Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6487936f-9e10-49ad-b820-3fc9ca317b0a.roa
File:                     6487936f-9e10-49ad-b820-3fc9ca317b0a.roa (raw, json)
Hash identifier:          QrSu6hw7wnF9tFr2mbNbYhe1s8yFOUNDikwUnLof21w=
Subject key identifier:   F4:68:37:41:0D:CA:4E:87:F7:0D:85:3B:7D:DB:DC:0B:AD:26:82:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ECDB5BF31510D098E780FA543F88C3FE5E24F39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6487936f-9e10-49ad-b820-3fc9ca317b0a.roa
Signing time:             Tue 11 Nov 2025 00:20:10 +0000
ROA not before:           Tue 11 Nov 2025 00:20:10 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.239.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:b5:bf:31:51:0d:09:8e:78:0f:a5:43:f8:8c:3f:e5:e2:4f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:20:10 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=0025f41f1f4add6db4c64ef312213d3465d9e3b3e01fe1183b8cf763b85ef842, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:4d:be:90:22:1d:1a:52:d0:04:5c:11:41:
                    93:28:27:34:93:e8:4b:6b:5f:27:04:64:b9:15:3c:
                    90:28:00:e3:de:e5:77:0e:ff:84:40:af:ae:36:63:
                    7b:72:a7:e7:9c:c7:5d:d1:b2:c9:88:4d:b1:1a:a6:
                    8b:90:9b:cd:ed:b4:31:96:e6:ad:0a:f4:93:3d:74:
                    a9:8b:31:f5:b5:6b:5c:14:0a:88:77:78:5f:c5:e5:
                    c5:03:c4:6c:62:75:61:1d:37:7a:04:42:3f:d6:97:
                    89:c1:e4:b6:7f:e6:2e:13:37:45:76:60:e8:a3:d6:
                    3f:66:55:f6:1f:27:c3:8a:53:d4:e2:28:45:ae:6f:
                    1f:8c:ab:61:16:07:de:84:69:14:18:df:72:ef:69:
                    1d:11:9c:d9:db:40:5a:e6:b6:4c:56:a9:97:9d:71:
                    b0:72:d8:55:c8:e5:e8:c5:5f:50:5b:cb:de:a7:78:
                    ca:e6:ea:c4:6a:27:aa:c3:e1:c1:ae:c1:a4:ec:2a:
                    4f:f9:c2:8f:1c:14:57:27:10:59:4d:e2:7c:f0:66:
                    74:46:e1:28:1b:e1:29:1b:1f:ac:29:58:83:73:a3:
                    63:53:1c:86:b4:09:37:b6:ce:f1:6b:70:a4:33:55:
                    73:73:72:37:0e:f3:c8:56:32:af:4c:34:b4:57:a4:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:68:37:41:0D:CA:4E:87:F7:0D:85:3B:7D:DB:DC:0B:AD:26:82:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6487936f-9e10-49ad-b820-3fc9ca317b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.239.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:29:09:8e:46:2e:91:e8:90:4d:87:d2:f8:d3:5c:81:cd:ab:
         54:1b:3b:d6:29:d1:43:bd:b7:00:e7:4e:d9:ce:f5:e2:db:94:
         d7:70:af:78:2b:93:bb:6b:42:a1:18:10:3a:5b:6f:1f:77:89:
         ab:e6:da:37:16:dc:6c:dd:69:3b:54:07:71:ee:ba:e0:2f:6f:
         ca:b7:90:be:46:91:7d:a3:a7:9c:c2:a7:60:0e:7b:87:f3:54:
         41:1e:80:f8:1f:22:ed:94:a6:df:a1:53:9e:f3:bf:ef:3a:55:
         01:22:b3:fc:ac:e1:68:9d:79:96:e4:6d:67:63:25:29:f5:0c:
         da:2a:e4:91:fd:94:30:29:91:b9:29:2c:08:04:5c:cd:de:e6:
         96:a3:1e:6f:00:57:9f:9f:0b:11:8f:51:31:66:be:0c:5e:a2:
         e9:c4:ce:10:bc:50:4a:fd:a6:db:ae:3b:7a:20:3b:f1:b4:bb:
         f2:3f:ad:7e:db:61:4b:53:ac:52:20:7d:84:0f:fe:a9:09:1a:
         d3:d7:09:05:37:25:a2:7a:e9:09:3e:85:30:a7:3f:d8:01:96:
         d6:4c:29:ad:09:04:15:f2:20:61:f8:e7:c0:2d:2d:e4:65:2e:
         0f:4b:b2:aa:52:ed:d1:a4:ab:4d:30:16:1e:ca:46:f1:ea:1a:
         29:30:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----