Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abf8b856-8a46-4dba-8b35-644dd040bc62.roa
File:                     abf8b856-8a46-4dba-8b35-644dd040bc62.roa (raw, json)
Hash identifier:          atsxNejNTI/XE/XY8wETde4Y4z1x9YWK/zTnuY6r1kk=
Subject key identifier:   BB:D9:51:59:69:87:D5:69:E3:DF:89:E5:78:E3:08:57:F0:22:57:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01CE2DC728FDD7CDCF766B602CD41684CFC5E4A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abf8b856-8a46-4dba-8b35-644dd040bc62.roa
Signing time:             Tue 14 Oct 2025 17:41:15 +0000
ROA not before:           Tue 14 Oct 2025 17:41:15 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.132.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:2d:c7:28:fd:d7:cd:cf:76:6b:60:2c:d4:16:84:cf:c5:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 17:41:15 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=b582d811d87295f38ae485c1ba106f33e6b731cb1abbe7e61645055048352b3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:c2:1a:9f:03:7b:ad:9a:31:c0:8b:f2:eb:
                    7f:ae:27:9b:a7:ff:8b:77:3f:aa:1d:14:4b:ce:84:
                    4b:08:9e:f5:5d:18:6a:81:d0:dd:c5:3c:a0:6a:a3:
                    64:96:78:74:69:83:57:3b:d7:2e:62:26:09:c3:ee:
                    d5:a7:c2:57:9f:5e:42:25:32:34:91:2c:21:68:e1:
                    31:74:47:c5:50:ce:ea:b3:79:b5:32:6e:69:9e:8a:
                    20:98:66:74:bc:40:86:07:44:ae:a1:da:a0:af:4f:
                    80:47:73:97:57:f1:8d:b5:56:c5:97:65:ef:bd:ce:
                    13:27:b5:78:f6:81:96:16:cf:43:4f:27:51:b1:ff:
                    12:4f:99:3a:63:a1:8f:fb:98:0a:e5:e7:c5:94:60:
                    2d:68:c2:3c:b4:69:b3:39:ea:2f:0c:cf:42:0d:6a:
                    51:1d:c8:e6:34:80:a9:02:08:0a:21:d6:66:62:3d:
                    90:fd:fa:b2:1a:8d:a8:15:6a:9e:b4:51:5f:a2:f5:
                    74:28:48:ff:2b:3c:83:ec:13:26:78:82:37:36:1c:
                    e1:4d:6a:a1:09:ab:91:46:5d:1f:36:55:1e:6e:1e:
                    ce:ac:e4:ed:a9:63:80:62:69:a9:37:55:98:7c:3d:
                    62:25:16:3e:1e:5a:ac:e0:81:30:78:b8:69:96:fa:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:51:59:69:87:D5:69:E3:DF:89:E5:78:E3:08:57:F0:22:57:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abf8b856-8a46-4dba-8b35-644dd040bc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:5d:e3:10:7c:f0:2b:72:5f:64:ac:65:57:7c:4f:a5:bf:58:
         a9:84:b7:1c:29:3a:1b:c1:44:0f:14:cd:11:fc:51:17:0e:f2:
         24:fb:5a:38:c4:47:98:c5:bf:ae:f2:a5:38:7f:ea:d9:f2:c6:
         5d:17:3f:48:11:c2:12:76:f7:df:13:2a:d4:72:76:b0:af:6d:
         5c:29:3e:90:28:eb:4a:02:be:9b:71:65:ae:2e:c1:27:63:11:
         d3:c2:d2:2c:84:e3:4d:70:be:27:ea:0c:2b:97:9d:d1:2c:07:
         ab:f9:f0:60:25:a7:72:46:ea:94:24:ae:36:7b:c7:39:7e:c5:
         4e:62:5c:8a:33:d5:2e:c3:83:ef:50:d8:b7:2c:44:b3:48:48:
         81:db:81:38:4f:ea:3b:bf:f3:e8:45:ab:a7:ca:e1:98:a6:3b:
         92:23:8e:f8:61:b3:01:81:0e:98:43:a6:9d:07:61:e1:6e:3c:
         9f:83:2a:29:f5:73:4e:f4:40:5a:6a:f5:b0:07:19:f7:00:76:
         66:67:65:e8:32:22:cb:f3:18:0d:cc:f0:f7:79:a2:2f:e6:fa:
         f9:3a:35:72:9a:53:5c:85:ac:62:0d:70:43:0f:11:4f:06:27:
         b4:7d:00:71:31:36:31:44:bf:64:d3:2e:a6:96:47:ce:e0:97:
         f2:16:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----