Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecb3172-42a7-4c17-911e-1427b577649c.roa
File:                     9ecb3172-42a7-4c17-911e-1427b577649c.roa (raw, json)
Hash identifier:          DqbaoGTY5bqcCHCxhtCJsjoi4J/wJfF2JpfSlWh4jTI=
Subject key identifier:   8E:01:0D:54:83:AF:64:98:6C:1C:8E:F8:AE:5C:3B:1A:DB:18:31:3D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A3D4E48E4714EE36EA6B825A74F1A6C439B47AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecb3172-42a7-4c17-911e-1427b577649c.roa
Signing time:             Tue 14 Oct 2025 17:41:14 +0000
ROA not before:           Tue 14 Oct 2025 17:41:14 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:4e:48:e4:71:4e:e3:6e:a6:b8:25:a7:4f:1a:6c:43:9b:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:41:14 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=90db6654e525c25204b83d6e344dd44cbf950e00795ed0e6e489f3fcad777e8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:cb:5b:3b:94:21:60:4a:e5:96:24:5e:53:
                    b4:35:8e:a7:22:83:fe:12:5c:bb:91:21:08:53:d7:
                    1e:3e:54:b7:d0:ee:24:3b:08:29:3b:7c:a0:0f:0c:
                    42:72:38:40:94:28:09:0b:08:be:58:8a:22:c3:45:
                    46:16:0b:ad:ea:a8:41:47:8e:0d:a7:f9:39:b3:7a:
                    18:aa:21:b8:2e:ea:c6:94:92:02:22:c0:2c:41:37:
                    d7:f1:3f:a0:d3:cb:91:2e:53:33:80:5b:52:1e:54:
                    84:2f:01:46:db:6c:5a:f6:01:e6:ce:8c:a9:b4:47:
                    66:c1:5c:28:ba:36:f5:0e:06:5f:79:6b:72:81:92:
                    64:dc:f5:42:5f:1d:75:f4:11:b2:a2:d3:d6:07:20:
                    ef:b4:cf:60:d1:d5:19:38:29:28:79:6c:c7:77:e6:
                    36:61:71:f1:bd:0a:6c:cd:12:93:3e:56:e8:1d:03:
                    f3:98:ee:e9:77:b8:0d:3c:5b:ae:08:65:c8:b6:cf:
                    c8:2f:4b:cd:3d:e8:ad:a8:ba:7f:56:1f:ad:fa:57:
                    21:c8:4b:0a:c7:36:bc:bf:4d:c4:b3:4e:db:5a:f2:
                    d8:63:66:f3:7d:2c:26:38:c9:7b:62:b6:8c:bb:59:
                    50:46:7d:83:93:43:07:6f:ab:02:99:6b:ad:a0:af:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:0D:54:83:AF:64:98:6C:1C:8E:F8:AE:5C:3B:1A:DB:18:31:3D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ecb3172-42a7-4c17-911e-1427b577649c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:a7:bd:90:aa:72:ba:fd:ed:57:74:1b:ec:40:a4:f1:2b:
         59:13:5b:e6:d5:b3:7d:f1:1f:69:5f:ed:90:a3:6b:b8:fd:00:
         26:76:e3:07:fb:0c:b6:ff:02:a9:28:43:b6:1c:67:95:08:73:
         04:a4:d3:4b:37:40:c1:88:39:d5:7f:72:a7:77:29:54:07:8a:
         1d:c3:a7:b7:72:6d:22:7b:51:35:24:d2:86:3a:55:d6:f3:17:
         29:e4:7c:18:48:a1:c5:d4:06:34:14:6f:80:50:f7:9d:8c:91:
         bf:63:c7:c7:d5:ab:62:a8:41:6b:56:1e:53:33:1e:96:32:29:
         31:b9:b0:fd:b3:ca:08:92:54:8d:10:88:36:05:1b:b4:24:2c:
         8b:06:aa:0e:28:31:b0:61:67:7e:49:be:6c:b6:7f:ce:73:fd:
         03:52:55:7b:40:69:07:f7:44:9b:54:35:0f:08:50:31:f0:50:
         8d:e0:96:ea:77:ec:4f:8f:25:13:95:9f:3a:1a:e8:43:82:29:
         be:40:89:62:34:8b:89:10:57:9e:44:c0:65:c7:68:79:6e:6d:
         d9:b3:e7:5f:75:3b:ac:7d:a2:51:90:a7:98:02:4b:2f:81:3f:
         f6:df:32:bb:04:aa:1f:7d:e3:e3:21:4c:6d:84:db:98:01:a1:
         e6:ad:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----