Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40964-a1cf-482a-a7a8-8cc9835e252f.roa
File:                     d8b40964-a1cf-482a-a7a8-8cc9835e252f.roa (raw, json)
Hash identifier:          NwvcBjad/jP3gpXjkAoAvORCtVclYydtcLB5HHOgPsg=
Subject key identifier:   54:35:39:FC:90:6B:68:2C:86:E6:7E:0F:4F:3A:9D:90:C5:67:FD:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FDF2B49D8927C776BA546BA55640AA2E9F15302
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40964-a1cf-482a-a7a8-8cc9835e252f.roa
Signing time:             Tue 11 Nov 2025 01:30:57 +0000
ROA not before:           Tue 11 Nov 2025 01:30:57 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        107.23.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:df:2b:49:d8:92:7c:77:6b:a5:46:ba:55:64:0a:a2:e9:f1:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:30:57 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=d8789b3419bb5fe7ac9869262b93f8529e7861e224bb42ce8ac66c47b3611545, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:35:0b:e3:22:2a:06:b5:f4:34:9f:43:b8:
                    8a:c5:7e:77:f8:eb:a9:7f:3b:1e:a7:00:4a:a0:a6:
                    30:3b:d9:4c:3e:fe:23:19:1a:ce:0e:3b:8a:a0:79:
                    10:d3:19:d9:42:d9:59:b4:fc:52:35:2a:91:2f:57:
                    11:dc:f0:67:ba:e3:f6:91:64:f7:27:c9:64:0d:b7:
                    69:fb:8b:6d:3a:64:58:d4:d4:f7:e9:79:56:3a:1e:
                    cc:ec:a2:39:18:be:ec:83:b2:36:82:d8:a5:69:00:
                    11:3b:eb:e0:4e:2a:60:6c:9e:9f:c7:06:2a:bf:31:
                    d1:7d:62:40:e5:9f:d0:66:9c:f3:1e:3e:46:49:91:
                    25:82:1b:78:72:e7:a4:d2:98:8f:06:13:cf:80:91:
                    c8:40:e3:63:d7:72:7f:20:2f:64:79:15:36:49:22:
                    2b:60:84:c0:5e:d2:02:53:9e:ed:b8:48:28:de:a0:
                    20:a4:e9:62:1f:a5:81:1e:2c:89:35:64:f8:d4:ca:
                    0d:84:fe:69:8e:dc:43:b8:61:15:99:73:da:3b:e5:
                    46:8d:32:ca:dd:0c:a6:d5:88:1d:cf:58:04:aa:ee:
                    04:29:9a:32:a9:d2:e5:e2:6b:12:e0:b1:02:a6:4a:
                    0c:74:04:9c:ec:48:8a:47:1f:70:48:d1:55:c8:da:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:39:FC:90:6B:68:2C:86:E6:7E:0F:4F:3A:9D:90:C5:67:FD:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8b40964-a1cf-482a-a7a8-8cc9835e252f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.23.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d1:3a:65:89:51:50:f3:85:61:3c:af:92:33:fa:b8:ae:33:20:
         6a:57:2b:8c:14:34:9a:f2:99:c7:0c:d2:79:d8:b1:e5:76:aa:
         e7:e1:09:3c:31:bc:4a:dd:8a:ea:78:39:67:63:e6:d3:8f:f4:
         c6:76:4c:d6:b7:96:57:f2:60:35:e5:5b:ec:e3:12:9a:b3:d0:
         d5:dd:35:fc:ea:99:af:c9:a6:57:d4:93:79:69:ef:5c:32:57:
         a8:92:a6:3f:78:c2:d9:7f:ba:e8:8b:4d:01:09:df:10:75:ac:
         16:f1:8d:02:f0:2d:30:79:ae:e0:91:91:1e:37:d7:66:a1:c8:
         70:d6:f8:43:bb:1a:0f:e4:ae:fa:ab:24:57:51:be:db:24:5d:
         2e:6a:12:ce:fd:c0:f4:48:82:67:8f:35:a6:78:b6:78:cb:4b:
         4e:2b:fe:6e:ea:17:d0:29:ff:ed:3f:12:0a:27:6c:5b:2b:ff:
         0f:8b:ae:24:a1:8e:9a:91:df:6c:69:46:76:8e:9c:19:17:c6:
         da:27:6f:37:5e:06:13:8c:8a:37:39:e4:b0:e6:10:37:4c:f1:
         c8:c9:7f:81:c7:54:3f:47:20:8a:37:87:09:92:c0:32:6e:bf:
         7c:84:f5:d6:04:cf:b0:7d:73:ac:8d:f8:83:d7:a0:4c:08:44:
         6b:52:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----