Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa
File:                     a4d49ad1-da76-4d40-801d-8877c08472a5.roa (raw, json)
Hash identifier:          U1/dcvAbRZJ4ejaWnf0BLC9DJDKVa/r0Kv1WXsriEHw=
Subject key identifier:   89:FE:7C:BC:F8:36:89:03:A9:52:67:42:78:1D:70:0E:57:BA:BD:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54F901996CD6C6A1F5E889400F32A102FCA3C2B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa
Signing time:             Sat 15 Nov 2025 00:31:04 +0000
ROA not before:           Sat 15 Nov 2025 00:31:04 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        15.194.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:01:99:6c:d6:c6:a1:f5:e8:89:40:0f:32:a1:02:fc:a3:c2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:31:04 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=1b8a30901c96c90681d67bb9ff875fece4ad656c8dabdc5b97bb9b4803fa496a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:96:7b:6f:64:b2:fe:72:de:df:71:c1:d9:
                    ef:03:dd:07:ef:f3:8d:13:fd:e9:d7:96:46:0e:b6:
                    e5:fa:67:01:d5:a7:e3:c3:e9:28:2a:3b:6f:a4:94:
                    70:e6:ec:8d:21:a4:11:64:11:3e:15:89:a0:c0:a2:
                    c9:3a:cf:28:68:8a:2c:7a:29:3e:8d:3a:2e:52:0a:
                    4a:b5:d8:34:ae:6f:5f:36:8b:0c:55:cc:6f:e2:c0:
                    d7:5e:6b:4b:5c:50:38:0b:a4:f5:85:ca:4f:b2:75:
                    b0:e1:87:d7:40:88:9e:a0:de:c7:3b:ab:a2:fc:a9:
                    18:46:ae:66:0b:ee:b1:4e:5c:00:af:e6:bb:ee:50:
                    c0:03:f2:0e:7b:47:fa:c1:51:5c:19:b9:e4:03:ee:
                    47:41:b8:eb:24:54:42:c2:83:76:f2:92:23:11:14:
                    e1:ba:d4:60:35:05:7c:1c:d7:08:2a:1c:59:79:16:
                    ce:f8:f1:a7:3b:71:d1:63:26:55:5c:aa:8c:59:99:
                    b4:69:1c:e3:5e:a8:42:25:92:c8:14:02:26:7f:82:
                    96:8c:2d:5e:74:98:33:13:1f:34:29:56:0f:65:60:
                    a3:26:67:3b:d2:f5:a7:4a:43:7f:e7:92:ed:44:80:
                    bc:29:cc:06:e1:4a:37:f8:49:c0:65:15:15:52:6f:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:7C:BC:F8:36:89:03:A9:52:67:42:78:1D:70:0E:57:BA:BD:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:17:c9:b2:52:52:48:ff:cb:99:29:55:69:86:bb:52:c5:fd:
         8a:68:3d:f9:fa:06:35:6e:d5:fd:e7:f2:a2:0d:fd:e3:3e:f3:
         89:2d:77:4f:0d:ed:ed:1f:64:12:c9:7e:5c:1d:18:09:e3:97:
         9c:7f:90:ac:b9:6d:a5:01:90:c4:92:e9:fa:f8:5f:5f:b2:46:
         42:7c:af:fc:92:9a:ab:9f:dc:77:d9:92:ec:dd:d4:2e:6c:9b:
         82:50:83:42:35:82:b3:60:a9:0e:75:f2:aa:6c:45:de:38:a6:
         92:bb:42:bc:2c:44:b2:a9:51:a2:ef:fd:c1:d4:59:4e:63:e5:
         a7:b7:32:08:6b:72:74:0e:70:c1:5f:0f:27:f5:96:76:01:c9:
         6d:23:cb:6e:45:81:08:33:99:10:50:c3:97:09:70:16:93:e1:
         33:9e:7e:1f:50:d0:90:e3:69:14:b1:4e:77:b6:1e:39:db:09:
         9f:86:dc:d7:ad:6c:39:1f:b7:ed:cd:b3:57:8a:34:96:20:a0:
         4e:36:b5:c9:56:c6:8c:3b:70:29:92:6a:a5:35:a0:8d:93:9d:
         60:1e:07:48:62:f8:78:39:6d:ea:0d:82:9f:4a:92:18:1b:9c:
         5d:9c:4d:87:54:1f:fe:e0:1d:7f:c3:cf:8a:57:a9:19:e2:39:
         7f:7f:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----