Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa
File:                     a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa (raw, json)
Hash identifier:          kyx5aRSlENGt8WPUF0cvy1mUXxSekuj8FWABCkBWsiQ=
Subject key identifier:   FC:60:56:CE:A6:09:18:79:EB:8D:3E:AE:8D:8F:73:05:4D:E9:AA:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4E220264562BA116784A6E820B8EEDB227BBDC9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa
Signing time:             Fri 26 Sep 2025 00:13:29 +0000
ROA not before:           Fri 26 Sep 2025 00:13:29 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        182.24.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:22:02:64:56:2b:a1:16:78:4a:6e:82:0b:8e:ed:b2:27:bb:dc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:13:29 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=7e89a9f3d2479c73733d161a698c8d16f0ead7c6645a8aa907c21386913ba417, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:55:06:5d:02:08:01:42:b9:d5:e2:81:24:
                    bb:2c:a8:1e:c2:a0:90:15:a7:23:78:65:09:ab:1a:
                    51:dd:52:c5:f8:f2:38:01:0a:dc:77:e4:aa:6f:93:
                    fd:3b:47:53:11:59:d0:1b:d7:c3:17:81:68:79:74:
                    a4:9e:3a:f0:40:e5:07:51:f5:12:d4:2a:05:d4:14:
                    37:d5:d0:f4:38:4f:b1:e8:f2:35:15:45:68:16:cc:
                    8e:63:d3:bc:a9:1a:1b:37:68:fc:fb:7c:11:bf:0e:
                    36:6c:73:4e:9b:14:f6:17:09:41:78:c3:a0:4b:09:
                    b3:8b:8f:40:0b:f7:a8:d1:55:88:38:8a:09:12:a0:
                    28:01:f9:29:eb:24:2c:eb:34:e1:9a:78:ad:bc:31:
                    f7:04:e7:dd:45:98:6c:be:c0:d3:17:0b:48:e3:ec:
                    b5:8a:8b:4f:51:1a:7f:d3:ce:c6:47:02:2e:24:2e:
                    68:ac:c6:4d:b9:1a:54:48:3c:c3:33:9d:c6:2c:05:
                    16:22:b3:16:72:1f:66:09:15:e9:32:01:f7:9d:f9:
                    32:1f:7f:6e:79:40:b9:05:34:79:1a:d8:b7:f2:74:
                    ef:5e:e4:46:c2:5d:fc:03:9b:30:48:46:5e:a5:f6:
                    02:09:cb:c4:ca:1b:77:0a:94:97:98:84:d3:90:9f:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:56:CE:A6:09:18:79:EB:8D:3E:AE:8D:8F:73:05:4D:E9:AA:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1f4fe2a-7fae-4e52-a929-216d3cdb96ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         99:89:ae:9e:b6:e8:58:d9:47:b2:d2:77:4c:72:88:21:a3:31:
         06:b9:a1:6c:bb:5d:2a:01:37:ea:e8:1e:eb:27:46:90:42:d2:
         98:7c:b6:c8:6d:d8:a6:76:5c:92:09:5e:ad:11:61:b5:91:11:
         54:70:68:5c:86:85:bd:88:ee:df:34:9a:b9:af:a2:4f:a6:7b:
         5a:d9:00:e9:31:64:34:4a:01:78:90:a7:d6:e8:9a:47:b5:bc:
         ab:ae:e4:88:a5:8f:35:a7:79:e1:57:ce:10:64:1b:59:53:c3:
         bd:ff:d2:fc:fa:f0:c3:38:08:d9:30:ee:47:1a:c7:8f:e7:6f:
         7c:8a:7e:cf:27:dc:4d:72:b8:be:9d:24:c9:cf:cb:56:72:58:
         ad:f0:65:5b:bd:b1:be:3d:e5:67:6f:60:51:ef:d8:13:86:88:
         50:55:b5:59:37:a4:ec:67:54:d1:ba:1f:1c:6b:06:e7:26:b7:
         a5:8f:13:c3:07:9e:1d:ae:e2:ba:f1:0b:c9:fa:18:02:5b:d9:
         ad:d0:8f:c8:84:77:1d:ed:bb:f2:db:69:60:cd:75:2f:5a:66:
         9d:61:23:85:da:a1:1b:41:40:c7:e7:14:fb:42:9a:4c:0a:d5:
         46:b7:5a:f3:db:1e:f4:88:bd:b3:a1:7f:dc:c4:0e:93:14:28:
         17:a7:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----