Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa
File:                     0f748045-d4b6-49e0-8960-3f89906b3806.roa (raw, json)
Hash identifier:          7TPijZecUmKgdNQSIxfUvUOVHirAdGmOncMixO8tlVs=
Subject key identifier:   28:85:08:AB:EB:74:E4:E4:4B:83:58:A3:E4:B7:0B:BA:A9:43:88:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       44686A1558645FF2C86BC6241EF142737CDC1CD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa
Signing time:             Sat 01 Nov 2025 00:30:08 +0000
ROA not before:           Sat 01 Nov 2025 00:30:08 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        172.106.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:68:6a:15:58:64:5f:f2:c8:6b:c6:24:1e:f1:42:73:7c:dc:1c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:30:08 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=26df96a9bbf07a86c2e4d6bc26bacec7c2eb966f48d81973a634c6d7f08e35e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:b2:83:f8:f1:77:6d:ad:c4:b1:37:3c:11:
                    a4:4d:d4:40:c7:e3:a9:82:5c:f6:c9:ba:b0:a9:e6:
                    56:8c:9d:56:bf:e4:0a:f3:7b:cb:95:83:92:98:cc:
                    b9:65:a4:a3:59:4f:b6:e5:73:fe:a5:3b:75:ba:2e:
                    66:2a:57:ca:84:81:e4:03:d1:ef:ed:ac:2a:54:43:
                    f7:35:8a:df:9b:61:e2:8b:0f:d8:cb:f6:9c:d0:e5:
                    96:77:45:43:d3:ab:c8:38:f5:2b:cd:6f:d4:c3:f8:
                    a4:41:aa:cc:73:ba:1d:44:7d:b8:e8:5d:eb:e4:2b:
                    f7:34:7b:35:e3:59:8f:e1:4c:08:a1:fa:f8:40:50:
                    5e:4c:c5:95:b2:e9:03:86:cc:b6:2d:1a:1e:a8:9d:
                    33:f8:8c:95:82:36:97:6c:70:dc:be:54:e0:7c:d6:
                    61:36:a5:99:20:bb:23:82:a3:1b:79:e8:b7:87:29:
                    0b:08:bf:76:a5:ba:51:c5:05:7e:e2:42:cf:c8:be:
                    c5:37:53:d1:10:7b:b5:b5:57:e0:13:a4:49:d9:28:
                    82:99:c6:25:4d:ba:65:f9:af:f0:3d:8c:1d:85:88:
                    3e:cb:a8:1f:aa:d6:a0:a9:78:49:d6:98:a5:fc:b6:
                    c9:9b:3a:06:db:33:a3:e9:52:65:06:50:5d:ae:21:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:85:08:AB:EB:74:E4:E4:4B:83:58:A3:E4:B7:0B:BA:A9:43:88:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f748045-d4b6-49e0-8960-3f89906b3806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         cb:c0:4d:6f:79:c2:2d:ce:3b:31:34:b7:f7:44:ac:2d:99:07:
         03:9b:15:d6:0a:df:9e:50:02:03:7f:49:6c:5b:4c:7d:20:0f:
         8c:09:3c:d4:d1:7e:cb:1a:01:12:f4:75:7c:9f:14:57:11:5e:
         6c:60:40:73:b5:31:6f:6e:97:dc:0e:b6:f8:df:94:95:f1:27:
         e2:f7:8b:26:65:72:c3:a2:e4:af:d1:57:83:ba:e8:0b:0d:02:
         2a:ce:ee:52:12:06:fa:37:62:9b:5b:a0:10:62:84:c9:68:a9:
         46:49:ff:fb:68:c8:c5:79:a7:b3:72:78:40:38:1a:f7:d7:04:
         a4:e8:06:3c:6d:99:77:7e:0d:c2:0f:99:41:0b:dd:f4:ee:85:
         80:6e:4c:c2:29:37:9d:dc:11:7a:6b:27:a3:cd:fa:c9:1d:a8:
         6e:25:67:ea:90:55:18:5b:c2:62:f4:2c:91:17:5f:6e:d1:49:
         c6:c2:9f:26:55:a5:74:b3:f4:3a:a8:9d:ba:5f:94:a6:43:5e:
         3d:4a:4f:e9:06:cd:8b:12:e2:b7:a9:e0:d4:73:ed:b8:ed:2d:
         2f:39:e4:3b:61:72:17:8f:3e:03:e8:23:56:16:d4:c8:94:d1:
         fe:f2:cb:39:23:30:e5:ba:74:4a:e3:47:25:b6:72:92:a7:ea:
         7d:c7:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----