Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
File:                     d4314907-a293-452a-8393-4b578c9f3645.roa (raw, json)
Hash identifier:          VaHiRyNr216qvxtCoi/rS81/cfmOtl2poPrIPiS3doY=
Subject key identifier:   60:E2:63:80:22:DA:6D:E9:1B:54:85:44:7A:57:7A:DA:B7:E4:7B:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       40E516B9C873B6A9BDFE3A5523956D8E3A15E6A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
Signing time:             Tue 23 Sep 2025 16:34:30 +0000
ROA not before:           Tue 23 Sep 2025 16:34:30 +0000
ROA not after:            Tue 28 Oct 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e5:16:b9:c8:73:b6:a9:bd:fe:3a:55:23:95:6d:8e:3a:15:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 23 16:34:30 2025 GMT
            Not After : Oct 28 23:59:59 2025 GMT
        Subject: serialNumber=2ea2f93e11c0cca74a3c10b7b2eddfed1cea4cd450153a9082783592c62bbcd0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:a5:47:0f:2d:92:31:9e:cc:ed:8d:a1:65:
                    fe:15:0e:70:34:c5:e0:cc:af:ae:5a:01:7d:03:92:
                    4a:ab:a6:72:8a:5e:2e:82:ee:ed:07:d9:4a:30:9f:
                    92:bc:f9:6a:b1:dc:87:c3:ba:7d:e0:fc:31:76:46:
                    4c:33:d1:0f:cc:cd:7f:83:03:95:f2:da:9b:8c:10:
                    dd:a8:e9:ea:5f:c2:19:27:e1:b1:27:e1:b8:45:34:
                    df:b5:25:75:c2:b4:f6:98:c8:ed:88:88:a7:99:14:
                    95:5b:64:fd:93:c7:e9:0b:b8:ca:4a:b5:6c:30:b0:
                    e5:2f:76:96:5f:a9:01:4c:b2:4a:32:9b:cb:37:66:
                    74:95:9b:58:d9:bc:02:6e:87:f4:2f:cb:cc:fe:cb:
                    af:cc:0a:4c:07:0f:12:c3:04:d5:e9:f7:e5:63:35:
                    84:c3:0b:35:96:34:7c:85:f2:18:3e:f4:81:ea:0f:
                    b2:aa:21:45:f7:b9:04:81:a8:d9:c6:92:f5:6f:77:
                    28:00:9f:88:5f:7f:c5:65:b5:d9:2f:81:bf:a8:e0:
                    48:5f:84:f9:d6:11:7a:2b:e2:63:e9:63:0e:f7:df:
                    2e:4c:f0:28:5a:8e:26:d9:d4:b8:3f:d8:1a:88:e8:
                    b1:50:a5:bf:f3:dc:a8:0f:1e:c8:44:dd:cd:ab:57:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:63:80:22:DA:6D:E9:1B:54:85:44:7A:57:7A:DA:B7:E4:7B:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:12:36:0c:04:6a:68:62:30:aa:3c:ca:8e:05:ce:3c:0b:c0:
         41:8d:f6:89:17:3b:ba:1b:a1:8d:04:7c:d0:2d:10:7f:c5:8b:
         dc:67:e8:fa:31:01:85:b8:cb:07:41:09:f1:4e:8d:22:ee:02:
         55:14:fa:88:11:58:6e:a7:4b:78:f5:7b:59:93:26:1f:77:a3:
         b8:41:cf:fc:0c:9a:0c:cd:43:01:67:84:4b:6c:5f:54:33:31:
         e8:33:27:19:20:6c:37:79:91:1b:5b:af:63:96:68:24:69:64:
         77:c1:0f:88:67:eb:cf:6e:d7:b6:dc:45:90:82:0f:49:f5:ae:
         5a:bf:82:53:1b:e0:33:72:66:55:3a:b5:ce:e8:e3:b8:b9:41:
         0e:64:5c:71:2b:af:79:10:4f:29:d3:29:37:3c:2f:6c:27:ca:
         9b:31:7b:98:ea:5f:72:91:25:14:4c:f9:c7:33:94:d5:ef:b6:
         8e:ca:05:c7:0a:38:52:aa:60:03:f8:fc:1e:5f:2a:0c:90:ce:
         96:7b:63:41:51:b4:c3:9c:2b:5c:7b:f9:6e:59:8c:0c:8f:31:
         6c:c3:76:25:92:8e:85:b9:55:e5:67:07:d1:3b:e2:b0:e9:9b:
         37:65:23:21:66:87:27:7a:ad:ee:ed:06:4a:01:06:1a:5a:c1:
         cb:a0:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----