Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa
File:                     e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa (raw, json)
Hash identifier:          TF7BXuSFB4lm7u1vz7W5ei6EkL40pQXNWCdfzNa+8SA=
Subject key identifier:   11:D5:62:F1:D8:B2:EC:8E:7F:01:DF:42:4F:BA:A1:95:79:52:5A:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4651F228D533006F713BA0641F58F4805C51EC32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa
Signing time:             Sat 01 Nov 2025 00:20:14 +0000
ROA not before:           Sat 01 Nov 2025 00:20:14 +0000
ROA not after:            Sat 06 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.19.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:51:f2:28:d5:33:00:6f:71:3b:a0:64:1f:58:f4:80:5c:51:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  1 00:20:14 2025 GMT
            Not After : Dec  6 23:59:59 2025 GMT
        Subject: serialNumber=4c26ae21ca8659409c092f8518d600cf7791e78632910f88f1ee592a9aa52182, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:17:3b:3b:20:14:42:dd:8c:13:2e:b9:33:
                    a2:3d:2a:b8:8d:7d:01:0e:0f:9d:7e:74:7a:90:6d:
                    e2:4b:ec:f4:0c:33:60:91:ee:45:81:4a:48:35:e2:
                    6b:93:bf:77:52:2c:2e:8d:33:c0:eb:2e:1c:91:31:
                    fd:d5:67:b1:e9:4a:b0:70:45:b4:a8:1f:4f:93:b5:
                    82:d6:17:1f:34:5c:e0:0f:3e:f4:2c:55:9e:9e:f9:
                    55:91:77:3c:23:68:76:49:d8:db:a9:67:01:f0:82:
                    c7:4e:72:d9:93:e0:31:c7:0a:ab:76:2a:dd:98:0f:
                    b6:af:00:5d:0c:b7:bf:7b:4a:fc:09:fe:44:2d:e4:
                    66:f9:f5:4a:0f:96:34:04:1f:24:6b:b0:2d:91:b4:
                    a7:be:95:69:4c:17:53:2b:e6:d1:75:32:c3:98:8e:
                    18:aa:ed:02:cc:d0:61:16:f8:26:1d:d1:c7:5e:ae:
                    a3:10:7b:5b:26:93:57:be:16:33:89:dc:80:e3:d6:
                    42:a0:14:a9:d9:0a:a1:72:5c:7f:43:38:30:de:63:
                    1e:4a:74:6b:39:31:cf:d6:23:2f:73:95:38:2e:c1:
                    57:78:4b:84:87:13:3b:6f:92:4f:1c:72:ac:14:16:
                    4d:34:6e:ec:7f:e2:ce:8b:9d:d6:f4:88:c1:74:88:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:62:F1:D8:B2:EC:8E:7F:01:DF:42:4F:BA:A1:95:79:52:5A:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7e692c9-6c34-41dd-bc7f-31245be62ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.19.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:a7:95:a1:04:4f:83:38:3e:5d:43:cf:f5:88:62:c3:45:
         1b:a3:04:cc:6d:86:01:7a:78:76:68:ea:e0:d6:ab:93:6c:9e:
         62:aa:ce:8c:fc:e1:51:6d:7e:c7:41:e0:70:f0:4b:6e:7e:c2:
         1f:3c:77:54:5f:ed:97:00:bb:73:7e:a3:1e:36:eb:60:f7:23:
         fe:02:4a:6c:15:44:1a:37:93:5f:7a:33:46:8b:63:62:e5:b0:
         76:4d:69:01:76:86:95:7c:89:8e:97:5a:31:7c:28:69:73:e3:
         9e:44:62:8b:d5:1a:81:ee:4f:93:4c:f4:67:b6:01:a1:3c:09:
         cd:3f:a1:f1:1a:d0:8e:3a:43:da:65:76:b3:7c:d8:5b:24:ed:
         7b:19:c0:c8:a3:25:16:90:69:02:11:52:2a:d4:1b:7b:fb:8d:
         de:10:15:4b:97:c4:fe:7e:d6:1a:90:9e:4c:6f:38:6a:7c:9c:
         3b:fb:b1:de:c4:55:7c:29:42:6b:4f:97:80:83:ea:28:c9:9e:
         48:ab:00:65:13:56:d2:c1:43:1b:b5:ef:30:48:6d:6d:0d:a6:
         1e:f1:d2:54:a2:fc:34:4c:e9:e2:37:b4:24:7a:d9:a4:65:2e:
         40:25:d7:de:6e:c1:5e:b4:36:82:2d:5c:8c:a2:38:8e:30:45:
         f0:bc:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----