Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d93e9a79-8850-44ab-9a65-5f0be75a91db.roa
File:                     d93e9a79-8850-44ab-9a65-5f0be75a91db.roa (raw, json)
Hash identifier:          NErIYlkeADJLvan/m5Tj377TnMhss9aXHmFEKzj3ydw=
Subject key identifier:   03:86:A4:48:30:DA:9C:45:B5:7E:C5:3D:32:91:F4:F7:53:2B:BA:DC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6114F9A125A490AF589DCF59AEA15CDD18EC0648
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d93e9a79-8850-44ab-9a65-5f0be75a91db.roa
Signing time:             Wed 15 Oct 2025 21:21:53 +0000
ROA not before:           Wed 15 Oct 2025 21:21:53 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        207.94.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:14:f9:a1:25:a4:90:af:58:9d:cf:59:ae:a1:5c:dd:18:ec:06:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 21:21:53 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=cd455d457d8887f7fc2d580f6361d7193eb24817f5b0456b70c3366ea86e97c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:ce:d3:3a:d5:30:91:95:94:fd:70:24:e3:
                    c0:d5:c3:e7:3d:ef:89:ad:11:83:42:29:4c:b2:58:
                    87:68:1e:02:87:33:80:98:7c:6f:d0:83:80:0d:6c:
                    4c:82:72:d0:38:f4:28:71:da:99:53:a3:ab:72:fc:
                    9b:9b:4a:90:45:37:93:53:56:bc:92:13:ff:d0:99:
                    08:a0:eb:80:28:bc:19:f1:87:76:9b:f9:1a:43:21:
                    4a:a6:2e:e1:33:8c:47:75:52:ac:39:0c:bb:a8:83:
                    89:99:a2:e0:c5:25:99:8e:32:7b:bf:da:50:dc:fd:
                    4a:3c:d9:2f:a0:c0:1b:b3:44:15:49:d5:80:92:23:
                    4a:28:5b:08:d2:df:b8:0b:f5:34:69:5b:91:33:75:
                    e7:bd:44:42:79:ed:b3:78:6a:05:b1:f2:87:6f:55:
                    8a:74:b5:db:60:6f:5f:34:d5:91:cc:f7:1e:9b:0e:
                    f6:79:3a:b6:73:ba:fc:5b:68:71:41:53:ff:3e:91:
                    81:98:bd:d1:d0:f6:0e:cf:39:9f:16:38:dc:10:c6:
                    af:7e:f2:7b:ba:40:be:30:2d:7a:24:3c:97:ec:15:
                    30:f0:87:23:be:f7:0c:89:a3:b4:51:51:98:86:1a:
                    5f:b5:d7:02:d1:e8:50:a7:ff:9b:26:19:72:f3:d9:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:86:A4:48:30:DA:9C:45:B5:7E:C5:3D:32:91:F4:F7:53:2B:BA:DC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d93e9a79-8850-44ab-9a65-5f0be75a91db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.94.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:0f:86:eb:6d:b0:a8:2e:1e:0a:8b:f4:cb:9c:db:03:93:
         b9:4a:57:a4:33:cf:e9:ba:c9:e8:fe:9b:85:06:a8:da:e6:da:
         6e:ed:17:bd:b3:ef:51:c8:86:1a:cc:35:05:31:36:b1:56:a1:
         9b:21:75:e2:ed:03:e8:5c:db:a6:a9:a4:3a:b1:75:31:b7:21:
         5b:1b:77:3f:94:1e:eb:a1:6c:4d:4a:b8:96:29:a2:46:08:5c:
         cb:16:a9:79:bb:5c:c1:b7:5e:50:d2:1a:79:ed:0c:68:20:6a:
         0a:e7:93:f3:fc:61:81:24:0a:af:d6:45:89:71:d4:4f:2a:59:
         b1:a7:1c:27:b8:f5:14:68:e9:49:19:dd:88:40:bc:ed:4d:09:
         42:35:a2:b8:5a:9b:75:4a:80:0d:ea:56:71:5d:ff:1c:de:e1:
         21:be:1c:36:50:e0:69:74:4a:4b:3f:1e:d4:76:9f:ff:0f:9b:
         36:dd:ac:c5:2d:dc:8b:e8:4a:d3:eb:5a:6f:a4:ef:e3:5d:e9:
         67:ce:0b:28:d6:5e:3f:84:a9:aa:d0:8b:ae:6a:8d:13:74:f4:
         6c:e4:86:c7:11:83:b9:b5:00:09:5a:4c:5d:27:70:be:6a:6c:
         08:7d:4f:24:c3:fe:1b:5b:28:18:76:8f:33:4f:4b:90:9a:e8:
         92:c7:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----