Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa
File:                     3c569629-a4ef-463e-a6a6-70022ce4aea3.roa (raw, json)
Hash identifier:          yRzFE85skrYqWXYg5l3Kiu2Yw1VtNH94jnPCz3J57wQ=
Subject key identifier:   A4:18:55:31:8B:CE:AF:7D:B4:E2:DE:06:53:E4:AE:BC:C6:C1:15:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       467E8831300EF5E87B9E54C5063F42F29FAEC73B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa
Signing time:             Tue 21 Oct 2025 00:50:07 +0000
ROA not before:           Tue 21 Oct 2025 00:50:07 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7e:88:31:30:0e:f5:e8:7b:9e:54:c5:06:3f:42:f2:9f:ae:c7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:50:07 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=7eb147c64ba0694c3507bf1a54867c0743140d3604bc83a35ac4f1c1db9df48d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:37:62:ad:3d:74:3e:f0:d4:85:a9:c4:9d:
                    ec:cb:82:52:a6:6a:77:3a:d5:90:ca:13:82:15:33:
                    91:c6:26:40:41:11:4f:cb:a1:bc:0e:86:f8:ad:88:
                    f8:14:d7:d5:4d:9d:4c:2f:64:56:3c:13:aa:f7:d1:
                    71:49:30:dd:47:2b:1d:6e:5c:14:7d:12:91:73:25:
                    67:5a:35:da:59:e0:74:f5:9c:11:db:ca:40:41:e1:
                    61:4f:fc:60:4f:ba:97:c2:20:2c:77:0e:15:ab:97:
                    96:17:39:e6:cf:1d:97:98:9f:51:1b:65:1e:26:8d:
                    e6:fb:f3:7f:cd:40:b2:d3:d4:d2:e3:26:eb:26:d2:
                    74:a9:c8:c6:dc:6b:1d:48:b8:4b:05:e1:96:16:4c:
                    c2:65:c8:2d:8b:96:57:bf:35:a3:4d:e4:40:ac:43:
                    7b:47:03:00:ac:9d:a7:3c:04:11:92:e7:b3:0a:fc:
                    3b:1b:0b:19:ac:68:c2:11:dd:48:e0:4f:80:47:55:
                    5f:38:6a:01:2b:19:af:4d:87:f5:a2:61:b8:57:21:
                    0c:4f:d1:00:b8:48:28:2c:ef:f6:7a:9f:be:d0:c2:
                    c0:5c:b4:db:7f:68:28:60:68:a9:1b:0a:32:a4:00:
                    a3:89:d9:48:8c:18:45:2f:2d:03:a4:c8:4c:5f:58:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:55:31:8B:CE:AF:7D:B4:E2:DE:06:53:E4:AE:BC:C6:C1:15:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c569629-a4ef-463e-a6a6-70022ce4aea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:7a:dc:f1:f2:de:16:33:3e:29:6d:db:cb:47:7f:29:3c:
         19:a6:6c:26:ae:fa:84:a6:b4:2a:2f:35:67:b8:cd:dd:b0:32:
         9f:e0:ed:cd:1b:02:85:23:15:21:9a:76:43:53:c6:54:56:52:
         d4:05:e9:79:a5:25:78:6b:8f:1d:df:c4:47:1e:00:20:80:f1:
         f2:0e:23:f4:26:83:f2:d7:a4:25:9c:a4:1f:c7:3e:0a:3d:29:
         b8:2c:d7:87:ff:a7:dd:a3:60:2f:35:cb:2a:38:05:cb:4c:4d:
         3b:37:17:7f:2c:f0:b3:53:f2:92:f6:44:2e:36:51:2d:f6:a3:
         69:dc:4e:91:ed:a0:2b:36:45:81:e5:bc:63:71:d7:40:2e:95:
         67:05:d2:fd:0a:11:08:18:e9:06:a7:7a:90:19:7c:f3:10:f2:
         79:00:c8:83:fb:a1:54:7d:9b:bd:15:0e:81:05:de:87:9c:e2:
         fe:1f:eb:c6:5c:79:19:97:8e:19:cd:96:fd:a4:f2:3d:22:a8:
         aa:d1:fa:c8:4d:ab:92:ec:3a:b2:36:e5:74:90:04:f4:b5:79:
         85:aa:26:c8:87:15:75:67:e4:a6:db:7c:f0:9b:d4:ff:e6:b8:
         f2:81:80:c6:2a:62:4a:bf:b5:0a:24:33:73:fc:f5:33:30:1b:
         b1:ca:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----