Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa
File:                     24c1b164-1e16-47fd-82f2-efe4d71ef363.roa (raw, json)
Hash identifier:          9cdQaEHQu46sJjkZu2M53rc2O8JpFts6leNMSZgyA3E=
Subject key identifier:   86:C7:DA:35:36:25:3B:A2:4D:C3:26:5C:39:BF:49:19:92:35:C3:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6555A201F63C794C71FCB635D37346C78193DFA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa
Signing time:             Tue 04 Nov 2025 00:20:06 +0000
ROA not before:           Tue 04 Nov 2025 00:20:06 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:55:a2:01:f6:3c:79:4c:71:fc:b6:35:d3:73:46:c7:81:93:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:20:06 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=94ff20c2d2043795ca5594d0abce013300f30e47bff31f5532f17fbdf51e6973, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:5f:cd:3e:a0:61:87:f6:81:11:8c:b7:d0:
                    c6:a6:dd:69:59:43:eb:63:d5:08:11:6b:65:aa:c7:
                    ce:23:e3:fa:8d:dd:2c:ff:04:67:65:e8:de:32:25:
                    f8:97:95:cd:d8:32:cf:9b:c7:09:2c:c9:90:29:dd:
                    4d:7b:6e:c9:b2:2b:b4:34:e9:bb:a8:10:af:d9:e0:
                    96:64:a6:96:e0:3a:d7:0f:79:fa:14:2a:c3:5b:0f:
                    61:5b:c0:69:f8:6a:d4:9e:4c:86:44:5b:49:f9:a7:
                    ae:6f:2b:26:b2:a4:3b:2a:4f:ab:d5:67:0e:e0:ee:
                    9c:f4:b4:58:4b:b8:2a:9c:a4:24:9e:8c:01:d3:eb:
                    09:ba:0c:21:87:6d:6d:15:1d:fa:39:3a:d1:ed:62:
                    c4:35:91:f3:91:82:50:32:1d:a8:34:a8:49:0b:1e:
                    39:86:e1:f8:a0:32:36:5e:d6:ee:0c:59:1d:94:f5:
                    36:d2:58:96:94:a1:5a:11:10:85:3b:9c:47:c2:4c:
                    f2:a2:6e:83:e6:da:f8:42:77:0b:c3:d2:87:85:ed:
                    6a:9d:8c:55:ad:e8:90:a3:c9:88:65:da:92:a8:69:
                    55:c8:f2:bb:21:68:79:fc:d9:38:84:40:de:1e:67:
                    8a:d4:0a:1c:b1:18:58:68:27:4b:b9:df:ce:89:29:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C7:DA:35:36:25:3B:A2:4D:C3:26:5C:39:BF:49:19:92:35:C3:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24c1b164-1e16-47fd-82f2-efe4d71ef363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:8e:89:f9:71:d9:0b:fa:29:23:88:e3:c6:ec:a8:ec:3e:
         cb:72:41:0d:db:1f:6e:11:26:f7:f0:c0:c0:49:f1:62:74:f8:
         a2:c6:75:b4:1d:02:04:f6:57:17:4a:ad:71:f1:49:bf:7f:88:
         f4:85:ca:e1:49:13:5e:e8:20:a1:3f:85:cd:7f:f8:59:fc:82:
         1a:da:82:1a:08:d8:e0:07:8b:a1:06:bd:42:84:1a:c7:b7:43:
         36:4e:4f:19:2c:78:bb:83:22:81:68:1c:61:e4:0c:79:b6:94:
         d4:ef:bd:52:26:c7:96:d9:dd:b6:bf:bf:37:f9:6d:7c:00:7b:
         94:74:6e:75:4a:3f:dd:e8:4c:62:c6:d7:0f:e9:86:98:95:b8:
         c8:6b:0d:9d:9a:33:15:d5:2f:16:6a:c3:5e:18:fa:91:59:76:
         16:57:4e:0f:62:38:cf:58:7c:ce:60:36:e4:57:e5:54:ff:e6:
         05:b2:80:ce:69:0b:7f:c5:71:f1:11:d1:61:54:4e:ad:55:95:
         b3:c8:f7:c1:9a:c0:96:dc:f6:58:9f:9e:74:e7:d3:51:83:2a:
         8c:91:09:52:b2:4e:f5:00:dc:43:91:f0:e1:f3:2c:bb:c4:c3:
         9b:6f:68:26:82:3f:a5:db:53:3c:e2:50:17:e8:cb:b4:0f:a2:
         d4:c6:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----