Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
File:                     fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa (raw, json)
Hash identifier:          Fk5siwfD2/GOxb7pfK5UiQmxTxOyDHBwyDsQSx94gqo=
Subject key identifier:   90:7C:4C:7C:B7:1C:FA:74:AB:5D:38:39:CE:1A:F6:E7:60:A6:F7:30
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7ED5301C8CB1676D43F245205F8226E180511905
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa
Signing time:             Sat 11 Oct 2025 00:21:14 +0000
ROA not before:           Sat 11 Oct 2025 00:21:14 +0000
ROA not after:            Sat 15 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        115.177.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:30:1c:8c:b1:67:6d:43:f2:45:20:5f:82:26:e1:80:51:19:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 00:21:14 2025 GMT
            Not After : Nov 15 23:59:59 2025 GMT
        Subject: serialNumber=ef788870b187918edf6f2edfdd990e8765f6800d100e1f191305dbaf674abd6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:ad:43:28:ce:a1:fd:ea:e7:a8:ad:b7:38:
                    a4:0d:c8:c2:c6:89:42:f6:4e:aa:fc:8d:e7:9e:59:
                    44:d1:7c:51:f7:c7:1a:a0:68:7f:d5:09:ba:4e:b2:
                    69:c8:14:82:b3:75:cc:c4:7b:ae:91:19:ec:a8:1f:
                    f0:c4:b1:4b:33:91:63:37:87:83:2b:0e:37:fb:9f:
                    2f:86:5d:b8:9f:43:65:3e:8b:6f:e0:61:10:72:f2:
                    87:0b:71:b5:fe:54:11:b5:1d:81:d9:4b:28:1e:61:
                    bf:7d:bd:43:a2:66:0c:21:b9:1f:a3:ec:f9:98:21:
                    65:64:26:49:b9:47:a9:52:b4:17:e9:d9:84:18:5a:
                    76:65:0d:cd:c6:cb:5c:33:42:57:e0:aa:da:98:c6:
                    c6:e3:ed:b7:94:9d:8f:c0:fa:8a:34:93:0f:31:24:
                    08:2e:b0:c1:de:c7:b1:a9:31:96:53:30:5d:29:a0:
                    f1:43:dc:b1:ec:30:09:58:59:ed:f4:6c:43:36:62:
                    3b:c4:45:d8:1f:f4:ca:af:fd:17:2c:78:5f:28:58:
                    61:6f:3a:4a:0a:6d:a3:61:92:4d:f3:9a:33:02:df:
                    1b:37:c2:53:39:4e:7a:27:f8:b0:91:34:77:f0:59:
                    f7:d3:90:66:14:bc:b9:3e:f4:3e:00:02:19:51:d8:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:4C:7C:B7:1C:FA:74:AB:5D:38:39:CE:1A:F6:E7:60:A6:F7:30
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf3ad48-0d1f-4ba4-87d3-c4086df92e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:08:6e:77:65:2e:b0:bb:83:9a:4c:50:2d:6d:ce:5c:9f:47:
         69:16:0f:77:e3:3f:0f:62:98:2d:f7:41:aa:5c:c2:be:cc:54:
         31:21:ab:a3:c1:72:6d:67:01:bf:69:a2:19:84:c5:b5:bb:4e:
         03:d0:75:81:0e:01:07:cd:39:ec:a0:ba:03:fc:f0:06:fb:66:
         cb:94:d3:69:d2:0d:4b:61:69:f0:a6:fb:99:cb:c4:93:14:fe:
         b3:d4:b4:80:ee:76:3c:41:0f:b0:f4:59:ff:9b:36:14:17:e5:
         6e:5e:4c:17:dc:be:2b:d8:ad:df:27:3e:a2:ec:42:e0:2a:24:
         9e:2a:fe:a6:3e:53:2f:05:43:5c:f8:2a:c3:fe:95:db:06:24:
         d6:eb:15:dd:f0:e6:4c:5b:0b:17:b4:e1:b0:d8:d7:45:93:0b:
         d2:70:e0:9f:03:f2:d7:2a:de:ab:9a:44:b0:1a:26:98:a2:8d:
         56:87:b9:af:b7:18:39:4d:b0:77:2a:7e:f2:8e:c8:35:7b:a7:
         74:2e:3e:27:13:ab:ff:38:94:67:a9:30:cd:95:c4:4d:c7:2c:
         56:3b:03:ef:97:81:62:04:5e:66:48:43:8b:ee:0d:0b:74:ee:
         dd:fe:9f:d2:35:20:09:11:41:40:e2:dd:30:2a:c7:7c:f4:0f:
         cb:ff:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----