Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa
File:                     d15f5b55-989f-4c31-8bbc-194a3f547286.roa (raw, json)
Hash identifier:          Q1vbA5TvwXrDo3C/vdJRUkQEztKM7ETA+BPhZAYNrpM=
Subject key identifier:   6A:80:4B:71:86:05:DB:CD:73:CD:58:26:4B:34:31:A5:D3:45:BE:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C327486DB33B27278B0FFA1AD9A8021BC2F91BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa
Signing time:             Fri 31 Oct 2025 21:22:01 +0000
ROA not before:           Fri 31 Oct 2025 21:22:01 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:32:74:86:db:33:b2:72:78:b0:ff:a1:ad:9a:80:21:bc:2f:91:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:22:01 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=1a4f441b84c0188d152d4d7efcc9e4528deac4fb911d6550635d04e97aa5c013, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:c2:6f:25:76:4f:ae:09:1e:dd:5d:65:f6:
                    ec:c7:ba:6c:9c:c6:b6:1d:6f:7d:08:3b:2c:3b:dd:
                    64:51:1b:a7:46:a3:a8:d9:bc:71:ef:2f:90:07:65:
                    76:4c:68:99:9a:51:f8:b5:c9:87:50:3c:b7:f7:af:
                    97:a6:29:ad:65:7a:9e:f7:09:6c:2c:b6:c7:68:39:
                    5e:64:d0:b8:af:92:32:a4:17:9b:32:69:6e:19:5c:
                    7b:84:db:4b:40:20:e4:bc:a2:1b:7c:08:1f:98:21:
                    05:49:10:7f:b6:24:ee:a6:77:19:82:a9:c6:f0:0e:
                    07:6c:da:2c:cf:51:8c:f2:e7:cf:37:b2:1f:e7:d3:
                    74:01:c1:de:33:6a:fd:4c:e6:95:6a:e7:86:a6:9f:
                    62:96:a7:9c:e7:1a:fa:96:5e:0d:98:1c:18:23:f1:
                    ee:11:ad:b5:37:55:9d:d5:d2:5d:de:bf:75:10:18:
                    36:eb:e5:44:78:35:ba:a9:20:c1:4c:06:35:46:cf:
                    2d:3f:9d:e4:f9:f2:21:ee:65:9e:5f:00:9f:6c:67:
                    fc:cf:08:80:e3:90:5e:78:d7:21:72:c2:fe:27:90:
                    9f:da:5b:89:d0:de:12:40:e5:a1:f1:ba:a5:4f:2f:
                    b7:26:3d:4a:3c:31:26:87:e1:a2:f0:d8:f6:5f:cb:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:4B:71:86:05:DB:CD:73:CD:58:26:4B:34:31:A5:D3:45:BE:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d15f5b55-989f-4c31-8bbc-194a3f547286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:89:67:76:89:f5:92:9f:6f:09:76:d4:2f:e1:cd:ad:d9:
         3b:c4:41:f6:e9:2d:8b:49:0e:2f:91:d9:a8:20:09:36:6c:fc:
         84:a2:a4:b6:af:6c:94:39:5b:77:3f:9f:4e:3d:61:1f:f3:19:
         c2:51:0e:17:8d:48:7a:01:7a:ee:f9:fa:de:de:7b:05:9a:de:
         ca:5d:85:d9:6b:ff:70:9a:e8:3e:00:bd:27:f6:96:b9:cd:26:
         5a:12:94:39:86:25:b5:68:4b:1a:0d:c3:24:16:8e:be:89:99:
         2b:c9:72:0f:51:07:87:ba:11:ab:e6:20:03:b1:d2:01:c2:ec:
         dd:c6:e8:e7:67:c0:01:84:71:e4:c8:64:17:5b:b7:ef:d8:de:
         81:2a:17:d8:bc:92:65:4e:bb:a7:d9:ff:0a:06:24:4b:1c:af:
         11:cc:ac:31:d2:dd:42:1b:b8:61:68:cd:3e:fe:95:39:20:6b:
         50:d6:1d:7e:d9:5f:46:24:8c:28:c7:e5:ff:04:9f:b1:6c:7a:
         8a:e7:d1:7e:8f:04:cf:36:10:97:fb:55:4c:b3:2a:8e:09:0b:
         f1:d2:3a:ec:2e:f1:2f:5b:5c:a6:ec:53:a7:ce:e2:00:d4:62:
         e8:99:45:f7:1c:16:90:52:52:86:d2:0c:55:1f:67:78:13:73:
         96:25:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----