Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e648563-7077-488e-a1d5-b03f10f986ce.roa
File:                     6e648563-7077-488e-a1d5-b03f10f986ce.roa (raw, json)
Hash identifier:          zUjgu2IWWcdWxWv92zOz91MeBXuslRJKz6zOwdVIt/0=
Subject key identifier:   65:0C:08:51:25:E3:37:01:4E:0C:2D:37:12:4D:0F:81:BD:A1:BF:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44391B020F7AEA71FB9C69219943A602AB2493AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e648563-7077-488e-a1d5-b03f10f986ce.roa
Signing time:             Wed 12 Nov 2025 01:40:10 +0000
ROA not before:           Wed 12 Nov 2025 01:40:10 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:39:1b:02:0f:7a:ea:71:fb:9c:69:21:99:43:a6:02:ab:24:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:40:10 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=ae4e7a31b4e7b2e21cd1514c71b0639ee7981c9768b21cffd1c4261322a24ffc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:02:46:49:4b:7e:fe:1c:44:e5:8d:82:d6:
                    36:a8:fe:79:81:da:1d:5f:60:3d:ce:93:02:b8:0a:
                    1f:1b:e8:0c:0b:99:26:3d:57:63:16:cb:39:75:c1:
                    84:40:19:71:fb:e9:f8:ea:81:3a:2a:e6:9b:80:3f:
                    a6:f6:e2:6e:45:2d:5f:95:69:a1:7c:ae:60:90:26:
                    39:8b:09:13:80:27:64:3d:8b:bb:8b:80:ee:3b:af:
                    78:80:e3:07:eb:e0:30:23:b6:50:24:a8:9e:cc:c9:
                    a0:b8:d6:11:ca:01:21:5e:39:c7:11:3a:18:b2:2d:
                    23:9f:d1:ff:05:52:28:0e:48:b6:85:87:88:24:1f:
                    50:6b:0e:05:92:2d:89:31:df:0b:b1:7d:6f:48:93:
                    af:ec:3e:59:ca:a2:e5:b4:ab:06:db:32:13:f7:dd:
                    ec:8d:8c:38:ce:d8:fa:be:14:01:1b:a1:84:74:25:
                    80:54:c7:bb:d5:7b:4f:5c:55:23:0c:12:c5:62:49:
                    d5:03:56:8f:3a:35:9a:dc:64:d9:9a:22:1f:71:9c:
                    25:49:30:7c:58:a3:5e:71:4a:14:cf:fb:58:31:45:
                    45:c4:3a:d9:29:86:7e:00:11:f9:6a:36:5c:94:26:
                    8f:fb:8c:ec:2a:10:21:0e:ec:56:89:d5:89:3f:55:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:08:51:25:E3:37:01:4E:0C:2D:37:12:4D:0F:81:BD:A1:BF:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e648563-7077-488e-a1d5-b03f10f986ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:af:21:04:95:7a:48:3b:a8:ef:3b:a4:bb:56:89:d8:44:
         91:75:ae:ea:47:3c:14:d0:a6:c2:3a:13:98:6e:7a:f1:c6:94:
         80:8f:d8:d1:cd:fd:30:0d:e8:46:37:23:23:41:21:75:be:da:
         e3:a7:b0:b1:e8:8a:38:1b:b1:f0:9d:6c:fc:95:a4:7d:69:24:
         57:2b:fe:2a:ec:5f:c5:ed:ec:f9:d6:34:62:66:bb:10:72:50:
         c6:28:79:46:f7:4a:1c:ba:17:2b:c7:21:ab:5c:80:f6:dd:7a:
         06:14:5f:88:2b:d6:05:8d:f9:4e:16:00:69:1a:da:9c:77:85:
         0d:b3:7a:8c:9d:85:b9:3e:0d:06:50:26:e1:4d:22:86:b3:9e:
         94:91:8e:e7:41:9f:2a:a4:6c:1f:54:92:27:49:eb:6b:5f:5e:
         6c:a4:10:1c:21:51:69:21:36:35:48:98:2c:c7:92:c7:a8:8e:
         17:32:f8:6f:09:1d:79:6b:f5:9e:02:95:62:aa:f0:66:8e:07:
         c5:00:bf:62:73:0e:85:53:cf:69:08:4b:49:34:77:12:5a:4f:
         02:2f:31:36:c9:ac:18:02:ec:33:7a:8e:63:8c:af:91:4a:67:
         40:55:68:21:2f:9b:88:6c:58:f5:0f:e6:80:6b:dd:05:17:94:
         2e:c8:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----