Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa
File:                     040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa (raw, json)
Hash identifier:          aOASOqJiTWDCLVoSJhf5q7C1enNXZ+/QGziQpZQZdeg=
Subject key identifier:   B2:35:6B:A3:95:3B:1E:AA:2A:36:E1:B6:10:2A:9B:A2:D8:DE:4B:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       757EAA96422CA989D77754D5E92F4176CD2A5513
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa
Signing time:             Wed 05 Nov 2025 00:20:44 +0000
ROA not before:           Wed 05 Nov 2025 00:20:44 +0000
ROA not after:            Wed 10 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        111.64.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7e:aa:96:42:2c:a9:89:d7:77:54:d5:e9:2f:41:76:cd:2a:55:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:20:44 2025 GMT
            Not After : Dec 10 23:59:59 2025 GMT
        Subject: serialNumber=b978740ee2c976333bb56a9b8bb39392ad724911b4849e7558a3f1ffafed3a7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:db:7b:bf:2b:e9:10:f6:cd:59:64:98:77:
                    f0:28:c2:f2:85:73:85:f1:28:8d:41:44:f5:df:67:
                    57:47:ca:33:97:80:19:e3:51:88:ef:b4:82:cb:66:
                    fa:e2:d0:7b:70:16:9b:40:38:8d:96:46:7f:e3:43:
                    43:9d:a5:a4:0b:62:c3:9a:8c:6f:56:90:60:03:3f:
                    3f:93:ee:8c:8c:b9:00:39:4c:0d:c4:de:bf:ae:ab:
                    30:d5:26:6c:a7:09:ae:d2:f6:df:86:96:a5:bb:3f:
                    56:6e:23:f2:38:cd:56:66:5e:b7:4a:ee:a0:54:a2:
                    87:09:59:f4:48:ab:5c:1b:3d:70:cb:7a:84:c9:a0:
                    fb:5c:9d:c6:c1:cd:f5:da:03:71:a3:49:54:83:cf:
                    58:38:09:c2:2d:e6:93:e8:92:5b:57:91:9e:30:78:
                    e9:16:e9:53:f4:d3:08:11:fd:6b:04:eb:db:aa:17:
                    cc:23:86:d7:b9:18:6d:9e:ad:3b:9e:91:2d:fe:2d:
                    e9:e1:2b:e9:cd:03:50:00:95:85:89:ef:4d:ea:d9:
                    ec:0d:c2:aa:34:cb:e6:cf:3f:c2:f1:8c:65:46:22:
                    ed:3b:75:ee:cf:d4:36:ee:a7:72:a0:10:8c:96:bd:
                    62:9e:40:d8:37:d4:73:19:1e:34:4a:ca:53:09:6f:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:6B:A3:95:3B:1E:AA:2A:36:E1:B6:10:2A:9B:A2:D8:DE:4B:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/040bcbc1-80b6-4736-9ed1-2a1e7cf2164f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.64.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:07:fb:4b:52:e6:3d:ec:a0:58:2c:a2:d7:2f:9c:b4:26:e4:
         cf:34:77:4b:fd:eb:04:b8:b7:52:b8:b6:d3:f1:46:29:8f:11:
         33:bf:09:68:b9:ee:c7:0e:d4:20:96:11:83:c1:f6:87:fe:51:
         93:fa:3f:32:31:88:1e:70:10:74:a5:c4:3b:fb:4e:cc:34:b3:
         db:ee:8b:d1:04:eb:04:49:4e:d4:bd:58:5a:d4:c4:0f:3b:33:
         4f:65:ed:32:c4:98:a5:84:dc:78:84:46:64:56:ba:fc:a7:70:
         97:5a:f5:a0:a5:3c:7f:f6:e3:33:d0:a0:b3:0e:52:a5:cd:fa:
         4c:d7:9d:1c:10:59:23:e3:19:a9:58:e2:2d:88:a7:56:87:3f:
         8f:3c:ea:7a:1b:d8:58:47:a7:ec:18:18:6d:79:7f:41:c1:75:
         31:e3:31:34:61:7f:e2:e8:eb:ed:54:1d:e0:89:52:19:73:0f:
         76:00:23:02:2c:f0:49:55:13:64:5c:d9:e2:5a:3b:54:1a:9a:
         c6:92:fd:a1:9e:83:51:1e:cd:c9:08:5a:26:db:41:79:e0:a7:
         32:17:9f:e5:38:0f:4d:39:f6:44:2d:ef:29:f7:7f:28:ea:3b:
         b5:0a:53:95:76:63:01:cc:00:28:ff:95:9a:4b:b2:ea:66:ab:
         37:94:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----