Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7d7efd-24b6-4db5-8f6f-7339d9e1088d.roa
File:                     ff7d7efd-24b6-4db5-8f6f-7339d9e1088d.roa (raw, json)
Hash identifier:          l6AK07mcj1ZP1++VCC6ukhb4Hu/kP3L1BXextCjvLuA=
Subject key identifier:   31:4C:EC:9C:CF:FA:77:74:10:83:DF:0F:FE:86:F0:AF:18:3C:BD:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       720D057465F44542E19349B3CA60E3ED8865EEAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7d7efd-24b6-4db5-8f6f-7339d9e1088d.roa
Signing time:             Tue 11 Nov 2025 01:30:15 +0000
ROA not before:           Tue 11 Nov 2025 01:30:15 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        147.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:05:74:65:f4:45:42:e1:93:49:b3:ca:60:e3:ed:88:65:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:30:15 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=749ce1110036a9caacc936075f894118a4b38711503c53c0ffe7dab52f1b910b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:77:0c:5f:dc:1d:57:99:89:9a:38:b0:20:
                    ae:ff:1d:d5:b8:6f:ef:41:f7:35:a0:23:2d:2e:7c:
                    5a:70:51:ec:97:96:e8:a2:eb:d6:43:5b:32:9c:f5:
                    dd:2c:0f:93:36:4b:01:49:24:49:e9:51:14:83:35:
                    e2:d4:0c:b3:d5:b5:6c:19:2b:ce:d9:66:25:1c:16:
                    e2:a1:3b:74:ec:f3:2f:7a:0f:70:1c:9d:e9:6c:e5:
                    06:62:ba:51:7f:bc:68:f9:e5:ec:6c:21:f4:f7:6b:
                    3b:5d:37:9b:07:e3:64:cf:15:96:8b:db:b9:89:61:
                    04:37:e5:9c:d7:0d:52:a0:87:0f:cb:57:fa:3d:ce:
                    6d:9d:9a:67:83:96:ed:03:e3:36:fd:47:74:31:3e:
                    b9:3f:63:bd:b3:0d:0b:02:8e:f0:c5:a4:7f:dc:9e:
                    50:81:70:41:fe:48:d3:28:34:de:4d:82:28:94:72:
                    d4:2a:f7:66:39:e3:e1:b6:4b:db:e1:75:b8:6e:6b:
                    c9:a5:af:0a:da:11:71:a4:b9:e9:83:3e:6f:11:89:
                    35:2d:45:47:45:bb:d3:29:0f:3d:d5:df:22:23:a9:
                    4d:07:91:ef:11:76:b0:61:84:05:92:33:c7:7f:f6:
                    28:60:c9:21:46:04:e9:21:b3:61:69:20:7f:7d:13:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:EC:9C:CF:FA:77:74:10:83:DF:0F:FE:86:F0:AF:18:3C:BD:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff7d7efd-24b6-4db5-8f6f-7339d9e1088d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:72:81:83:9d:ff:e7:9c:36:e0:8a:e9:27:50:c6:4e:56:bd:
         cf:d8:39:13:20:06:f9:73:85:47:f0:8e:46:5c:ee:ab:bd:4c:
         7a:e4:8e:61:ea:12:dd:5c:3c:99:a1:7e:3b:26:e9:2d:08:07:
         27:53:91:f1:b7:7e:29:9e:6f:98:e4:69:ce:1e:f5:d6:4e:3a:
         58:63:a6:8f:9e:32:55:33:7f:03:50:df:6b:ea:46:34:92:be:
         34:ec:64:64:6a:8f:e7:3d:8e:67:a4:82:e9:df:db:ed:91:4a:
         ca:34:4c:ea:1d:c6:8b:7f:0f:2b:cb:a5:91:bc:37:7d:72:7a:
         dc:47:cb:2a:3d:aa:e1:1e:93:e4:d0:5e:5c:29:a7:52:ac:e1:
         83:ab:49:ae:bc:2e:3b:11:5a:66:8c:18:a5:e0:10:11:46:7e:
         61:05:5e:db:63:30:0d:a2:c2:2d:11:4a:31:c1:23:9e:d4:19:
         ac:d7:b3:db:aa:51:4c:e1:75:b2:db:0a:3f:55:d6:c5:e2:25:
         b6:7d:8e:87:c1:e1:a6:0d:f2:0b:8a:eb:d9:75:74:58:20:69:
         ea:8e:98:57:4c:36:c9:62:68:75:ac:20:be:48:4b:bb:0a:21:
         04:dd:0b:80:b6:f5:bb:04:9e:a0:11:1a:d4:30:4a:33:83:45:
         ad:a3:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----