Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061b27cc-ed80-4217-9ad7-ac2b1bfbcb7e.roa
File:                     061b27cc-ed80-4217-9ad7-ac2b1bfbcb7e.roa (raw, json)
Hash identifier:          PZxmDmTnxX85EoR8UEOTfYSRv0zusPwMyZNQhEf4vjs=
Subject key identifier:   FD:9C:77:25:0D:7D:06:68:D5:33:44:4D:AF:2F:FC:7E:46:1C:87:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       70619977206E09E6D478F3D38A6BAD05D924A341
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061b27cc-ed80-4217-9ad7-ac2b1bfbcb7e.roa
Signing time:             Fri 31 Oct 2025 00:00:11 +0000
ROA not before:           Fri 31 Oct 2025 00:00:11 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        13.128.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:61:99:77:20:6e:09:e6:d4:78:f3:d3:8a:6b:ad:05:d9:24:a3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:00:11 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b040bf1cd51533d636ea9640d8f78965e25b0a56c5e5323538622af859c5f5c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:40:c1:b9:e3:0c:ec:1c:2d:41:41:ae:ad:
                    62:39:aa:ba:08:eb:72:c1:ce:a5:f4:a7:06:94:c9:
                    65:c3:92:98:5e:20:5e:04:43:bc:79:10:64:1c:3b:
                    2f:8f:62:ce:c0:2d:5c:cb:22:05:f6:ad:03:42:8a:
                    ed:38:87:2e:5d:6a:d9:70:2a:e6:0d:77:bf:c1:12:
                    cc:1b:d5:14:f1:87:38:ef:e7:87:c0:bd:7e:93:0d:
                    a2:a4:20:31:97:f5:86:05:56:b1:fb:48:25:f5:1a:
                    2f:4d:cd:91:eb:e5:e2:c8:2c:4d:b4:64:37:8c:8a:
                    95:11:3a:45:4f:f9:a3:c3:34:e4:cf:e5:df:86:e4:
                    d8:85:a5:12:7b:d3:e0:66:38:85:6b:f9:f4:80:c5:
                    76:35:1c:07:9a:d6:f8:16:88:a2:8e:16:1f:dd:10:
                    01:a5:68:15:c7:f9:91:f4:e1:c6:84:84:54:f6:37:
                    b7:37:50:73:75:88:6d:fc:66:31:8a:0f:6d:9c:53:
                    47:c1:91:7e:bb:09:b9:1f:5f:3f:87:67:84:32:c2:
                    53:c8:d2:79:cf:97:c2:b9:d7:fc:e1:1e:0f:a7:d2:
                    d2:f8:bc:03:55:a9:c7:24:d8:1b:7f:ef:dc:d6:49:
                    bc:f8:f5:e3:ab:33:31:bf:22:d5:78:8a:c5:89:8b:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:77:25:0D:7D:06:68:D5:33:44:4D:AF:2F:FC:7E:46:1C:87:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061b27cc-ed80-4217-9ad7-ac2b1bfbcb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.128.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:ad:15:8d:d8:fb:3d:45:5c:ea:1e:e1:7f:ef:ec:5a:1e:
         66:4e:a5:52:9f:81:e8:f2:45:9b:78:6b:d0:b2:19:71:4d:61:
         23:3a:df:75:b3:c9:bc:5b:e4:ce:7c:fe:73:17:9f:02:f7:a9:
         f2:a5:bd:c7:67:c2:da:df:9f:f7:76:8d:18:f9:e3:05:7b:58:
         de:d7:02:f1:8d:7b:ac:12:9e:44:39:2a:a8:4f:15:59:35:9b:
         3a:ff:ca:9c:6c:5d:7d:fd:d3:81:68:52:39:f6:19:f7:24:23:
         a5:09:d5:cd:96:f3:11:6a:5f:cf:98:bd:0c:94:ad:30:a5:1c:
         94:e9:aa:99:59:41:4b:76:89:43:37:e2:68:9e:5b:47:3f:76:
         66:d7:42:d4:18:62:d6:36:bb:47:9b:49:c8:81:70:2c:41:56:
         7d:45:29:aa:1c:e1:17:bd:eb:aa:cf:88:ef:2c:f4:78:a0:55:
         33:7a:7b:c3:6e:97:b5:df:77:b3:30:f0:9d:5e:15:d4:5f:e8:
         f0:59:83:e8:72:85:b9:c5:83:03:b2:79:f1:bd:07:26:6d:f5:
         2f:ff:b7:a1:e2:27:d4:d6:13:65:b9:c9:eb:2b:0e:b8:90:d1:
         b9:ee:99:36:c0:06:59:c7:5a:67:83:11:08:f9:6e:e5:78:c5:
         9a:60:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----