Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa
File:                     fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa (raw, json)
Hash identifier:          pW8KKzx0stSHQ3BJwxXzWPs4XSVda8z5SUnoZn0upKs=
Subject key identifier:   62:4F:20:9E:6E:FE:2F:B0:32:2A:35:27:BA:AC:64:E7:A2:E8:70:37
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FB3D62DE9628061D555E44BDE36F1805B3112B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa
Signing time:             Wed 12 Nov 2025 01:41:28 +0000
ROA not before:           Wed 12 Nov 2025 01:41:28 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        31.2.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b3:d6:2d:e9:62:80:61:d5:55:e4:4b:de:36:f1:80:5b:31:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:41:28 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=6a13569c3a98b0fb06a22ca50d5591531c1ff503969724a38e5eeabe22058f34, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:94:7d:c5:3e:17:31:01:7f:a3:57:24:6c:
                    01:1a:6c:a6:6a:99:b8:39:5d:88:20:13:34:44:4f:
                    b7:c1:ca:c4:76:2f:4d:15:9b:4d:d7:04:2a:78:15:
                    01:7c:b1:50:17:a1:a7:75:3d:fe:fd:73:7f:72:dd:
                    88:63:b4:8c:4a:e3:5b:ad:11:98:30:46:9a:52:46:
                    a1:0a:7f:54:b9:94:7e:51:09:03:d0:d8:cd:2d:8d:
                    25:75:ef:7e:d5:2c:0c:84:ca:57:af:4c:6a:2d:03:
                    73:bd:0a:49:54:0a:13:42:b3:61:e9:f6:91:25:79:
                    c8:64:d9:11:2f:86:a5:b1:7a:ff:01:f6:94:e8:f4:
                    4a:f7:f1:05:2b:93:0b:da:89:c2:00:1e:de:ec:f4:
                    47:8c:e9:1a:25:51:4f:90:31:fc:93:67:23:0c:c8:
                    24:84:95:78:b9:7a:5e:0d:72:78:a3:c2:ca:be:13:
                    02:6c:fb:15:e1:5f:1a:1c:d4:70:b7:7c:82:91:ac:
                    ef:d5:aa:bc:31:a2:8e:37:76:4a:fb:08:67:11:21:
                    10:1b:c3:93:01:56:a4:76:b0:3d:7c:6c:66:91:ec:
                    fa:fa:63:77:30:c4:c6:16:ba:57:c2:4e:a4:e1:2c:
                    63:ca:56:d3:8e:03:13:75:c3:f1:fb:4f:1c:03:ff:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:20:9E:6E:FE:2F:B0:32:2A:35:27:BA:AC:64:E7:A2:E8:70:37
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec97e85-fb34-4826-97cc-53e5fe2d90b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:ab:12:49:f0:cd:f1:01:2d:16:ca:26:18:a9:de:9d:78:
         af:9e:dc:55:42:58:bd:85:41:95:05:bf:19:c3:df:09:44:ef:
         f6:83:53:5f:c6:73:95:f0:d0:da:02:16:f9:53:9a:ef:b7:10:
         1e:c1:48:72:fe:6a:4c:06:4c:3e:d8:c2:cc:60:08:ed:fb:0b:
         70:cc:5c:32:ad:23:42:39:f5:f9:f1:6c:cb:ac:7a:fc:7d:95:
         1a:54:5d:6d:7d:c5:3a:7b:cd:9c:3b:df:1c:50:bd:c9:c8:56:
         49:c3:3b:2a:31:4e:fa:bb:eb:e9:6b:89:ae:c6:a6:2e:66:19:
         19:ad:52:0f:98:18:70:5e:be:29:e7:26:7a:e1:ef:11:22:80:
         c8:9e:f5:fc:b7:1d:96:c4:6e:15:4f:6a:d6:4c:3d:3d:df:54:
         24:86:37:aa:cd:1b:b6:00:8a:fe:64:07:41:0d:fe:48:3f:62:
         e9:de:9d:d3:d0:8c:ef:c4:77:d7:6e:58:3a:11:70:66:d1:65:
         fa:7d:b4:89:c3:c3:10:56:5f:cb:e7:e4:8b:d7:1d:72:1c:d3:
         25:cd:8a:4b:89:4a:8f:46:3b:a7:ce:d7:38:5c:21:75:dc:23:
         78:78:b2:76:40:4d:4e:0f:1a:c8:33:ad:a3:e8:dd:a4:73:de:
         04:4e:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----