Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa
File:                     e2abe357-a286-4173-9db3-3fe355a4e8f9.roa (raw, json)
Hash identifier:          B9CmBNZZ4R5e/hpKoSB26gZySEVEDsRIjZi1oz6IryU=
Subject key identifier:   0D:2C:B4:D0:48:42:EC:AA:3D:D5:CD:71:EE:6C:23:12:D7:B9:9D:0A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B0B4EAA882B583BF52577560CE696EFA28A2B76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa
Signing time:             Tue 11 Nov 2025 00:20:05 +0000
ROA not before:           Tue 11 Nov 2025 00:20:05 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.31.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:4e:aa:88:2b:58:3b:f5:25:77:56:0c:e6:96:ef:a2:8a:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:20:05 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=ae8ef79c33a56a71a19b4445b55b76c71d54d00e8d9ae11c01bd234a81a08d5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:d7:c3:e4:20:e7:3a:6f:33:1d:cc:eb:68:
                    58:d6:cd:c5:b0:82:59:1a:2d:be:cf:24:85:ca:38:
                    cc:27:97:7f:40:9d:89:f9:7a:07:f0:e6:b0:2a:38:
                    22:34:0e:ec:8e:7e:00:a2:e8:2c:cb:21:18:8e:62:
                    06:1e:22:9c:e6:31:87:36:19:40:8b:0b:46:7a:d2:
                    38:b1:41:b6:09:c2:b5:b0:d1:8e:1b:aa:52:84:9e:
                    35:1a:50:54:27:55:d1:d5:b0:3c:46:64:37:66:8e:
                    5b:72:a2:8a:35:71:3d:ab:b7:90:fa:f9:99:b0:d5:
                    8d:0a:c5:a9:8a:d6:4e:2a:c3:fb:5d:36:8d:58:17:
                    c2:6a:c6:2a:5e:f0:ba:44:00:49:cb:2d:b2:69:85:
                    eb:6f:4c:ad:df:12:ed:68:0a:a1:39:47:c0:35:e6:
                    ab:6e:a1:09:f5:ad:d3:e6:2d:d0:9e:06:9b:6f:03:
                    f1:d6:9f:9d:10:04:3c:25:39:ea:ef:83:de:06:d3:
                    7e:1e:c0:0f:e1:d2:dc:03:e6:1a:f1:06:aa:1e:b6:
                    69:fa:43:43:05:57:79:7d:c6:ad:62:22:53:5a:ad:
                    c7:ac:25:cc:33:ff:d7:9a:7a:f1:bb:fe:a3:04:02:
                    85:91:33:16:a8:95:4c:6d:15:b4:75:e0:b8:64:dd:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:B4:D0:48:42:EC:AA:3D:D5:CD:71:EE:6C:23:12:D7:B9:9D:0A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2abe357-a286-4173-9db3-3fe355a4e8f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.31.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:d3:77:96:af:43:e2:ff:2c:7e:31:13:e2:6a:6a:71:5a:
         a5:d7:28:e1:3f:19:b9:55:a1:49:c0:60:31:9d:8e:b8:bf:1b:
         42:9a:b4:7a:e8:3a:81:5b:b5:70:7b:0f:41:3c:ea:a1:7e:8c:
         a1:8d:75:2f:e1:4f:8f:bc:6f:03:70:52:55:d1:34:8c:f1:08:
         85:85:5c:74:3d:d5:8b:1e:44:dc:ce:01:35:85:bf:36:33:d0:
         94:65:71:ba:6f:e7:c0:5a:db:a5:2e:ad:8f:97:7e:36:17:2d:
         7d:ed:66:f1:45:74:e9:fe:8a:2d:88:3d:45:7a:0b:ce:3f:3a:
         f3:41:05:c1:e3:3b:8a:03:d4:6b:35:74:c1:48:00:c7:72:24:
         f3:e6:ad:00:80:63:8e:3b:bb:7d:e2:9c:3f:74:fd:bc:04:f8:
         7b:96:1b:d6:87:b7:c5:b6:91:3a:3d:0d:9b:64:b6:d6:83:c8:
         a2:50:b8:ae:f5:ad:e6:8e:b2:67:9a:a5:89:1c:14:05:ea:47:
         39:0e:df:7b:27:7c:3d:e6:2a:11:e5:74:b9:5f:a4:62:c8:28:
         a0:a1:03:f3:68:1e:83:c6:3f:4b:09:6d:bc:11:8c:d1:ec:4e:
         63:bd:2f:a5:2a:45:1f:cb:fa:89:6c:a9:6a:18:32:d7:8e:84:
         40:09:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----