Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c81689da-9859-446e-ac73-705fc08fb300.roa
File:                     c81689da-9859-446e-ac73-705fc08fb300.roa (raw, json)
Hash identifier:          NqWBe7uL4/3zElsyBAx8FWICi7LZPiQ/qH1iaXjYExU=
Subject key identifier:   99:30:BA:DA:A3:6D:00:62:1E:DC:77:92:CF:42:95:34:02:12:E7:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C74FCE46012F60BCCF26E2E413BCF6ABAB0E383
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c81689da-9859-446e-ac73-705fc08fb300.roa
Signing time:             Sun 26 Oct 2025 00:21:09 +0000
ROA not before:           Sun 26 Oct 2025 00:21:09 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        72.41.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:74:fc:e4:60:12:f6:0b:cc:f2:6e:2e:41:3b:cf:6a:ba:b0:e3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:21:09 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=331a9115949955c042de3a0034afcf3c737823a9e2de1bc59d993e801efc5fc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:b1:f6:9d:2d:f3:be:0f:35:f0:f8:af:a1:
                    50:17:89:37:bb:0d:38:e6:01:ea:7e:d8:61:b5:74:
                    00:1d:1d:ae:a3:92:f2:39:82:81:55:66:45:de:04:
                    3a:d3:97:ad:0b:31:9e:57:80:4f:4b:95:5e:24:54:
                    97:05:c8:3b:1a:7d:72:1a:12:c8:f1:ba:37:a2:33:
                    cf:a4:b9:47:25:09:71:fa:da:c7:bd:d7:d7:b2:75:
                    d6:e9:44:0e:60:1e:e1:2e:6d:4d:6f:51:10:78:08:
                    3f:c0:b9:49:a3:a6:dd:d3:b3:59:9e:0b:21:32:7b:
                    bb:0b:cd:12:55:70:ab:1d:c3:46:e8:81:3e:aa:9f:
                    63:1a:39:58:22:36:b4:29:29:7e:2d:66:7b:8d:bd:
                    88:63:61:7b:ea:4f:73:cb:7a:b4:08:b8:e3:d6:4f:
                    ed:e8:68:41:94:d1:f8:4f:5b:f4:17:0a:ef:b8:c4:
                    5d:b2:d5:cc:b8:c4:5c:3b:01:42:b3:1a:c7:98:36:
                    84:54:fd:cf:d8:31:42:81:5c:e8:31:f7:cd:2e:83:
                    20:58:09:2f:0b:02:4f:12:0c:16:b9:84:b7:35:12:
                    a3:6d:f8:a0:6e:ca:de:1c:e7:59:e0:65:d6:51:31:
                    23:0a:0e:0d:b7:48:4e:6a:ef:2f:52:ea:8c:99:fc:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:BA:DA:A3:6D:00:62:1E:DC:77:92:CF:42:95:34:02:12:E7:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c81689da-9859-446e-ac73-705fc08fb300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:4e:ea:06:20:a7:f2:36:f0:4c:ed:bb:b5:0a:b9:43:02:
         1b:8e:bb:f0:92:6e:d9:be:81:ec:85:56:30:06:86:77:4d:42:
         0e:2a:5c:ef:7e:ef:25:71:92:ed:11:b9:03:3d:18:89:59:8d:
         aa:18:43:7a:0f:26:79:e9:41:f1:a6:24:1a:bd:54:f4:4d:60:
         b4:dc:f9:0b:97:9d:4a:36:41:24:06:f5:44:3a:a0:c5:06:40:
         0a:6b:e6:c8:03:eb:ab:96:56:d7:eb:db:62:28:e5:47:ce:dc:
         ac:b1:1f:46:0e:36:51:aa:e2:35:52:c0:1a:7f:f6:15:4b:6a:
         e7:38:1b:f6:13:98:c2:ef:62:71:09:74:40:39:bb:01:3d:5d:
         a1:73:e0:a3:9a:cf:0e:e8:c4:0e:f6:9c:5e:d3:b3:b7:36:d1:
         9a:a4:fd:aa:67:97:33:01:7b:0f:e3:20:bd:f7:89:8a:4b:db:
         76:1e:b2:9f:55:3f:5b:e0:85:57:27:4b:ab:2b:5b:56:61:25:
         28:d3:e3:78:24:32:74:05:9c:13:01:ca:20:6c:d5:0f:d8:ba:
         fe:01:b4:67:2b:17:77:c4:ec:cd:95:b5:7e:a3:cf:dc:98:3f:
         c4:bd:ce:e6:9d:cb:1d:08:71:b7:ba:cb:19:8d:6f:3c:9b:8e:
         e4:91:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----