Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218ab7a7-94f3-4148-87df-19e45b3e1097.roa
File:                     218ab7a7-94f3-4148-87df-19e45b3e1097.roa (raw, json)
Hash identifier:          3CY5Jpmn4WUbzyLJ6hof7E91dyIaRXFf/LpqOtFv8wc=
Subject key identifier:   0B:04:85:95:0D:29:EB:13:62:F6:85:F0:26:D7:52:CE:C8:4F:ED:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79FDFBFC9440EC5CB564134CE9F30F8BE104308B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218ab7a7-94f3-4148-87df-19e45b3e1097.roa
Signing time:             Tue 23 Sep 2025 16:33:37 +0000
ROA not before:           Tue 23 Sep 2025 16:33:37 +0000
ROA not after:            Tue 28 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        40.194.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:fb:fc:94:40:ec:5c:b5:64:13:4c:e9:f3:0f:8b:e1:04:30:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 16:33:37 2025 GMT
            Not After : Oct 28 23:59:59 2025 GMT
        Subject: serialNumber=79ad3406002ba906457a657d56805bbba238c455a8af1b6f67dd8b8a7b33a2b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:c1:45:55:a2:d3:27:70:87:50:22:27:e9:
                    5a:9b:2d:d4:bc:d0:d4:8f:64:6f:ed:b1:20:20:89:
                    93:de:f3:6b:88:e0:53:71:3f:31:8f:d3:33:e7:eb:
                    15:b1:b0:ff:27:d5:5d:2e:14:91:63:03:f8:16:44:
                    93:d9:4f:e3:d3:60:73:c3:13:34:ba:c6:7f:ef:64:
                    9f:79:7c:83:c7:83:05:9d:9d:36:f5:7d:f5:2a:53:
                    46:97:01:55:bf:a3:61:ed:29:4a:15:d7:a1:d1:55:
                    34:30:0c:ba:3b:3c:c5:9c:17:40:6f:7b:40:e7:f2:
                    88:09:f4:c6:e8:3b:12:29:24:0c:a5:ca:6d:21:c2:
                    85:6a:37:c5:75:11:a2:b2:0e:37:81:db:06:71:1f:
                    45:47:90:b4:b4:15:73:3c:f7:fb:f0:4a:1e:07:61:
                    6b:6f:74:70:fe:e5:04:39:d0:9a:c6:be:20:77:86:
                    70:d2:cf:05:4b:f0:29:f5:27:a1:56:01:42:35:ca:
                    1b:e5:a4:0d:4c:6f:8b:50:91:8f:ea:96:ee:31:88:
                    09:bb:e3:36:52:c5:31:42:10:32:35:33:c5:69:b3:
                    ae:ec:1e:27:40:49:36:83:1c:0c:4d:be:b6:84:75:
                    bf:53:53:96:65:0a:32:b1:6f:a7:d7:7c:a6:88:d9:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:85:95:0D:29:EB:13:62:F6:85:F0:26:D7:52:CE:C8:4F:ED:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218ab7a7-94f3-4148-87df-19e45b3e1097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:64:93:1f:96:51:85:48:de:43:5f:78:ad:d4:e5:7c:4a:9a:
         76:32:03:ce:46:78:4c:43:f9:48:cc:22:b7:27:3d:73:08:a6:
         b7:3c:17:80:75:63:5c:ae:d5:06:05:2f:ab:42:99:63:bf:af:
         aa:52:1b:ff:63:c3:2a:83:a1:4b:e4:2b:03:5a:5e:32:46:7b:
         db:87:fb:78:21:cb:9e:24:bf:89:30:83:63:05:6d:07:8f:eb:
         b8:39:ec:43:5e:58:46:8f:34:f5:e8:04:8c:ea:6b:ee:59:c4:
         74:37:67:b2:e0:9f:1e:77:74:2f:83:61:d1:07:c6:bc:be:14:
         b6:3d:41:72:49:f0:9d:60:81:f3:ae:d6:3b:39:9b:c9:22:8a:
         eb:e7:33:75:0f:f1:8b:0f:f1:e7:cb:36:45:54:91:91:08:3e:
         bd:8e:dd:86:5a:3b:1b:b6:a7:c9:5d:cd:cb:6c:8d:ad:40:d2:
         73:98:6f:7a:cb:7c:56:ef:4a:85:5c:82:37:e5:86:23:90:b4:
         0e:63:63:a3:71:d3:a2:c7:8f:aa:8b:c8:af:02:32:27:86:4b:
         b5:f2:ff:ac:f6:ec:60:86:f2:be:34:c4:b1:d3:00:b3:18:3a:
         42:0b:be:fa:9d:e3:0f:5c:c4:3b:b7:c6:76:01:6c:88:eb:ee:
         cd:77:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----