Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
File:                     090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa (raw, json)
Hash identifier:          lE1w7fAXoOZCsNI3gXh6igl57vJopkBGZycEQsCfy5s=
Subject key identifier:   FE:2A:2A:7F:7E:EA:CE:35:EA:15:BB:AF:9D:6C:F9:AA:54:A7:2E:FA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       78C4B082B2D54A004084BAB8F122633096CE6A8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
Signing time:             Wed 22 Oct 2025 00:00:10 +0000
ROA not before:           Wed 22 Oct 2025 00:00:10 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:b0:82:b2:d5:4a:00:40:84:ba:b8:f1:22:63:30:96:ce:6a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:00:10 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=7dac9f48e04e584e38990082e61e000780069fed9c51dea2b8eb0338205d6ca6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:47:4e:cb:8b:73:4d:40:fa:2a:de:63:e9:
                    4e:1c:b8:98:52:2f:36:ee:c5:65:9c:81:e1:47:7c:
                    c4:92:4f:d7:40:f0:29:22:6b:00:13:7d:76:2f:de:
                    4a:15:35:fe:3b:fe:f7:3e:6b:aa:4b:42:85:48:47:
                    23:69:25:0c:6b:e4:03:ce:fa:55:ed:eb:b1:99:f0:
                    00:34:7d:10:eb:cf:ef:c6:5f:e4:2f:00:b0:02:73:
                    c9:e6:db:13:e9:f5:41:93:61:d7:4e:10:92:4d:6c:
                    37:86:a2:2e:8b:46:a3:a5:2d:d5:b8:45:ff:97:d8:
                    f6:8e:f7:32:93:91:7e:51:3a:e1:39:45:5a:be:9a:
                    83:0e:27:72:95:ab:4e:78:c5:db:ff:14:e3:74:6e:
                    c4:6b:b3:fe:0b:62:aa:4e:12:fe:a0:8b:28:94:ac:
                    53:79:aa:8f:67:3c:14:8e:da:bb:af:4e:17:c4:43:
                    3d:72:4a:91:71:c5:33:fd:d6:0c:92:27:e7:22:14:
                    d4:23:02:ba:2e:59:7f:fa:01:34:83:67:e9:36:1a:
                    95:a8:31:02:cb:89:16:dc:ec:36:7d:2d:c1:3a:1d:
                    23:16:c9:36:23:8f:db:a2:ee:c4:89:13:99:a4:28:
                    46:70:bb:c5:9c:70:1b:3f:0f:f1:83:23:09:18:4b:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:2A:7F:7E:EA:CE:35:EA:15:BB:AF:9D:6C:F9:AA:54:A7:2E:FA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ce:94:ee:fe:af:e0:8d:8b:89:4b:07:45:18:cc:0c:10:87:
         dd:be:cb:15:02:84:d8:f4:7f:81:27:ec:43:4e:ea:40:82:09:
         f9:39:77:33:0e:92:0a:dd:89:6c:77:b4:be:ed:66:d6:f4:fc:
         b2:02:78:48:e1:28:6d:1e:7f:c9:d5:e0:c3:78:c3:b2:c9:db:
         fb:82:1f:db:a6:06:c2:ca:a9:9a:6e:12:64:a6:f1:8e:18:29:
         3a:65:16:26:46:9e:b2:cb:8b:ff:a7:9b:97:57:30:d8:86:bb:
         d8:75:1b:db:0e:5c:f3:f1:83:44:13:35:ee:5e:4b:a5:fe:1e:
         6a:d6:db:0a:b8:2a:8a:5e:fa:19:f5:4a:3a:0a:43:1d:e8:03:
         e8:ce:e8:75:f4:00:00:db:9c:c6:0b:22:16:e8:ff:97:c6:4f:
         57:0b:18:6f:a7:bd:f3:7e:0a:4c:2a:f8:c5:ba:be:47:07:db:
         19:22:e2:70:e5:d2:10:f5:f4:b2:71:57:94:74:7a:2e:7e:8d:
         ba:94:f0:21:ff:83:1e:f2:c2:0e:24:4b:91:77:5a:8c:cd:bd:
         99:75:e2:d8:8c:00:4d:fe:a2:19:c6:2a:fd:82:07:96:2d:32:
         d7:df:0d:e6:7a:c5:5d:45:77:f7:04:d9:15:ad:a7:c8:0b:5e:
         b9:fe:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----