Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa
File:                     ebb8b2c6-e910-45f8-815f-53a36c636115.roa (raw, json)
Hash identifier:          GuoT4LGsxhczuyY3GYyEC6wXlZ+jDhLHGxgipQPhq+8=
Subject key identifier:   76:3E:5B:E0:A7:48:18:17:B8:AC:16:90:B2:29:F4:49:5A:DA:84:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21A1A8F17AC5D2673F34B496C347338A36FD869E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa
Signing time:             Sun 26 Oct 2025 00:40:51 +0000
ROA not before:           Sun 26 Oct 2025 00:40:51 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        57.88.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a1:a8:f1:7a:c5:d2:67:3f:34:b4:96:c3:47:33:8a:36:fd:86:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:40:51 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=1867414293f7304d714e7190e1abb17267d358fb9f5f77e41e1fe80539b62869, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:b3:d1:00:3a:6b:8e:2b:ea:10:62:8a:4f:
                    5f:56:45:d9:2e:09:05:54:4d:17:02:5a:73:70:07:
                    35:41:59:5b:82:a1:74:54:52:39:af:79:53:cc:8f:
                    8d:a1:8e:c4:3f:4a:21:c0:1a:ce:09:86:0d:84:d2:
                    3b:12:ba:27:b2:3e:24:71:1c:0e:f8:5b:33:b2:3c:
                    d5:d4:18:6e:55:f9:0a:56:8c:3a:d9:a6:74:43:ce:
                    c2:70:aa:f0:aa:81:1d:cf:50:0c:d9:cc:11:57:15:
                    87:37:3f:5e:a5:87:da:d1:e1:12:e8:2e:1b:c2:5f:
                    55:eb:d0:66:53:a1:44:1d:30:db:d9:db:94:2b:9c:
                    bc:93:72:d2:af:3b:1e:70:48:5c:c6:e6:45:b5:e2:
                    70:7d:6f:e1:b7:cc:83:7e:21:af:4c:02:c1:df:a7:
                    b4:26:d2:e9:9d:3c:1e:ab:60:7f:05:07:29:02:67:
                    62:cf:6b:3c:6c:39:63:3c:67:d8:18:58:e9:dc:cc:
                    55:cc:33:d2:46:04:09:d0:04:f2:0c:34:63:0f:7d:
                    57:30:fe:e1:aa:2e:46:74:f6:e3:54:19:46:80:5e:
                    e4:99:00:66:1f:14:95:11:31:99:bc:ea:a8:b4:7e:
                    af:d5:f3:81:fe:b8:c6:dd:25:9e:7b:7e:0f:e3:a7:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:5B:E0:A7:48:18:17:B8:AC:16:90:B2:29:F4:49:5A:DA:84:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb8b2c6-e910-45f8-815f-53a36c636115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:d2:85:66:93:31:f4:93:ca:2e:47:08:4e:f6:2e:53:27:
         c9:d2:03:08:45:b3:b3:ab:24:e5:79:dd:81:60:95:1c:0e:ca:
         93:02:5b:05:c2:0e:c5:40:8b:cc:9d:6d:4d:8c:a1:d2:2c:fa:
         ab:a8:7e:09:c2:f9:f3:43:de:19:af:77:25:15:25:d1:1f:5b:
         30:12:b8:bd:7c:3b:fa:52:5f:eb:55:9b:07:66:1b:f6:71:ae:
         93:77:aa:64:34:e2:38:63:16:b8:24:73:d1:f5:86:9f:8c:77:
         5f:5e:a4:41:61:a8:07:1c:fc:bb:9d:e8:00:34:ab:41:25:9d:
         23:5e:66:e6:87:c1:99:9b:5f:0e:6a:0f:6d:77:f4:4a:54:9b:
         36:aa:29:aa:df:77:1d:fa:51:96:ac:90:a8:5c:5a:76:10:33:
         01:44:61:f3:1b:84:1c:aa:cc:fd:6e:a4:51:b8:64:58:ba:cd:
         b8:cf:e2:79:8a:2d:6f:84:42:44:b9:8d:8c:8d:45:03:60:60:
         cd:25:23:49:27:91:9a:ff:07:6f:56:98:68:75:a8:6c:c2:f2:
         78:fd:32:f1:c9:08:84:12:29:a1:1a:1f:80:4e:ee:ae:55:66:
         78:4d:4e:a3:3a:3f:7e:04:8d:61:93:9d:ec:1e:c5:05:f4:4e:
         8c:13:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----