Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f9218d-a97e-4a82-9cc0-be9236a27d63.roa
File:                     54f9218d-a97e-4a82-9cc0-be9236a27d63.roa (raw, json)
Hash identifier:          H1dvuXGnLZ03EAlMt+b9B2N/jorFz3UxqG+WWSXpwWQ=
Subject key identifier:   03:6D:37:DC:3B:A5:56:73:66:AD:E5:FD:7A:E3:63:A7:82:71:B9:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       262C3C6356E63A1BF7E53E8ED897D023D3379674
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f9218d-a97e-4a82-9cc0-be9236a27d63.roa
Signing time:             Tue 11 Nov 2025 01:01:09 +0000
ROA not before:           Tue 11 Nov 2025 01:01:09 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:3c:63:56:e6:3a:1b:f7:e5:3e:8e:d8:97:d0:23:d3:37:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:01:09 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=ab015457cbcbe6f4c88c7984267463a235186427fce62620368d766854f92097, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:26:3b:ea:d9:db:7e:cb:57:b1:e8:c5:e1:
                    59:0c:55:b3:af:f2:61:6d:c2:ef:b8:7b:c4:d1:ea:
                    6d:4c:f8:0f:ab:9b:e0:ac:05:7b:d5:77:e9:c9:53:
                    65:21:f4:6e:6f:dd:2f:dd:80:e1:86:5a:d4:a6:72:
                    8f:64:be:27:2c:35:a0:ff:a0:c9:3e:04:db:30:2f:
                    6f:53:7a:bb:7a:6b:44:51:b0:89:45:b2:7c:12:d9:
                    b9:43:fc:64:db:8d:6f:dc:ad:b8:c6:fb:ab:57:12:
                    2e:cb:6c:b7:ec:01:ca:37:ae:17:f4:aa:8c:c9:34:
                    4d:31:4d:bb:4b:03:93:aa:3d:db:18:25:30:4f:a5:
                    5b:f7:a7:63:88:ea:c8:b5:a3:ce:88:06:a9:5a:b1:
                    c2:3f:f7:d2:d6:b3:bc:0b:e5:26:f8:b3:e3:dc:f9:
                    95:a2:a2:8e:10:2d:40:d7:93:51:74:67:82:3e:6c:
                    2f:d4:4a:c8:bf:98:b1:5e:d8:e9:c7:d5:fa:8a:6a:
                    d0:55:dc:b3:48:75:63:f8:a9:80:be:6f:8c:ec:b3:
                    a3:b1:c3:63:ee:c1:81:56:ba:b6:12:f8:ae:47:ba:
                    ef:fe:0c:8e:26:77:d8:fa:b6:fe:f3:a3:75:a9:e4:
                    1f:52:b4:26:8c:79:84:46:f0:74:27:9c:80:88:5c:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:37:DC:3B:A5:56:73:66:AD:E5:FD:7A:E3:63:A7:82:71:B9:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/54f9218d-a97e-4a82-9cc0-be9236a27d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:7c:e4:55:50:31:36:1f:9c:0f:8c:64:ed:4c:fe:ef:20:
         0f:20:91:2c:18:87:8e:fb:7a:5d:54:9c:34:db:b2:fd:e2:21:
         4d:3d:28:3a:d3:12:54:85:92:fa:ca:00:18:06:56:e6:c7:e2:
         b9:ba:de:6f:ac:e8:d1:14:89:5c:9b:43:27:04:aa:b0:41:bc:
         07:40:a0:da:27:94:41:2b:65:58:fe:e3:66:af:1f:72:e2:52:
         b4:68:a2:52:04:ad:00:b6:ce:d1:70:76:9a:6b:3c:4e:74:78:
         48:1a:71:9b:5f:1c:74:0b:5c:f9:e3:8e:a9:de:27:df:70:e3:
         fa:99:dc:c2:bb:65:9e:9b:d4:76:f4:9f:17:77:c2:84:1b:63:
         75:f2:22:cd:ce:c4:86:4b:3e:06:7b:e8:ad:63:6f:7e:f7:27:
         fb:63:84:e6:68:0a:80:12:2c:cb:60:1b:f4:6a:7c:71:a5:a2:
         6c:31:b1:79:00:e9:41:fb:3b:48:f6:66:73:5a:f7:53:a9:c9:
         cd:30:e4:2a:f8:2f:a5:8e:c1:33:b1:55:a0:f5:a0:3d:65:77:
         03:16:5a:1a:59:dc:f6:37:85:5f:12:5a:63:b4:75:04:fb:2e:
         44:18:93:16:92:88:74:f5:a5:be:f7:fe:fb:5e:78:0a:ff:4a:
         84:9c:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----