Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa
File:                     ba899484-5882-499b-8b7f-4bcbdb569b44.roa (raw, json)
Hash identifier:          zrfUPHH212ABoCqqnObZqEBIJ6yV2TDVJqhlDCYo9vk=
Subject key identifier:   40:C5:42:02:AA:38:F4:7A:2F:53:C0:8A:D9:B8:0E:02:34:C9:A4:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6200B2F0A6F80039709000769537607FB08EC91C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa
Signing time:             Sat 15 Nov 2025 00:20:12 +0000
ROA not before:           Sat 15 Nov 2025 00:20:12 +0000
ROA not after:            Sat 20 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        45.57.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:b2:f0:a6:f8:00:39:70:90:00:76:95:37:60:7f:b0:8e:c9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 15 00:20:12 2025 GMT
            Not After : Dec 20 23:59:59 2025 GMT
        Subject: serialNumber=a02fc61e7d65309f2ad0b1795312be36b1e116e4819c86137447907d80787004, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:56:bb:88:2b:5f:92:b4:e1:7c:f7:17:89:
                    9e:f0:eb:92:3e:64:7d:cd:c2:4e:18:23:f5:4d:4c:
                    36:48:ee:c2:f5:3e:a4:69:27:d3:dc:d1:40:ce:eb:
                    55:b9:d4:7f:3d:92:9d:86:9a:b4:81:7a:4b:8e:33:
                    40:dd:50:b4:6b:18:58:ff:af:fc:7c:3b:88:82:a7:
                    b2:bb:ed:e7:57:14:78:34:87:a8:24:99:49:1d:e6:
                    ed:ee:07:29:44:d4:d8:c3:4e:44:53:10:52:0d:f3:
                    42:d6:98:c7:11:9e:56:bf:ba:a6:5c:fd:91:ec:cd:
                    9f:64:f6:3d:29:4d:50:8b:d4:26:7f:50:90:91:dc:
                    48:65:a6:d8:d1:82:ca:2b:f1:43:7b:5c:e9:a4:2e:
                    0d:c9:0f:4a:b4:6b:cb:07:11:80:76:f2:10:e3:b2:
                    17:bf:14:02:68:52:8b:a1:98:8f:72:39:bd:ad:a1:
                    0a:10:d4:05:86:10:b4:c0:17:3b:83:76:eb:8b:e5:
                    b1:af:d6:22:c3:24:2d:63:ec:f4:3d:c0:34:21:4e:
                    67:bb:c9:1e:3b:52:ed:d2:c5:1a:f2:2d:86:8a:47:
                    09:0f:a3:68:30:fe:1d:c9:84:6f:ef:84:da:bd:17:
                    12:56:97:10:7c:21:3d:dc:3c:a1:0a:30:2f:b4:71:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:42:02:AA:38:F4:7A:2F:53:C0:8A:D9:B8:0E:02:34:C9:A4:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba899484-5882-499b-8b7f-4bcbdb569b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.57.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:18:2d:76:6f:68:ae:c6:7e:58:66:50:ee:6d:60:54:c3:
         3d:9c:af:22:e2:99:67:99:fa:9b:49:a2:13:19:c7:e3:f1:9c:
         17:4e:45:e8:78:13:cb:14:60:8e:0d:3d:ea:c7:91:2b:3f:1b:
         22:e8:6f:c8:91:17:6e:a8:97:98:3f:f4:6f:e8:90:87:62:d9:
         7c:b3:d2:31:4b:d3:d1:f3:bd:b8:d2:33:dc:cb:61:b3:b7:96:
         33:81:9e:90:d0:c1:72:42:79:89:ed:00:76:3f:47:f6:f3:ae:
         63:b2:89:00:a1:75:be:07:e2:da:e3:bf:1e:a8:52:bc:48:f7:
         58:19:1c:25:3b:bb:f4:d5:fb:8f:1b:1e:85:36:9d:99:52:cf:
         e4:f2:58:ce:7f:ff:89:eb:81:48:14:18:3c:4c:c7:69:83:5f:
         19:dc:ad:60:0e:ee:df:25:f0:7c:b5:8d:1b:e5:b8:fb:1b:b3:
         be:44:98:94:13:84:50:d8:89:6f:03:14:a5:23:e7:91:d9:2e:
         58:a7:00:8e:c8:64:be:f5:a3:2d:e1:6b:e6:44:31:af:02:db:
         c5:64:f7:70:0c:7c:53:c7:44:6d:52:9b:ef:e5:b8:a1:41:18:
         3e:ae:54:8f:33:87:7f:29:6e:97:d0:8f:56:b3:0a:79:16:5f:
         78:09:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----