78:e7:e4:45:e1:c2:29:a8:be:3d:9a:2c:72:86:ae:c4:02:09:
         63:f9:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----