Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca4cedc3-669c-43f4-aa55-b041246eb6b3.roa
File:                     ca4cedc3-669c-43f4-aa55-b041246eb6b3.roa (raw, json)
Hash identifier:          oZBoKYrflgM5tbZV6aHOkbcwO3n9UETn/cPKAT4ew7E=
Subject key identifier:   6E:6B:19:40:B1:CC:37:1B:19:4E:72:C7:21:67:A8:D1:C3:25:D9:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0505C01EA71F71580591DD6258F3EDCFF751D4FE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca4cedc3-669c-43f4-aa55-b041246eb6b3.roa
Signing time:             Tue 04 Nov 2025 00:21:02 +0000
ROA not before:           Tue 04 Nov 2025 00:21:02 +0000
ROA not after:            Tue 09 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.47.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:05:c0:1e:a7:1f:71:58:05:91:dd:62:58:f3:ed:cf:f7:51:d4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  4 00:21:02 2025 GMT
            Not After : Dec  9 23:59:59 2025 GMT
        Subject: serialNumber=022744622f74bd99e38026ff8fb62a25238b9f5fce17b072ea103d4884191e71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:9c:76:27:0a:3d:cc:67:a2:6e:53:66:e7:
                    aa:96:10:bf:e9:e2:9a:15:76:b3:60:09:f0:27:ce:
                    88:f6:f2:12:ba:43:0f:72:e3:10:8a:67:59:dd:c6:
                    d7:7f:63:c3:25:0b:56:6c:85:fe:a6:3b:da:87:96:
                    fd:b7:a4:7c:88:b3:5c:2c:b3:fe:a3:dc:0b:1d:9b:
                    05:16:6f:7a:cd:51:e4:9f:36:fe:1c:d9:98:96:f6:
                    99:f8:22:f3:ab:28:7c:b9:40:58:76:01:af:ce:c8:
                    4f:9c:cd:3c:05:72:30:fa:aa:40:dc:80:7e:31:56:
                    f5:c7:91:96:5b:8c:71:98:21:fa:ec:a2:66:cb:05:
                    97:3a:b9:ab:f7:da:ed:af:5f:75:4f:aa:71:3a:45:
                    14:75:6e:81:a6:16:95:fa:10:d2:9e:a0:5e:b9:44:
                    4b:53:18:3d:38:5c:24:74:e1:07:a2:75:04:8b:f8:
                    45:b1:36:51:44:fc:b1:af:0e:03:3e:6d:e7:ec:2d:
                    c7:fb:c0:d7:d7:07:54:33:f3:81:fd:f3:89:ef:d7:
                    4c:df:d5:dc:0d:db:ff:41:68:c3:96:93:71:37:d6:
                    ee:6e:c6:8e:8a:5a:8b:8d:71:2a:5a:7d:85:e2:fd:
                    01:4b:de:04:5c:7c:f0:e8:dc:da:6b:79:c1:84:06:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6B:19:40:B1:CC:37:1B:19:4E:72:C7:21:67:A8:D1:C3:25:D9:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca4cedc3-669c-43f4-aa55-b041246eb6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:3d:00:a8:06:c6:c3:20:0f:31:9c:ad:96:89:ab:6b:12:
         3e:9f:c3:31:44:fe:cf:70:00:7f:5c:05:ef:2b:55:6f:bd:33:
         78:03:d3:bf:b8:59:e8:90:30:21:bf:8a:c7:9f:f9:19:5b:b8:
         06:0e:2d:30:0a:3b:23:f6:6e:76:67:47:dc:2e:86:03:bf:f9:
         bc:3e:b2:9f:81:32:0b:38:c4:01:c8:59:90:96:f7:89:ad:0b:
         32:67:0e:b4:19:01:1a:f2:69:1e:96:34:9a:7c:5c:c9:cd:e6:
         04:4c:ce:df:dd:2b:3b:83:86:17:bb:b3:7c:60:7f:a8:f7:5e:
         d9:88:7e:41:92:b2:af:b7:a2:44:c5:3b:69:71:8c:32:8b:13:
         12:9b:dd:89:9e:44:80:72:14:fb:a5:9c:fc:65:93:cb:29:0e:
         61:8e:20:39:4f:b7:e2:95:a2:ba:38:a3:58:d0:15:31:b8:e5:
         b8:73:8a:53:d7:94:0f:72:de:d8:6b:61:a7:9a:10:6f:3c:a5:
         5c:d6:22:3e:b9:9f:d3:0a:18:0d:c4:9e:af:d1:77:b1:0a:7b:
         1d:f1:db:00:df:ef:6e:65:74:3a:7e:13:1a:d0:44:d7:b9:54:
         87:ec:6a:1f:d3:1e:d1:c8:75:03:0b:1c:3c:03:35:84:cb:09:
         51:1b:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----