Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ede22eb0-a905-4324-a004-fabddd500c6d.roa
File:                     ede22eb0-a905-4324-a004-fabddd500c6d.roa (raw, json)
Hash identifier:          t9vhi7aUK2NYAsEbj+VCYUdqepSIeBy1XF9flNnMDZw=
Subject key identifier:   17:71:67:A9:CF:7F:B0:6E:01:BE:0B:F0:C9:F8:8C:68:14:DB:9A:AC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5410EEB80FDFC101E43192A3D9B09034DD8B1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ede22eb0-a905-4324-a004-fabddd500c6d.roa
Signing time:             Sat 25 Oct 2025 00:10:45 +0000
ROA not before:           Sat 25 Oct 2025 00:10:45 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:ee:b8:0f:df:c1:01:e4:31:92:a3:d9:b0:90:34:dd:8b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:10:45 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=66e1e0b328dddef3730b70f163b1abac9fd095bc47309fa34dacb447a0d0dcb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:96:2b:d9:c2:21:bb:99:cf:39:b6:fb:f6:
                    74:e2:ef:cf:a3:27:84:8e:fa:ba:75:f7:5f:c5:18:
                    b0:99:99:33:9d:3a:5e:47:e7:9b:7d:bf:71:44:34:
                    32:0e:9f:5d:64:85:03:9a:48:77:2d:9e:b0:17:b1:
                    26:c6:52:5d:8b:1d:7b:f8:8e:91:60:21:18:eb:a2:
                    c2:83:15:b9:e6:7b:ae:af:e5:ca:22:7f:21:0d:38:
                    ef:a8:69:b1:31:bc:fc:fc:d2:c7:aa:ca:40:47:f2:
                    97:a7:72:73:88:41:f7:56:94:07:c6:d8:94:fc:8f:
                    3a:6a:5c:43:cf:1a:65:98:8b:47:bd:52:ca:41:fd:
                    dc:d7:c1:5e:04:8c:aa:c2:07:99:60:fd:ea:62:f9:
                    7a:e5:15:d8:3c:d4:f1:07:b0:21:3b:eb:62:23:18:
                    f4:f4:fb:ea:86:78:31:67:2a:ec:f0:a1:d2:43:00:
                    69:ed:21:fa:48:a7:5d:e8:54:b7:b8:da:39:f2:1c:
                    8d:ca:ae:a0:2c:ec:c6:09:7e:0a:26:ff:89:86:4f:
                    3c:dd:09:b2:18:6d:f1:5a:92:a6:fe:35:1f:7e:2f:
                    85:1f:b9:b7:31:a7:7f:03:2f:1c:66:6f:d2:fc:1c:
                    83:48:e6:ac:cb:49:5d:d5:20:66:ba:ea:61:3a:2a:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:71:67:A9:CF:7F:B0:6E:01:BE:0B:F0:C9:F8:8C:68:14:DB:9A:AC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ede22eb0-a905-4324-a004-fabddd500c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:99:0e:15:14:a2:6e:7d:da:cb:e3:cb:c5:9f:6a:a6:df:
         05:4d:03:e5:7c:dd:69:14:5b:16:af:a5:3a:62:61:35:5a:55:
         36:d3:71:fc:8d:75:94:17:0e:ed:f5:2b:95:58:60:85:32:e6:
         d6:8a:5f:a4:58:97:39:fe:53:c7:06:93:a6:66:34:7f:50:40:
         08:84:c8:ce:0f:e0:85:12:a8:74:5e:d9:58:ee:dd:b7:e6:43:
         eb:7a:f3:58:1b:d5:38:0d:fa:1b:37:b8:f3:ad:96:83:be:37:
         ec:a4:fe:26:9d:6f:e7:c1:6a:5f:b6:0d:9d:99:79:0e:1c:c5:
         ff:f2:2d:fe:02:d9:62:f4:9d:e3:fb:b9:e2:9b:db:8d:c8:fb:
         ff:6d:36:ee:f1:d4:05:cf:21:41:b4:64:35:2f:7a:04:fb:a4:
         7a:74:42:0c:d1:62:63:d9:98:50:ac:c0:4b:bb:9a:43:96:3c:
         f4:ea:64:ec:fe:9b:2c:e7:45:67:89:85:88:2b:f4:e4:df:17:
         d9:04:32:a9:99:0c:89:22:ae:20:fc:c1:85:67:6c:84:db:49:
         06:5e:98:69:87:0a:4b:1f:9e:e2:7e:c4:0f:d2:f2:3d:b8:54:
         6c:b2:d8:a7:cd:91:5c:9a:86:6a:c0:b7:c5:b7:34:5f:e0:86:
         4e:d8:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----