Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa
File:                     f60557b3-749f-4957-ae6b-c16e5e584495.roa (raw, json)
Hash identifier:          LIKuzGwJ5oe2pNOchyjornsphwTz2vVamfTvbsauAIY=
Subject key identifier:   54:3F:02:78:CE:79:84:44:4D:07:77:EF:C9:A2:B6:4B:8E:E6:3D:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31A7B7D067B1AE1418F55712ABF0E12CE6A9F1AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa
Signing time:             Tue 11 Nov 2025 02:30:13 +0000
ROA not before:           Tue 11 Nov 2025 02:30:13 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        110.238.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a7:b7:d0:67:b1:ae:14:18:f5:57:12:ab:f0:e1:2c:e6:a9:f1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:30:13 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=8789c50f3026d524b1986ac56c45384f8e94649831469259c6160ec0e4f55576, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:74:88:dd:ad:b6:be:23:0e:d2:6b:0a:cf:
                    51:b1:87:3a:14:8c:c6:a2:6b:b0:31:17:7e:d3:fe:
                    b5:5d:53:46:ae:9f:96:49:e3:f7:48:69:17:3f:2b:
                    48:73:47:1c:ec:f8:ee:e5:37:8f:02:c3:03:f1:e2:
                    13:39:51:3c:a1:5e:6b:ee:6a:22:46:dd:99:bb:2d:
                    bd:5c:9e:f3:3c:a2:68:7d:5e:80:c3:20:4c:6e:08:
                    a9:6b:2c:58:8a:3f:fe:79:18:3e:61:de:6f:e9:29:
                    68:d3:75:37:e5:e3:a2:01:1a:b8:98:88:c8:b9:ae:
                    72:57:57:f8:56:80:bf:dd:d7:61:7a:74:6b:3f:0a:
                    5c:2f:b7:1c:7a:75:7c:92:e3:6c:e0:46:4c:84:09:
                    3a:57:96:1b:49:20:44:d9:58:1a:51:92:4d:c3:60:
                    f5:96:34:d9:ae:73:05:e1:52:a0:30:ec:d9:f5:3b:
                    3e:88:1e:2e:6a:4c:9a:03:46:ce:b0:23:d9:84:65:
                    46:30:26:77:e2:46:08:06:28:c5:47:b7:c9:7d:0c:
                    bd:30:bd:43:96:8d:4c:e9:6e:8c:59:92:9d:91:da:
                    32:b4:c4:c0:28:5f:89:29:7b:11:e7:a5:42:d1:c7:
                    d0:9e:ee:70:fc:c2:07:70:43:9e:12:20:3f:46:7e:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:02:78:CE:79:84:44:4D:07:77:EF:C9:A2:B6:4B:8E:E6:3D:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f60557b3-749f-4957-ae6b-c16e5e584495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.238.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:48:e1:37:15:c0:64:29:86:7f:a7:cf:7e:8c:0b:27:ef:02:
         b4:68:a2:85:ce:e0:62:ed:be:53:e0:84:ca:e3:ea:81:23:5e:
         c6:55:c4:7c:5a:73:35:6e:3a:2b:18:ad:23:1e:08:21:6f:6e:
         79:4f:6c:71:20:29:a9:4a:68:b2:69:85:88:76:1e:54:83:8c:
         a5:5d:e3:ed:23:bd:cf:51:c1:27:3d:45:22:c1:82:0a:1b:c0:
         44:28:2e:44:b4:bd:7f:9a:37:46:3b:c8:96:82:ba:3b:20:54:
         45:60:c2:03:f9:9a:f8:11:17:0f:45:eb:e4:d9:86:56:a0:95:
         a3:a4:f7:ee:0f:4a:de:8b:3d:9e:be:ff:fd:6e:2b:82:0c:bc:
         0c:08:f5:dd:bc:96:d1:f7:ce:d8:a2:8f:3b:32:48:2b:49:72:
         6c:7c:87:38:ee:b7:ad:fd:ae:5a:6c:c7:00:91:58:6a:e8:9e:
         35:24:fb:db:ee:34:37:28:96:98:37:71:1c:82:63:7d:ad:f0:
         d1:f4:ce:4b:0c:d1:a6:dc:82:6d:ce:3e:5e:57:b4:85:76:dd:
         e3:ac:56:05:2f:3e:0d:a3:44:b0:ea:a1:39:4d:10:09:54:16:
         37:dc:73:9f:5d:1f:bf:7e:29:fe:c2:fd:8e:be:14:e6:c9:18:
         da:b0:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----