Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e440962f-83f5-4a97-aae6-3b806d301822.roa
File:                     e440962f-83f5-4a97-aae6-3b806d301822.roa (raw, json)
Hash identifier:          lRGdUJJWrniRM28BpiXIIldFcs7256GkbaQf73A+xVI=
Subject key identifier:   C3:BD:8B:5D:64:5D:9A:8E:C0:19:E2:C1:BF:1F:56:34:7D:41:B3:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0616E2E4A07C056D6A29E312FBCE7EE17F55FE6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e440962f-83f5-4a97-aae6-3b806d301822.roa
Signing time:             Fri 31 Oct 2025 21:22:03 +0000
ROA not before:           Fri 31 Oct 2025 21:22:03 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:e2:e4:a0:7c:05:6d:6a:29:e3:12:fb:ce:7e:e1:7f:55:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 21:22:03 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3ffb52de925c85c48755ba8941d13d2c94fa9d924ca30d7fb69f590014290004, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:bf:0e:82:7b:d7:fe:fd:57:f2:81:57:3a:
                    7c:1d:36:eb:c4:6c:3d:7e:e4:81:4b:f0:95:d6:aa:
                    42:36:74:9d:e6:e3:31:81:c6:91:61:84:99:3e:79:
                    da:f8:13:8b:80:a6:8e:68:94:10:c0:41:cd:4f:4c:
                    b0:c8:98:4c:64:db:01:b1:0e:41:7b:bf:69:0d:4e:
                    6f:82:ec:1d:03:c4:92:26:d7:16:43:e4:67:44:3b:
                    56:6c:cc:ee:fe:77:6f:43:f6:60:5b:08:f2:67:0c:
                    37:0b:77:52:7c:8d:db:00:78:e4:31:2e:38:16:8d:
                    aa:50:38:d0:aa:82:74:58:95:03:77:0a:a7:48:df:
                    d1:f5:ac:73:39:6d:06:ec:be:18:83:7a:04:26:d5:
                    d7:e5:a9:cf:df:19:b1:0a:b8:26:32:96:eb:3b:1a:
                    75:0e:3a:33:48:fc:d4:fb:00:ee:ec:5f:7d:71:8e:
                    b4:ba:e3:3a:9b:30:de:4d:b6:4f:c1:53:b1:db:9e:
                    8f:a0:a2:ea:16:75:d1:d6:10:54:0e:0e:63:73:98:
                    11:7e:ea:2d:2e:de:9b:21:32:9c:83:90:34:33:f2:
                    7b:60:46:e2:7e:be:46:bf:13:77:e9:00:a2:3b:59:
                    6e:6e:cf:1b:7f:f7:bc:bc:ea:9b:40:ca:57:1b:81:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BD:8B:5D:64:5D:9A:8E:C0:19:E2:C1:BF:1F:56:34:7D:41:B3:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e440962f-83f5-4a97-aae6-3b806d301822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:75:81:d8:09:94:ee:d2:a4:71:5a:06:e0:3e:c9:84:6a:32:
         9a:88:dc:0a:94:45:46:81:e8:98:98:2b:2b:78:81:af:41:5f:
         3c:10:ac:ab:c8:6e:29:7a:56:72:d9:44:a5:0c:a8:31:4a:8e:
         85:01:0f:17:9b:e0:a1:d8:53:e7:9a:0e:1e:cf:30:26:6c:d1:
         ce:be:0f:c4:aa:01:56:ac:b2:7a:79:7c:c9:36:37:a9:8b:69:
         c3:53:a8:33:3d:29:56:9a:bc:5a:07:0a:62:d2:2d:c4:56:4b:
         ab:32:e4:af:71:03:95:83:ef:e4:ec:39:11:4f:f0:dd:06:11:
         33:19:84:8d:79:d4:ed:06:ed:51:ba:24:a2:57:92:5e:61:26:
         37:a1:ca:c8:25:89:54:c7:28:db:7d:84:18:83:27:f4:f2:b8:
         3f:59:5d:56:44:d1:f0:bd:55:9b:3e:91:23:7a:5a:68:34:4c:
         f2:69:cb:8c:72:f5:a2:28:93:37:88:6b:f7:e6:08:56:9f:34:
         c7:c3:f1:f2:40:48:14:4e:3d:79:aa:c5:64:93:1f:81:8c:f0:
         86:29:74:31:e5:94:52:a6:84:71:83:a6:0e:dc:55:d8:eb:81:
         e9:6f:c4:42:78:9a:29:88:96:61:98:c8:9d:c1:0b:12:74:9f:
         d3:ad:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----