Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18b69f7f-4751-4010-80f2-09f4e9615993.roa
File:                     18b69f7f-4751-4010-80f2-09f4e9615993.roa (raw, json)
Hash identifier:          brewhY3RJl0NH8hrhLTeUOFYX6T1jRYbK3HFFjQuZCc=
Subject key identifier:   55:55:74:59:55:17:01:2B:74:98:D2:42:CE:85:A0:BB:B5:6E:55:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       75EE9D13C686BC8BB03B201641CBC26D309A6FE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18b69f7f-4751-4010-80f2-09f4e9615993.roa
Signing time:             Sun 16 Nov 2025 00:20:44 +0000
ROA not before:           Sun 16 Nov 2025 00:20:44 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ee:9d:13:c6:86:bc:8b:b0:3b:20:16:41:cb:c2:6d:30:9a:6f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:20:44 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=2c92868ce61ced78539dc904bc04e9b859a0e56763510e2f98a314506eaf9f67, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:d8:3a:17:71:55:6e:d6:20:18:24:25:58:
                    6b:db:97:31:98:6c:d8:83:ab:c5:c4:35:5e:6b:55:
                    94:8b:35:ea:4d:0c:93:eb:4c:44:89:63:73:19:b8:
                    9c:ed:cd:a5:86:84:b2:3a:24:b0:78:4d:50:ea:ef:
                    a2:4c:7b:f1:75:f3:d8:a4:86:d8:de:d6:6d:7e:e8:
                    a3:b3:c2:63:86:ca:5e:a0:6a:6a:75:00:fb:42:40:
                    9e:56:01:b6:7c:50:65:24:0e:19:dc:35:a4:7c:12:
                    e8:3e:c3:8f:78:9e:3a:26:b3:e0:a1:55:97:fd:d3:
                    b1:a7:c9:cb:32:74:8f:d5:fc:76:61:24:7d:bf:6c:
                    7a:13:70:88:73:f6:71:15:53:f3:8f:04:bf:2f:60:
                    78:52:55:c0:a0:46:6a:72:d6:b4:bb:d3:c3:c6:39:
                    ab:4a:55:4b:b8:44:9d:25:73:83:2c:a7:83:2d:f3:
                    42:49:e8:86:b6:bd:a5:90:f5:d7:a1:6d:d6:7b:a2:
                    d1:cb:a0:42:97:e8:2e:63:f7:ed:7e:26:ab:42:77:
                    63:a3:3a:a7:b3:ed:e2:23:f6:2a:75:cf:cf:ca:b0:
                    71:f6:8a:08:47:ea:b2:06:e7:56:81:ab:ac:7d:30:
                    10:75:1a:08:ad:bf:68:c4:73:f1:0b:57:10:65:2b:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:74:59:55:17:01:2B:74:98:D2:42:CE:85:A0:BB:B5:6E:55:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18b69f7f-4751-4010-80f2-09f4e9615993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:59:35:24:a0:ea:a7:70:d4:52:c5:51:77:53:f2:cb:40:
         71:c6:ce:ea:2b:dd:8e:ef:ff:c8:b1:49:78:f5:f2:21:cb:f0:
         41:ed:8b:b2:f9:a5:5a:fa:95:d8:5d:69:35:86:87:21:d1:c6:
         0b:d2:65:7d:22:68:05:3d:6a:e3:95:65:aa:09:94:bc:13:93:
         8e:9f:9a:91:61:14:7a:dc:7e:0c:59:8e:d6:2c:04:78:11:f5:
         0c:61:15:9e:cd:79:01:f8:2c:3c:33:f9:87:4d:b8:39:10:e2:
         6f:1a:f5:63:95:c4:c9:d4:c0:6f:1a:55:f6:66:08:0f:4a:16:
         60:51:99:71:9c:da:58:3b:3a:c5:64:18:68:dc:25:28:90:97:
         91:08:00:0e:24:ab:a8:76:b1:7d:03:a9:b9:3f:9b:1b:c7:df:
         8e:fd:da:d4:37:b7:3e:41:62:63:11:82:82:70:f7:7f:fa:1a:
         ab:37:54:2a:43:66:9a:d1:78:12:e8:6e:26:c4:b7:37:6c:88:
         8e:8a:98:c4:84:38:69:22:fb:7e:b6:2d:3b:bc:ba:83:6a:12:
         3b:e2:c4:f5:2c:a5:cb:93:a5:ec:8f:27:fa:65:bb:98:f7:f6:
         b9:32:30:65:64:9f:a2:65:51:7a:55:55:a4:fb:b7:63:d2:d7:
         ee:a2:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----