Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bc09a37-792a-4229-8e6d-d65c78aef45e.roa
File:                     2bc09a37-792a-4229-8e6d-d65c78aef45e.roa (raw, json)
Hash identifier:          FmeawNqf1OmK4hB/MQ5BIZ1Vneq7imNiNPk/WOF6W9k=
Subject key identifier:   76:FC:90:8E:12:C4:0B:AB:EA:7D:DB:12:77:79:43:D9:07:4D:49:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E778EB188128FC7292E76A6E3AC171BB17F5CA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bc09a37-792a-4229-8e6d-d65c78aef45e.roa
Signing time:             Thu 13 Nov 2025 00:41:01 +0000
ROA not before:           Thu 13 Nov 2025 00:41:01 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.3.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:8e:b1:88:12:8f:c7:29:2e:76:a6:e3:ac:17:1b:b1:7f:5c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:41:01 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=7a9a4979dfb2c81c36328a2bbf3d47e3de21558a80b01ddadf48dcf71d9ed40b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:91:7f:b7:03:42:a3:23:15:ce:7d:91:e3:
                    1a:2f:3f:08:a8:3e:d4:19:aa:fc:09:8a:84:b0:90:
                    da:f5:f2:dd:6f:6c:3b:e4:57:ac:f2:a4:8b:7a:c0:
                    f2:ef:08:08:16:70:c5:55:f8:4b:d6:ed:9e:19:89:
                    6a:f0:36:4b:1e:a2:1c:83:2f:2a:bd:09:c5:a9:67:
                    e0:22:a9:fb:45:21:1d:40:3c:04:68:cd:e4:21:70:
                    ed:4d:25:d3:7c:6d:48:ea:95:56:80:6a:a6:17:de:
                    bb:cb:67:b7:f3:5f:0d:50:c7:7f:23:2d:3b:df:6c:
                    d9:ee:9a:0d:41:99:8e:3b:b2:98:81:7a:11:af:c4:
                    d5:86:9a:08:14:cd:cc:42:94:ce:a3:27:15:6c:2f:
                    c3:fd:c9:40:2a:cd:76:81:d7:94:b4:56:9d:15:3b:
                    ba:26:8b:42:e4:67:f3:e5:a0:7a:69:29:9b:f7:9f:
                    d4:87:d2:56:01:e6:2b:3d:e4:4d:8e:1f:97:00:0c:
                    20:4c:6e:b2:be:2b:a7:da:45:2c:8e:f3:7f:1e:ed:
                    12:01:57:74:08:20:12:ac:ce:77:d0:00:99:a0:40:
                    aa:c5:56:f4:3e:3c:7d:a6:6e:55:89:ac:d9:29:39:
                    a0:84:79:55:23:7b:a9:be:47:47:a7:ef:e3:d2:69:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:90:8E:12:C4:0B:AB:EA:7D:DB:12:77:79:43:D9:07:4D:49:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bc09a37-792a-4229-8e6d-d65c78aef45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:37:27:33:2b:d5:54:bf:f4:0e:5d:4b:ae:a0:5e:fb:8e:14:
         75:40:3a:73:ea:55:3b:05:78:2e:bd:0a:66:21:23:18:38:aa:
         51:df:13:7d:ff:35:c6:d3:2a:ed:8e:fe:bd:ac:87:85:7d:27:
         5c:cf:63:7e:8d:9f:0d:cd:ed:bb:1e:45:30:89:d2:63:05:89:
         02:48:71:db:d7:6b:13:34:e0:74:74:7c:82:f9:e9:61:b5:7c:
         4f:85:17:b8:29:5f:c6:e6:fd:12:0d:71:f1:75:0b:a6:43:32:
         5e:4c:0f:30:da:c9:a5:27:e7:d0:2d:2f:c4:de:06:91:d2:e4:
         b4:24:92:c6:59:a4:45:96:09:81:2e:bd:c3:a7:56:39:cf:1a:
         16:bf:ec:91:34:c8:51:b5:c5:79:1f:2b:11:31:57:79:d7:d0:
         4b:e6:98:ec:91:14:24:dc:39:7b:d9:29:77:ad:7f:ed:aa:23:
         e5:2d:a3:22:51:e9:72:05:fc:1c:c8:09:13:93:7e:4e:ab:3b:
         8c:5e:ac:e8:6e:f5:e8:a3:2c:9f:9a:38:17:f8:ce:ec:a6:88:
         48:ab:fc:f1:ed:9b:2c:7f:d8:e7:5d:8c:16:59:58:a7:61:1a:
         b0:5a:19:49:80:b3:3c:ec:2c:af:28:ef:ca:39:c9:5d:35:b8:
         4e:d3:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----