Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
File:                     a55b9668-0898-4096-8bd0-529dad81c1b8.roa (raw, json)
Hash identifier:          7eUjTkhthyP+eJL1x5Jhu1NHDUF7klm1A925OioF3Kc=
Subject key identifier:   84:8E:F5:15:DE:02:FC:A0:25:1B:72:15:6C:5B:85:7C:91:FB:DF:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BC93B610928EBC10DDD98BB68797523AB901145
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
Signing time:             Thu 13 Nov 2025 00:21:33 +0000
ROA not before:           Thu 13 Nov 2025 00:21:33 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.180.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c9:3b:61:09:28:eb:c1:0d:dd:98:bb:68:79:75:23:ab:90:11:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:21:33 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=f268390fd44c033c9220a05dda64e1eb7c2335e1fcbd4fbc08da505a34474409, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:43:cc:e3:8c:53:d7:d4:e5:bf:ae:f9:97:
                    e8:a2:4d:a5:d6:59:50:c9:1c:c1:f9:ce:13:34:80:
                    3a:26:3a:91:4c:1d:e8:68:90:f7:54:93:c1:26:8e:
                    9e:e1:cb:a4:8a:72:31:ce:68:11:6b:03:28:56:d8:
                    88:fc:57:b0:b2:59:ac:7a:d9:c5:28:c9:27:16:44:
                    8e:cd:22:dc:a6:e9:5d:31:6b:37:6f:22:03:c3:49:
                    81:32:e8:80:d8:cc:9e:b4:08:85:62:d5:48:f3:4d:
                    aa:69:6e:da:f3:aa:7c:78:4a:c3:d9:c7:2a:2b:12:
                    8f:4f:93:95:3e:46:8f:27:08:d1:4b:6c:2f:06:bf:
                    e3:00:30:21:3d:67:56:93:df:1a:d8:8f:9c:84:69:
                    84:77:83:da:ec:6f:7e:77:9f:b4:49:0b:0a:95:3f:
                    8d:99:c4:8b:62:89:c9:7a:bc:da:49:84:a0:e5:ad:
                    af:2b:cb:eb:c3:ac:6c:3f:6c:ba:52:ca:16:31:30:
                    64:f8:da:1a:21:58:7a:64:68:a1:11:76:7c:74:3e:
                    b5:4e:2f:41:a8:4d:e1:36:f5:9b:b5:f8:55:04:4c:
                    05:e1:78:42:4f:b4:ac:b1:7e:33:a6:c6:c5:45:e7:
                    9d:1a:2d:fe:bf:de:04:ed:05:dc:3c:9a:52:e8:22:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8E:F5:15:DE:02:FC:A0:25:1B:72:15:6C:5B:85:7C:91:FB:DF:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:3a:c0:48:b5:8b:45:00:f3:93:5c:29:9f:5e:8b:3a:4a:
         b6:c5:be:9e:8d:06:35:4e:24:d3:d3:ed:17:19:e6:82:fe:85:
         9a:3f:dd:53:36:93:bd:77:c8:09:00:21:6a:ee:c5:3a:9f:6d:
         c2:1a:e5:27:90:3a:ab:fc:ee:48:a3:7b:b4:64:cd:bb:d1:83:
         bb:d2:65:9f:51:d3:cc:36:59:b5:73:f8:64:4b:71:b3:2b:ab:
         87:b9:db:6a:44:26:c8:51:b3:c1:7f:fb:2a:fe:76:93:42:5e:
         2e:9e:97:8c:37:c5:16:29:f0:8c:8e:04:08:db:b5:5e:9c:4c:
         c7:41:76:6c:02:52:68:91:01:2c:5c:e5:7d:b2:63:18:82:5a:
         dd:c3:34:56:16:ee:6c:1e:59:11:5e:59:06:ab:29:2c:65:09:
         7c:b6:d8:b5:46:9a:98:1b:8f:c8:ac:93:be:df:6e:21:47:42:
         90:9b:ac:88:3e:d1:87:e6:a4:8a:43:77:11:00:e2:59:81:12:
         3b:6c:99:2d:2f:47:d8:7c:62:62:c1:e3:a6:e1:1a:70:9d:5e:
         50:27:a7:83:67:bd:cb:d2:4c:e8:92:75:61:9b:1c:62:f3:3a:
         75:0f:fc:d4:f7:6c:35:f1:ca:86:ec:73:7b:64:4b:26:c7:bb:
         58:47:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----