Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
File:                     69efde29-08ee-4f8e-ac98-6477bb18db8f.roa (raw, json)
Hash identifier:          dFuab9wEocPH+LG0q10NSV4nf9OUqCJT/Z6aqicuqjQ=
Subject key identifier:   B4:60:84:3F:03:FC:2A:09:4C:18:E3:38:08:6F:73:C9:1D:C9:24:57
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7844AB650E11AA98D2DC6DE701A2CEAEEF3C525A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa
Signing time:             Sun 26 Oct 2025 00:20:13 +0000
ROA not before:           Sun 26 Oct 2025 00:20:13 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        74.250.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:44:ab:65:0e:11:aa:98:d2:dc:6d:e7:01:a2:ce:ae:ef:3c:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:20:13 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=581d0e8f6d8d276521283a5cd834a337450a8be4b8665f7d229bbe0aa8f48219, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:d0:a2:e0:74:cb:c9:31:2a:56:f6:34:0d:
                    3b:6d:12:dc:0a:39:3f:5e:ba:86:b2:cd:f1:00:21:
                    77:d4:6e:d5:41:0e:7b:55:78:94:81:da:9f:65:43:
                    1c:4a:d7:38:39:54:bd:c7:46:42:a7:db:b6:35:5b:
                    b0:4d:31:46:40:83:f2:33:ca:7f:a1:38:9f:d4:75:
                    d6:75:eb:bd:8c:ca:06:91:2a:20:8d:c0:a6:be:87:
                    37:09:75:8a:20:56:1a:f1:e7:5d:66:61:4e:97:e9:
                    0e:a3:5f:a6:4e:3f:54:72:b3:34:a0:32:69:8f:c9:
                    a4:f8:3b:2e:eb:c8:84:fe:80:f9:ab:47:86:6b:8d:
                    9a:e9:bb:9f:1a:02:e0:56:3d:09:10:c5:59:55:a7:
                    5c:4f:62:72:99:ca:ca:98:c3:6f:af:22:af:68:67:
                    4e:c1:5a:86:71:03:88:85:f1:43:d0:9c:a1:53:b1:
                    ea:4e:fb:e5:a2:81:bf:6d:04:4e:8f:45:91:ea:c0:
                    f3:3a:dd:47:42:b5:de:51:da:0a:f5:b2:ee:74:42:
                    65:e0:c5:5e:bc:bd:1d:1e:40:37:b3:44:43:22:53:
                    9d:58:63:00:a3:ad:8e:06:31:a6:e6:6a:24:7e:e5:
                    5e:97:16:30:60:eb:b0:81:20:a6:ac:23:ed:3c:b9:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:84:3F:03:FC:2A:09:4C:18:E3:38:08:6F:73:C9:1D:C9:24:57
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69efde29-08ee-4f8e-ac98-6477bb18db8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:41:2c:8a:d4:de:a1:f6:4d:7c:48:bf:36:6e:14:ff:d7:
         a2:09:be:dc:5a:90:5f:07:b9:21:e7:c3:0b:0b:39:f6:f5:e6:
         a1:36:78:21:d4:e2:7a:eb:b3:64:ae:aa:17:ea:71:97:1a:10:
         20:0c:fc:6a:a0:b1:a5:35:9c:41:c4:1c:81:5f:e6:42:ba:03:
         d8:b0:28:bb:8a:9d:60:11:0a:13:c6:09:b2:70:dc:13:c7:04:
         05:da:60:59:a4:bf:f4:07:2c:b3:42:ea:4c:91:ee:e7:a0:6e:
         b2:c9:c8:d0:11:bd:cc:c1:98:04:51:6d:bf:7b:90:3a:7d:55:
         fd:f0:50:99:34:53:e4:20:3f:f6:d3:21:32:0f:17:c3:07:5f:
         49:1e:43:42:9b:da:86:3a:c6:a1:d0:e1:9b:df:88:bb:1e:0e:
         90:4a:3b:4c:02:18:f5:9a:4b:84:02:9c:7e:ab:06:4d:d5:a2:
         42:d4:d1:b0:e6:93:19:1a:8d:8a:67:4c:52:54:e2:9e:50:1a:
         2a:2f:2b:b1:32:9c:6b:3e:80:2c:1b:ff:79:82:fa:28:4e:f3:
         5f:d9:1a:17:6e:11:9b:67:bd:d4:ab:e9:00:2f:2e:31:a3:46:
         51:ad:37:93:c4:52:8e:ce:07:08:71:06:57:44:31:e4:37:eb:
         1d:a4:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----