Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa
File:                     0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa (raw, json)
Hash identifier:          J4ThAdd0QH5gq3ue+OOxyell0iYkwLNt8SULYB4tL+M=
Subject key identifier:   C1:F0:A4:7F:A9:80:4F:EE:3A:42:A5:EE:3E:2C:C2:51:F6:15:75:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40FA77D23F0B66244D6D4F98D9C7DE10C5D558A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa
Signing time:             Fri 31 Oct 2025 21:21:55 +0000
ROA not before:           Fri 31 Oct 2025 21:21:55 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:77:d2:3f:0b:66:24:4d:6d:4f:98:d9:c7:de:10:c5:d5:58:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:21:55 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1d1c1a4b02787d8ac1b1baabc4838799b3203cacbafdaa95c67d851a25466b6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:5d:53:b2:6e:5b:47:d6:52:45:74:bc:32:
                    df:88:e0:af:b1:30:c7:75:9e:5c:7c:36:7f:34:89:
                    4d:34:23:61:a7:6d:df:b7:ec:41:45:83:b8:f5:49:
                    2c:1a:fc:27:0d:a9:20:24:06:54:a0:c9:c3:c5:89:
                    cf:2b:65:c2:a0:85:7b:77:2f:34:55:1f:60:74:20:
                    84:8c:44:2b:2a:a1:1f:7c:d0:d0:c9:60:ed:2a:cf:
                    37:2d:aa:83:84:36:d8:04:4e:d4:08:07:71:3e:52:
                    68:b8:7e:09:29:93:28:e2:22:df:8d:ce:fc:f1:d1:
                    d9:36:0c:eb:80:d4:44:ea:47:69:ce:88:28:c6:8c:
                    4a:e2:db:6e:42:a8:96:c2:22:0f:01:ce:e7:12:93:
                    87:70:d5:58:27:7d:61:80:bc:fb:da:df:29:37:70:
                    19:c6:5e:d1:32:2a:4f:5d:12:df:4f:08:06:60:f5:
                    f0:2f:e9:3e:45:db:cf:14:24:97:52:5f:56:51:24:
                    9b:2f:92:e0:15:51:6b:84:17:69:f8:ed:6e:4d:0e:
                    5f:e4:d4:ce:30:cc:99:52:33:1e:70:81:dd:54:43:
                    84:18:6f:80:e9:2d:63:37:09:6a:40:0f:13:75:6e:
                    08:dc:2d:b8:47:4d:f1:47:d7:2e:53:ba:8a:90:b4:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F0:A4:7F:A9:80:4F:EE:3A:42:A5:EE:3E:2C:C2:51:F6:15:75:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae2690c-9ed5-494e-a25f-13a3abd7b6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:4b:35:79:61:8f:1e:1a:22:09:2d:1f:e0:60:3b:2a:d6:
         6b:a9:2d:53:86:92:88:ae:90:44:20:d6:07:2a:e2:b8:53:81:
         b5:21:0c:2a:97:32:bf:8a:69:e3:b5:f5:e7:56:53:0c:eb:20:
         e8:61:72:55:f8:ab:89:18:a1:85:3c:16:7e:09:57:7d:ff:58:
         a7:92:de:35:6b:49:3e:9e:c5:11:5d:e8:f3:93:b5:98:93:15:
         e8:2c:e2:1d:ee:e6:bc:41:95:b0:c6:37:a5:ea:94:8c:23:7f:
         f3:7f:2a:23:63:2b:19:86:e9:55:73:07:da:a0:f2:a6:95:48:
         69:63:82:54:47:41:11:4e:cd:22:f1:1e:02:e6:1d:2d:c7:70:
         38:1a:9b:91:d3:58:ec:1f:45:e4:9d:6b:ae:af:1d:e2:9e:0b:
         3b:7d:1b:68:24:92:52:4b:c7:0e:ae:d7:11:50:b2:0c:ff:e8:
         98:02:50:27:e6:d4:9f:2f:d4:8c:0c:81:6a:44:1c:fb:cf:3a:
         65:29:09:cc:32:04:c4:23:47:43:5e:7a:28:5f:86:02:28:37:
         bb:21:60:09:5c:d6:7b:cd:e5:71:1b:a1:d9:38:81:5d:06:b8:
         9b:d2:93:b1:9a:76:e8:5d:50:de:e8:e5:e2:3e:73:7d:fa:e3:
         28:03:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----