Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa
File:                     bd222a65-748c-46e7-882d-3919ea56fa41.roa (raw, json)
Hash identifier:          4EBzROzVjH7u9upLrxutDaXPmhJxk/6FdPSfeISsVM4=
Subject key identifier:   8B:89:D5:17:E8:72:9A:59:4A:9E:17:D9:CD:BD:9E:75:A5:41:6E:1F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2689FD18AEDE08DC58E2C47BE06D44C0BADE17CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa
Signing time:             Sat 25 Oct 2025 00:01:17 +0000
ROA not before:           Sat 25 Oct 2025 00:01:17 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     54113
IP address blocks:        162.219.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:89:fd:18:ae:de:08:dc:58:e2:c4:7b:e0:6d:44:c0:ba:de:17:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:17 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=2e0b67fc56dc38291ecd8686e0965232ef485a5968b59f42b584f06cded63e4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:7b:44:02:87:d0:6c:b0:8f:c6:23:50:09:
                    3b:89:90:02:20:f3:6f:99:7c:13:c1:3d:02:cc:d9:
                    73:c9:ed:a2:67:df:97:fc:32:c9:f7:6d:0f:db:f5:
                    10:46:42:5a:f5:0a:1c:74:2e:69:3b:10:49:f9:30:
                    3a:5d:29:71:d1:2b:8d:ef:d6:1a:31:5f:27:ee:35:
                    6c:48:a2:cc:4b:bf:4f:b2:47:76:3c:a5:8c:e5:90:
                    ce:6a:73:49:07:a8:27:ec:e1:d8:a4:fd:c0:de:ea:
                    e4:ac:3a:61:2b:6d:e0:b5:bd:4b:ff:06:70:fc:f7:
                    28:55:97:1a:3b:7e:e0:e6:71:77:fb:75:2d:89:a6:
                    4c:ca:1c:05:fa:bf:e2:6e:00:74:15:cd:2b:b4:09:
                    3b:e0:15:03:d9:3c:e8:46:d7:83:2c:ac:4b:51:4d:
                    16:72:d5:fc:fa:39:fc:ac:0e:1d:23:38:6e:f2:c4:
                    f4:47:3d:82:b0:37:32:eb:4b:63:f7:62:f3:ce:0e:
                    07:d7:26:b0:a3:82:6c:73:36:79:d6:92:5a:a7:65:
                    45:7b:48:b2:f2:78:a1:02:94:fb:1a:2a:f0:e4:5b:
                    73:12:78:2f:88:37:f8:bf:92:7a:ec:ae:6e:bf:8b:
                    42:e0:f6:95:ba:24:65:de:ad:93:f2:20:28:d7:af:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:D5:17:E8:72:9A:59:4A:9E:17:D9:CD:BD:9E:75:A5:41:6E:1F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:33:f5:c6:0d:66:2a:fa:d3:97:5d:3d:f0:e7:3f:8d:21:
         e4:3e:93:6d:5f:d1:89:87:f2:d0:a8:c6:41:c9:91:96:62:bb:
         d3:4f:11:e3:30:c8:89:f5:21:04:a0:4b:67:7a:58:09:2f:11:
         b8:b6:35:e7:69:63:07:25:c4:37:7a:f9:20:f4:48:9d:ab:06:
         8a:79:ca:f5:12:92:19:fd:00:cb:5f:2a:0d:76:24:fa:7a:bf:
         0f:dd:81:a2:25:0e:ab:23:44:f5:30:20:40:1b:82:e1:5c:f2:
         ad:63:84:72:84:b6:c2:87:ba:12:ac:27:ab:80:19:64:21:7f:
         e9:54:63:e3:da:98:19:75:ac:10:0a:ca:fa:fc:10:51:fe:7b:
         2a:43:d8:35:61:54:b8:e8:c1:bd:cd:c3:02:df:96:b7:e5:24:
         77:fb:c7:c4:9c:4e:73:d6:3e:37:9f:de:e2:b6:d4:fb:56:9a:
         9d:cf:4e:5b:1f:15:5d:aa:71:e4:2b:e7:ff:f3:09:cb:a2:83:
         ef:cc:54:d0:20:24:c4:91:9d:e8:b0:dc:51:d8:27:2d:b5:63:
         56:26:f8:91:11:3c:2d:8e:75:43:45:6b:8d:67:05:14:60:be:
         84:99:48:57:64:94:86:e7:6f:b9:d3:b5:4b:6c:61:46:3d:bc:
         b9:62:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----