Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa
File:                     e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa (raw, json)
Hash identifier:          PwixuxrHDWpw/oc5yJUI9n2zicpIjOkEeLocoqCTyfw=
Subject key identifier:   BD:3B:AE:85:3A:3D:44:07:70:18:67:4E:5E:B5:AE:C7:22:45:B5:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F95E83ED83CB9567D33FFD407A96AD523100585
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa
Signing time:             Tue 21 Oct 2025 00:51:01 +0000
ROA not before:           Tue 21 Oct 2025 00:51:01 +0000
ROA not after:            Tue 25 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        202.5.178.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:e8:3e:d8:3c:b9:56:7d:33:ff:d4:07:a9:6a:d5:23:10:05:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 21 00:51:01 2025 GMT
            Not After : Nov 25 23:59:59 2025 GMT
        Subject: serialNumber=afe1f98b2fe85f8ceda501d22173f42d2aabf3c2fc62b1e2ccb10610abcc80d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:4f:3a:ab:9c:0d:78:92:1e:81:59:e7:5e:
                    07:40:d3:3c:9d:b8:13:99:05:9c:74:7e:e6:3a:7e:
                    41:db:c7:9b:d4:bd:0e:7b:50:23:99:c0:47:07:36:
                    e4:d3:28:84:a7:92:fb:fd:fe:d6:54:c2:7e:37:88:
                    86:26:a5:74:1f:09:a9:4d:5c:bf:77:86:f0:3e:50:
                    f5:c0:13:db:c4:8d:68:26:3d:e7:49:a3:48:7b:22:
                    a2:e6:ff:5a:bf:bd:93:f4:56:6f:d7:c4:be:c6:4e:
                    63:1e:6d:f2:e1:01:e8:f8:5e:f7:07:d9:33:b7:3c:
                    4e:02:97:e8:3f:95:2e:a3:20:ff:e9:05:ad:18:bb:
                    39:c9:16:79:13:f3:95:47:3c:80:5d:d2:11:1d:91:
                    23:55:8b:05:0b:82:57:3f:d5:24:80:17:37:f5:d8:
                    df:85:ee:1c:77:65:60:a0:60:df:0e:ea:ab:a2:d6:
                    8d:de:ef:73:ed:7b:77:d1:f9:8c:83:47:5d:ba:55:
                    0e:04:33:7d:ae:4e:c2:ac:a5:5f:a4:53:b1:2c:27:
                    18:90:37:79:b8:b9:be:51:c9:51:d3:f1:a5:6a:71:
                    68:34:e5:78:7e:c0:88:a8:c6:4d:de:b0:0f:06:a3:
                    5e:9e:9e:fa:04:50:a0:13:86:b0:fd:f8:a7:89:e6:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:AE:85:3A:3D:44:07:70:18:67:4E:5E:B5:AE:C7:22:45:B5:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:e4:01:f6:9c:76:65:be:03:04:32:23:4e:ff:70:9d:c7:
         9c:9d:67:4d:0e:75:f0:c8:d1:cf:02:b1:fc:ad:85:f5:7c:20:
         54:be:12:37:b2:74:21:ca:ea:c9:4b:58:e6:75:12:87:9e:32:
         7f:1a:39:f3:2e:cd:72:73:fc:fb:cb:b0:d7:6b:c1:e7:d1:ae:
         15:e9:c3:97:f4:a5:e8:17:e3:2f:36:7c:0a:3f:8a:d3:dd:1c:
         07:6b:cf:ce:a9:5a:15:6f:94:c6:33:24:52:ad:4f:b9:86:71:
         77:0b:48:dd:a1:e7:98:56:ff:10:bf:ad:72:be:b4:5d:73:00:
         6b:02:27:e1:e8:87:21:85:ed:5b:f0:31:eb:8c:5e:45:28:b9:
         80:4a:45:ca:21:e5:76:c2:f4:f4:69:3e:35:f0:47:2a:75:2d:
         9a:48:c6:ba:c6:9e:ca:a4:ca:46:71:c6:00:67:31:f7:1e:f1:
         89:96:6a:aa:85:8b:ec:bb:e0:ed:10:b8:86:ec:96:4d:a9:71:
         c3:c9:69:d1:17:12:cf:4f:db:82:23:6f:e7:02:e9:6f:5b:f6:
         99:47:9d:09:3f:65:2f:1c:89:37:ea:12:5c:8a:c0:65:31:25:
         88:2c:8e:55:f8:05:5d:db:c2:8f:ed:50:b1:06:c8:d1:8c:94:
         0f:a8:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----