Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa
File:                     71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa (raw, json)
Hash identifier:          dDpLk0iHqwYIvvt7gz3fqS9NvWYwceNQHoMvvuvtDuA=
Subject key identifier:   FA:AA:E8:01:C8:E8:38:AC:06:BB:2D:76:C9:6A:FC:C0:66:43:26:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E06EC4D51E6D27E65F8B1CF5AE014D6E259632E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa
Signing time:             Tue 11 Nov 2025 01:52:08 +0000
ROA not before:           Tue 11 Nov 2025 01:52:08 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        157.175.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:06:ec:4d:51:e6:d2:7e:65:f8:b1:cf:5a:e0:14:d6:e2:59:63:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:52:08 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=59bcb16aa174ffd1a1fa3e45ed21facb7dd69b4b53c74b39930d1db1f932037e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:77:ae:58:49:7c:77:76:9c:67:89:70:e5:
                    73:37:89:c4:81:5e:05:e9:23:39:21:fc:df:e1:65:
                    2b:2d:a1:75:77:5d:21:68:43:9c:58:ae:0e:a4:dd:
                    9b:db:b0:a3:37:92:8b:9a:fa:14:5d:f5:30:2e:a5:
                    32:0f:2e:1f:f0:41:1f:ac:eb:13:7b:21:02:ac:ac:
                    8b:d5:5c:6d:42:3d:25:26:16:77:19:f7:60:97:80:
                    88:0c:8b:a3:c1:56:93:7d:00:63:e7:0e:e8:3d:72:
                    ca:63:8c:8f:6b:fb:15:cd:fc:ad:32:37:04:34:39:
                    63:3a:c2:88:54:51:27:ea:d7:cb:57:bc:da:f8:85:
                    87:76:d3:b8:39:1e:2e:30:fe:cb:9c:72:d2:61:97:
                    ff:d0:9d:26:b8:05:5c:74:11:f0:e5:cb:82:ef:96:
                    a7:e9:81:1b:f7:14:33:3f:98:3c:da:2a:63:61:86:
                    9e:21:cc:b3:4b:b2:d2:ad:63:5b:f0:ad:e2:a3:3e:
                    52:39:8f:46:51:9d:08:d2:6a:32:82:b5:cb:cb:da:
                    32:ca:90:16:05:65:c5:b8:c8:68:d0:a1:47:a5:cc:
                    11:1f:13:d7:3a:fd:9b:8d:2e:07:b4:92:d9:08:2a:
                    65:d6:58:f8:6b:17:53:df:7a:16:53:5e:5d:81:14:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:E8:01:C8:E8:38:AC:06:BB:2D:76:C9:6A:FC:C0:66:43:26:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:5c:ce:d2:ce:db:d7:2a:a4:f6:83:ae:32:94:1b:b6:b9:36:
         ca:d3:07:59:74:23:60:90:9c:a8:f4:d6:46:4a:69:9e:31:d5:
         e4:01:54:1a:f3:43:f8:d9:9d:a9:ea:c8:bb:ae:75:19:9b:81:
         de:ce:bb:92:a5:36:e3:af:6d:84:63:3e:05:bb:b6:a5:da:59:
         8d:64:f4:06:00:3a:54:44:46:92:99:ea:7d:ea:3e:8b:a5:96:
         0e:ba:c3:e9:00:d2:8b:a0:66:64:a9:63:1d:14:54:fd:2e:f5:
         4e:48:9b:14:56:43:d0:2b:8d:bf:bc:0f:dc:11:33:1a:83:bf:
         d0:4f:a5:2b:08:24:99:2d:72:37:c5:cd:62:b8:62:65:1d:15:
         b6:71:f6:a8:28:12:a3:5f:f9:71:b4:eb:c6:17:a0:5b:4e:c6:
         d5:13:74:c9:93:7e:13:f7:df:e4:b4:9d:35:ac:b6:97:3d:0a:
         c3:d2:fb:51:66:b7:e9:9f:fa:8f:ea:6b:9d:38:14:fd:0d:09:
         a2:86:8f:c7:7d:c9:66:9d:17:dd:90:51:78:80:81:a6:75:cb:
         f7:4c:ff:b5:57:b7:6e:81:48:00:72:91:b0:9d:bf:e7:c9:18:
         b1:b3:87:5e:87:2a:5a:9c:65:3f:75:9f:2d:46:e9:33:aa:93:
         93:b5:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----