Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa
File:                     7154b655-2eb9-4fb7-bbc3-c275f8499135.roa (raw, json)
Hash identifier:          wePh6RAo1Zdj3D9lcJ3TGD0CDDcIxowJRbPiIlZaIAg=
Subject key identifier:   15:28:88:B5:12:32:87:BB:34:E0:B6:9E:98:A6:0B:6D:AE:51:26:60
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5965AEC481DD1B31293C63172CEF9CD72E46B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa
Signing time:             Sun 26 Oct 2025 00:30:15 +0000
ROA not before:           Sun 26 Oct 2025 00:30:15 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        70.232.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:ae:c4:81:dd:1b:31:29:3c:63:17:2c:ef:9c:d7:2e:46:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:30:15 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=dacbaa74de28d99218abc0f0fd0dd4b2419cf6e1db3b42e1e221786878783616, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6c:18:00:db:d1:39:68:06:85:b3:09:85:46:
                    fe:39:22:a3:93:17:68:5a:23:8e:4a:60:fe:a2:7d:
                    96:04:9e:56:f6:7f:8c:9d:58:eb:e7:cd:43:0d:8b:
                    69:c4:78:d0:eb:f7:a4:11:af:d3:94:5c:fe:b3:11:
                    c3:b3:aa:95:b3:ca:15:ef:01:2a:1a:3f:37:1f:79:
                    43:19:1d:8b:7d:25:a5:e7:6c:21:be:9c:0a:4c:b8:
                    9f:85:dc:19:1c:b3:53:7d:e8:67:94:e8:11:67:ba:
                    7e:26:d5:4e:14:39:08:16:78:9a:0d:b2:17:8f:32:
                    9b:a2:d0:d7:4b:76:84:ca:fc:98:d2:df:5a:c7:55:
                    b8:2c:d4:66:45:44:fc:cd:28:5a:87:c9:71:98:78:
                    ed:10:ff:27:18:7a:04:b1:69:d3:73:ff:7f:34:a3:
                    b2:e4:66:87:87:78:b9:b3:ee:85:6d:77:f9:03:8f:
                    f5:44:17:55:f1:57:07:4f:95:77:68:f1:b2:44:81:
                    47:dc:0c:81:61:c8:23:33:54:cf:99:09:7a:81:b1:
                    c3:6a:21:bf:46:3d:6a:2c:e4:7b:3a:e2:94:b4:0c:
                    0b:f3:10:df:83:53:13:6e:a1:27:8d:3b:25:f1:ba:
                    25:2a:65:81:fb:ff:8c:99:60:d7:c0:c7:5d:74:c7:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:28:88:B5:12:32:87:BB:34:E0:B6:9E:98:A6:0B:6D:AE:51:26:60
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7154b655-2eb9-4fb7-bbc3-c275f8499135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:6c:76:ff:fc:1d:21:5b:6b:21:5f:b5:f7:4c:f4:a2:bd:
         2f:63:ee:8d:1e:1d:08:a9:30:41:9d:6c:b2:35:06:1a:3a:a1:
         fa:71:3e:c4:3d:5e:94:04:cd:62:ad:93:54:92:9c:e4:36:06:
         ea:62:83:bb:e4:f0:45:b2:ca:95:95:c5:84:44:00:15:1d:7a:
         f2:52:24:26:39:2d:94:b5:a9:2e:bb:d0:04:ff:5b:92:7a:d9:
         eb:74:47:fb:3c:6d:50:7c:d9:af:6d:c6:77:93:6e:99:30:2a:
         82:e7:53:f8:b7:fc:84:eb:0a:06:6f:ea:45:76:04:c6:cf:a5:
         5f:7b:c0:ac:11:34:25:bd:be:e6:d5:36:e3:43:36:13:2f:42:
         91:86:43:c8:37:f5:0a:82:3f:ae:3b:00:b4:28:9d:97:a3:b1:
         de:cd:bd:38:79:aa:32:3b:61:99:3b:68:ed:11:62:87:2d:21:
         8c:a1:f4:3e:66:3e:34:d8:4f:82:90:de:37:18:a0:5a:3f:44:
         77:4b:5a:20:af:86:ae:88:31:a1:68:97:f6:c1:b2:ff:6b:69:
         84:52:0f:44:32:11:1a:eb:3f:e3:12:41:d9:df:c6:d3:5e:52:
         9a:84:c8:88:f0:0a:28:68:ff:e5:4f:d2:e7:d9:1f:eb:73:c7:
         9d:99:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----