Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d81764-9880-4cf1-b78d-e59537a10d1a.roa
File:                     a3d81764-9880-4cf1-b78d-e59537a10d1a.roa (raw, json)
Hash identifier:          unqbjE35Bsn9ii+PAOLGBky7HRsOlOWgDVUxjkG4ews=
Subject key identifier:   89:8B:AB:A7:B5:A6:D0:68:AD:13:BA:A5:FF:E3:BE:8B:82:FF:D9:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23746CFCB122DF6D5BC5BB858D73082A51FC9AC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d81764-9880-4cf1-b78d-e59537a10d1a.roa
Signing time:             Fri 31 Oct 2025 20:53:32 +0000
ROA not before:           Fri 31 Oct 2025 20:53:32 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.2.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:74:6c:fc:b1:22:df:6d:5b:c5:bb:85:8d:73:08:2a:51:fc:9a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 20:53:32 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=9e648b4a65c19ecb456963cd604bc66d21842cbce9a75677894e2058498f60df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:e3:d9:27:08:94:65:4c:00:71:fb:be:e5:
                    ef:6a:73:82:8e:3c:12:9f:b2:5f:b5:a5:72:3b:fb:
                    c3:95:38:36:aa:a8:7b:09:53:32:09:33:7c:3b:02:
                    10:b7:a2:92:1c:f5:e2:9c:d1:b6:97:55:4b:07:63:
                    01:9b:0d:72:57:a3:7f:46:31:9c:a2:aa:c6:a7:df:
                    e0:e9:af:3a:fb:5b:94:c8:fb:a6:23:3a:64:5a:5a:
                    2f:ec:34:f7:12:39:90:27:2e:28:b7:db:10:76:b9:
                    4c:02:94:be:28:56:ad:03:8a:17:f4:50:93:f3:56:
                    62:c7:97:e6:2e:c4:a5:4a:3b:a8:83:33:e9:6f:36:
                    9a:94:cc:91:1c:0b:b0:a6:3f:d4:f0:7b:a4:08:ad:
                    a8:18:8e:21:e3:f1:e7:41:0d:80:4d:56:dc:9b:ca:
                    f5:76:48:d4:ca:3a:ed:5f:97:f4:28:fd:5e:61:7a:
                    2b:03:8d:ce:4a:62:4d:65:e3:3e:66:61:c6:6b:16:
                    b9:8c:73:aa:46:f9:e2:8b:81:47:c4:0c:4c:f5:92:
                    bb:02:b1:8c:20:19:f4:a0:44:a4:66:7a:49:b8:0a:
                    c6:3b:73:3c:39:b9:a3:26:ae:fb:f2:11:c5:b7:cf:
                    2b:17:15:a1:65:49:2a:6c:5a:70:78:29:28:bb:88:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:AB:A7:B5:A6:D0:68:AD:13:BA:A5:FF:E3:BE:8B:82:FF:D9:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d81764-9880-4cf1-b78d-e59537a10d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:70:d9:d2:23:46:d8:36:c0:0a:02:04:4f:f3:0d:04:07:a5:
         1a:76:0b:d3:c2:36:0f:70:ad:51:1b:75:94:85:66:f2:0b:c3:
         38:d8:69:f2:eb:d9:cd:2a:5b:f8:7a:9e:45:61:70:8d:71:be:
         4c:95:2b:a8:6b:16:84:04:70:5d:da:40:a7:e9:47:ef:62:81:
         42:b1:bd:84:11:52:ee:cd:9e:43:61:43:36:51:9b:0b:c9:aa:
         d0:72:ff:a5:00:39:e5:5b:34:95:03:aa:60:24:da:82:e2:81:
         04:82:25:fb:5b:bd:6a:47:5e:8a:c6:d1:11:49:61:7a:29:8f:
         f3:77:5e:e1:8c:5d:af:0a:a1:4e:b4:ed:33:c8:a4:d3:3e:43:
         39:82:8f:8f:c2:22:48:22:71:ec:d1:5f:b0:69:b4:31:a3:b0:
         86:55:8e:10:e9:93:13:3e:93:01:3e:d2:b8:96:26:05:04:c6:
         b0:4b:b8:02:b2:0f:b8:ed:b8:b2:4d:e6:5a:95:a2:44:54:a2:
         00:25:91:5b:65:95:8d:71:3e:d7:1b:85:2c:ed:22:2a:83:80:
         6e:15:47:e7:63:08:e2:67:e7:03:2b:01:05:b2:7f:a8:e7:e8:
         8e:46:85:70:30:59:ec:a3:12:b2:b7:23:ba:af:3c:a8:ad:f2:
         fd:46:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----