Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa
File:                     082d66b3-889e-4481-afbb-96a790257d9d.roa (raw, json)
Hash identifier:          24QLnYEd1GkSpVHAUy8azwkIHXye33iyZq/G7fBxT9c=
Subject key identifier:   47:76:AF:6D:1F:FB:C7:D8:4C:92:03:31:42:B6:D3:12:85:6B:FF:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       72DAE469EE04E373C0695A9DC1C502A08745A2BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa
Signing time:             Tue 04 Nov 2025 00:10:29 +0000
ROA not before:           Tue 04 Nov 2025 00:10:29 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        114.58.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:da:e4:69:ee:04:e3:73:c0:69:5a:9d:c1:c5:02:a0:87:45:a2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:10:29 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=3ac397e157f0f6497b2b55dc55d0267902632009a208c2ded6970ff50bc42b10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:13:f4:c2:88:ad:7d:2b:fb:fe:4d:9e:4a:
                    ae:0e:62:74:52:9f:47:2f:4d:ad:2e:7e:bf:7e:57:
                    37:32:b0:c0:57:bb:5c:95:10:a2:77:1f:53:9c:25:
                    ce:58:9f:3e:34:b0:59:8d:4b:ab:aa:f9:f4:da:4c:
                    2c:96:55:41:70:05:d4:c7:68:b9:17:93:b5:a2:05:
                    92:19:83:6b:14:f2:01:38:79:4a:eb:c7:1c:6d:03:
                    98:da:ae:eb:54:76:d4:e6:d0:a6:aa:64:93:5a:c5:
                    05:6f:85:e3:e8:c7:13:b0:cb:7d:23:39:cf:62:e5:
                    77:41:7b:4b:55:b3:03:02:78:74:39:93:26:d3:2a:
                    03:50:bd:49:2b:c8:0b:e9:e9:75:76:88:fc:65:55:
                    10:d2:d1:eb:b1:43:cb:61:b6:5d:b4:e8:92:ec:e8:
                    20:3e:28:e1:01:ad:f2:0d:4b:2c:f1:1e:92:1b:41:
                    d2:4a:00:a4:cb:74:1e:52:44:0a:aa:48:9f:73:47:
                    bd:40:40:3b:4d:4a:f0:08:7f:28:79:8c:9b:46:2e:
                    fa:38:b8:4f:20:c0:50:34:66:4e:4d:84:cf:a4:c5:
                    6b:22:20:55:f5:e3:f8:97:fb:d2:e9:7b:c1:e8:27:
                    d2:ab:01:90:89:38:57:80:76:94:23:b4:15:a0:7d:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:AF:6D:1F:FB:C7:D8:4C:92:03:31:42:B6:D3:12:85:6B:FF:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/082d66b3-889e-4481-afbb-96a790257d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.58.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:a9:2f:9d:74:ec:a0:95:c4:22:47:cb:8b:a0:7f:ea:36:
         a0:55:39:be:28:fe:9b:58:3f:73:a0:a1:45:c0:70:d9:80:79:
         57:01:ef:fd:8c:17:77:34:8d:65:59:65:4f:82:ea:d7:92:a0:
         f3:69:42:20:fa:ab:9d:fa:10:64:0b:71:8c:10:dd:e0:b4:b8:
         34:28:c1:7a:bf:7a:56:90:45:fb:c7:f2:b2:4b:86:63:54:76:
         a5:da:58:e2:c1:08:a0:6f:c9:f8:5e:03:ac:38:5b:48:4a:21:
         54:12:f4:94:85:4f:07:1f:fc:3f:55:55:35:db:c3:9a:a7:04:
         94:e1:61:b2:a8:c8:12:55:04:65:93:f8:e8:03:3d:0e:89:41:
         01:fc:14:1c:28:63:19:8c:19:b9:74:4c:8c:e5:d8:08:82:a7:
         87:ce:d7:74:91:60:4f:4e:b2:11:a3:25:03:e5:bc:eb:fd:91:
         ba:51:f9:e1:2b:32:06:98:50:86:57:f6:38:d0:26:86:c4:5a:
         41:8a:cb:d7:9f:6e:1a:ac:9c:83:0b:9d:9f:25:03:0c:e4:3b:
         77:62:2a:22:60:ce:78:1c:96:f1:a2:08:be:9d:e3:d4:3e:2f:
         ac:a7:e8:d8:3d:70:79:2a:27:bc:6b:5b:79:18:50:18:74:f3:
         e0:95:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----