Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaadf69d-45bc-4941-90a9-dfce7b4bcee3.roa
File:                     eaadf69d-45bc-4941-90a9-dfce7b4bcee3.roa (raw, json)
Hash identifier:          q9lxIUzaIeRlZA19UUsP58A9b8tgoE7jit+YKggVxl8=
Subject key identifier:   DF:91:9B:19:18:F8:08:24:57:83:00:AD:66:13:2B:DA:85:57:48:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67584B428D787B78C02A40D37E8F22B950E7E333
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaadf69d-45bc-4941-90a9-dfce7b4bcee3.roa
Signing time:             Sat 25 Oct 2025 00:01:17 +0000
ROA not before:           Sat 25 Oct 2025 00:01:17 +0000
ROA not after:            Sat 29 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        168.185.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:58:4b:42:8d:78:7b:78:c0:2a:40:d3:7e:8f:22:b9:50:e7:e3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 25 00:01:17 2025 GMT
            Not After : Nov 29 23:59:59 2025 GMT
        Subject: serialNumber=f4eb750a21ab3013fd4492ab943d639a7ed6b86404449b1ed730fe731d4898f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:7a:6c:62:1a:8f:4d:92:57:c8:b6:6b:9d:
                    04:65:f0:f2:e7:a1:d2:bc:95:e2:ca:d1:82:be:eb:
                    52:60:f4:5b:6b:c5:e0:9e:1c:64:de:6b:e9:8d:8b:
                    21:96:b1:ac:e5:63:f5:1a:be:f6:ff:b1:a2:0c:0c:
                    90:39:fd:99:9c:78:18:63:f6:ba:35:f4:d2:ff:d5:
                    80:32:ca:47:6c:95:39:c5:c0:f9:fe:9c:7d:c4:3d:
                    42:40:6a:22:ed:b0:91:df:83:de:f3:78:6f:15:df:
                    7b:f5:cf:82:1a:b0:36:32:81:9f:4e:6a:ca:d4:c0:
                    89:02:42:95:ee:93:a5:09:8a:95:fe:d5:78:0e:3d:
                    9e:65:9a:60:03:0a:8c:4a:75:55:2f:af:31:5f:fc:
                    04:3d:5f:6c:3b:a7:dc:9b:67:41:3e:7b:a0:55:67:
                    8f:b2:7a:f0:b0:e1:47:06:54:43:9f:9c:e9:c8:9d:
                    fe:9c:ef:39:72:ba:0f:ec:c6:f1:e8:e5:82:64:dc:
                    03:23:99:1e:ab:42:35:8f:c7:b4:17:cf:7b:51:09:
                    43:09:65:ad:f8:f2:53:90:c7:e9:4d:b5:25:0f:04:
                    22:29:5c:18:31:1e:e6:63:12:c1:03:e8:0a:22:ad:
                    17:d7:46:cb:14:da:3d:b5:37:c6:a1:61:4d:b1:f1:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:91:9B:19:18:F8:08:24:57:83:00:AD:66:13:2B:DA:85:57:48:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaadf69d-45bc-4941-90a9-dfce7b4bcee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:cd:3a:be:83:52:c9:f5:ac:cc:f5:e0:08:3e:4f:dc:a6:d9:
         32:9c:56:42:28:97:c7:66:b9:c5:50:61:e4:06:a5:b2:cd:58:
         90:a4:e0:6a:17:cb:35:d5:5c:5b:ec:65:64:ed:b1:9a:88:64:
         9f:df:dc:12:8c:8b:f4:f9:43:41:01:92:1d:b3:b4:41:f3:dc:
         6c:0a:74:26:50:81:04:f1:5d:f0:b2:a9:d7:11:9d:9c:d2:26:
         9f:cc:12:e6:a4:b0:1a:c1:3a:28:4b:fc:9a:f6:34:98:4b:ee:
         de:97:7c:de:e6:7e:4a:ab:e1:58:8d:9c:61:a2:2d:a6:e7:b3:
         27:95:ec:20:91:f4:29:82:38:f1:5a:46:d0:b5:38:d3:ad:01:
         56:c0:72:e5:14:15:3d:a0:e3:e9:75:a1:35:8b:11:98:31:78:
         9a:ad:4e:bf:05:c9:82:d1:d7:7f:8d:87:98:06:5d:4d:be:77:
         34:e9:f3:33:70:f1:fc:b6:df:e3:d5:85:ab:2f:01:fd:2e:c8:
         2d:c1:c5:31:6e:93:9f:70:a7:17:a8:d3:1f:cb:07:42:d0:49:
         31:db:bc:a4:00:bd:48:60:88:7b:33:98:e9:aa:1d:d6:08:e6:
         39:df:ac:ab:9a:4a:05:07:56:cd:52:9c:e0:2c:7c:52:db:30:
         e7:9f:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----