Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa
File:                     28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa (raw, json)
Hash identifier:          IV3gmmVKzy4NFE5WF91tOjwnOC4ns9BXYJ5JxJwSYog=
Subject key identifier:   53:7D:15:63:7E:BE:D8:A5:05:D7:1D:35:18:8B:2F:4E:8F:E1:E4:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28C0DD805625F0285EE4E499BDEBB9132AC9FACF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa
Signing time:             Wed 05 Nov 2025 00:30:59 +0000
ROA not before:           Wed 05 Nov 2025 00:30:59 +0000
ROA not after:            Wed 10 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        24.223.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c0:dd:80:56:25:f0:28:5e:e4:e4:99:bd:eb:b9:13:2a:c9:fa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:30:59 2025 GMT
            Not After : Dec 10 23:59:59 2025 GMT
        Subject: serialNumber=1b3429a2244124d5d5db8c9408ee100a2beed74be4af810833b59066febcfcae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:5c:aa:3d:f5:3c:23:a8:9e:3e:a8:15:45:
                    ab:6e:ea:46:c5:87:05:bb:4d:53:57:1f:33:5e:d5:
                    bf:3e:b0:31:61:6b:3b:9a:bf:b2:db:c2:50:7e:c6:
                    a0:d1:d9:30:50:c0:d9:85:ea:07:d2:e3:48:f8:9a:
                    8a:91:fb:b7:8f:d6:3d:87:49:13:44:e3:bb:f5:1b:
                    df:4f:ca:00:57:18:d9:4e:ea:48:13:17:a4:3c:2f:
                    20:91:4c:88:79:03:95:3e:eb:f1:6e:fa:4c:3b:5b:
                    be:e2:4d:7a:56:ef:e1:ae:64:fa:d2:cc:bf:9b:64:
                    13:0e:a8:bf:bf:a4:0a:89:8a:4b:89:c7:34:ba:86:
                    70:11:b8:a1:b3:bd:5d:01:37:bb:5d:c0:42:f1:1f:
                    cc:21:cb:75:f9:e1:63:cb:22:52:86:b2:cb:aa:99:
                    52:3c:3b:dd:2e:79:53:0e:cb:76:45:3f:59:e8:83:
                    fc:1f:fe:af:0e:85:90:b6:df:27:bd:94:90:2f:a3:
                    c7:4c:4e:d3:74:fb:67:28:40:d9:15:61:04:d1:f5:
                    f5:af:bb:69:33:69:11:ff:53:54:e5:d9:c7:03:28:
                    68:f8:4a:de:0b:8c:3e:43:fc:d5:bf:ac:ce:be:6b:
                    a9:2d:a6:6e:86:53:e7:2e:1c:c7:cb:d7:43:6d:55:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:15:63:7E:BE:D8:A5:05:D7:1D:35:18:8B:2F:4E:8F:E1:E4:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.223.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:2b:f5:67:4f:4a:a6:43:6b:90:d4:94:24:6a:5e:92:af:
         67:e4:54:71:d0:0f:da:d0:65:7e:6f:14:75:a7:85:4d:4d:f0:
         8a:b1:9a:e6:45:01:a3:1f:1e:79:22:c6:84:f9:f2:d4:b8:6a:
         04:3d:e4:d1:69:7b:6b:61:ad:e1:8c:f7:82:e8:96:06:1f:64:
         3f:90:c0:6b:47:4b:c6:d9:96:1d:e4:9b:80:46:d5:bb:22:95:
         6a:31:f8:94:ab:5c:a7:ad:f0:59:3a:62:e0:d2:8f:35:f0:c5:
         03:36:2a:fc:2c:b4:52:e7:19:b9:fa:0c:50:eb:23:50:8e:79:
         8b:09:da:16:50:ff:c1:e9:1b:55:e8:64:04:aa:9e:13:eb:11:
         67:34:1a:d1:d4:30:00:a9:ca:d8:20:aa:01:8e:f4:6b:bc:54:
         85:73:cc:5e:36:0c:f1:1e:78:f9:f0:29:9e:34:08:b4:05:04:
         c0:f0:0c:26:c7:4f:32:fb:3a:37:32:31:14:3a:9a:0d:04:ae:
         4b:39:84:71:ee:e6:97:9e:73:05:61:25:91:8a:09:5c:ed:3d:
         c2:5b:ac:3a:a5:22:da:b3:40:b2:a6:ad:56:6c:f2:31:4d:07:
         e2:ff:c4:9c:f4:8e:4e:02:e3:9c:4f:a8:ad:00:37:19:be:26:
         0c:b6:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----