Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa
File:                     c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa (raw, json)
Hash identifier:          Uk+J0VjZRnuWI2NpHBcLqP/GGPIbYplOUPSrvYoN9vo=
Subject key identifier:   C5:9B:4D:7D:7C:9D:0A:32:4F:CE:11:72:FB:48:97:96:79:E1:39:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A7A5B5D5F01C88E091ABDEC1887BF7D86E7BBF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa
Signing time:             Fri 31 Oct 2025 00:30:51 +0000
ROA not before:           Fri 31 Oct 2025 00:30:51 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        44.203.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:5b:5d:5f:01:c8:8e:09:1a:bd:ec:18:87:bf:7d:86:e7:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:30:51 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=970ee49e3fcdb9ec2f22656f99d321b37b5376577a487a6cd9a61b403f003869, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:ad:40:fb:aa:4f:5f:39:5f:de:59:f2:14:
                    89:92:35:43:7a:e8:8d:cb:16:24:91:f5:cf:8a:73:
                    48:48:4e:c2:d4:2f:b0:f2:5d:b8:fc:f8:f2:36:ce:
                    cc:2c:de:ba:b6:0c:04:b1:ce:96:1b:62:0b:6f:0e:
                    11:bb:59:3e:c2:e7:7e:cb:ce:38:ee:0b:17:c5:54:
                    04:99:5f:1e:50:97:de:21:59:fd:b8:e8:70:f6:6a:
                    f7:9a:f3:80:bb:48:7d:10:3a:07:a9:0b:79:b7:14:
                    8f:31:e9:9c:2f:57:fa:fa:12:18:26:42:9f:68:25:
                    51:b7:51:08:89:79:4a:87:06:c2:68:54:8c:7d:db:
                    d7:20:e2:af:eb:ca:d6:f5:a1:34:f7:37:0c:2a:db:
                    87:88:08:a9:29:f5:b5:15:91:17:5a:15:99:f2:06:
                    52:cd:92:c6:7f:5b:c0:73:38:ca:3b:26:52:3c:2d:
                    7a:e1:87:d6:e3:cd:15:98:bc:98:48:ff:5a:27:04:
                    c6:18:2b:67:3d:b4:52:7c:5a:6f:fd:5d:29:4c:e9:
                    00:06:cf:96:53:ae:73:1a:fc:85:7f:f9:4a:62:86:
                    27:96:03:44:eb:24:f1:cb:e9:d2:59:51:f2:2f:c4:
                    fc:08:38:46:3f:e7:3d:c0:aa:c7:e7:a1:3d:3d:c0:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:4D:7D:7C:9D:0A:32:4F:CE:11:72:FB:48:97:96:79:E1:39:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c73b9b07-6c32-47ef-8424-35f7126a5fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.203.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:c1:69:40:a8:4f:58:b9:5f:88:e9:d0:1b:30:3e:2a:7a:3f:
         ac:ad:94:d5:9e:f9:59:65:ca:a0:e1:94:23:df:0a:3f:09:3e:
         f2:d7:d1:6b:e1:8c:27:c4:15:7c:04:20:51:14:bc:03:ba:3a:
         0a:f5:1c:eb:4e:4f:06:b7:b7:66:fb:09:04:84:d7:82:b8:03:
         f1:b7:e3:94:d0:15:6d:ba:98:46:2b:5b:93:41:3d:a6:86:8f:
         73:f9:dc:aa:11:90:1a:c0:90:95:b5:d9:e1:f9:74:0f:4f:2f:
         b4:df:06:70:f1:41:8e:6d:c2:f1:ba:16:da:81:8a:70:5f:be:
         84:7f:0b:d3:4c:78:df:47:62:87:81:d3:47:0a:9c:13:e1:8e:
         ff:a8:93:3d:5b:c9:c5:ab:8a:cd:f1:91:d3:ed:e0:ce:4d:40:
         c5:1c:7d:a9:92:3b:eb:a7:e6:25:f4:c8:e2:28:54:88:7c:79:
         72:37:32:3b:3a:ea:64:36:48:8d:4f:da:e9:f6:ee:2c:0f:47:
         b2:3a:5a:c7:20:4f:c9:53:d1:4c:59:4d:3b:d3:58:13:c9:cf:
         27:aa:7f:2d:72:82:52:e3:17:75:00:24:65:7d:42:75:c9:96:
         d9:13:ee:bc:b0:ce:db:6b:37:b2:48:fc:45:90:7a:bf:3b:1e:
         8b:50:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----