Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeeb616d-4de8-494a-a143-0d71afae0495.roa
File:                     eeeb616d-4de8-494a-a143-0d71afae0495.roa (raw, json)
Hash identifier:          5JJ9/t9uEpeCHWjhJTcHLJ2RjcYGdtS5SWhvNG2o6b0=
Subject key identifier:   EC:C3:D6:61:EB:21:0C:8D:18:8B:FD:01:1A:5E:FB:E3:51:20:7C:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49833195251EB98511AA816F03EB057841028157
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeeb616d-4de8-494a-a143-0d71afae0495.roa
Signing time:             Wed 22 Oct 2025 00:01:41 +0000
ROA not before:           Wed 22 Oct 2025 00:01:41 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.194.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:83:31:95:25:1e:b9:85:11:aa:81:6f:03:eb:05:78:41:02:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:01:41 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=36bbae1966b716ad66e7afbdd51b0171e45c40bc7f4cb8b959eb075def17c9e0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:f4:ac:8d:8f:e7:70:8f:07:85:68:4a:01:
                    05:ec:22:ae:10:db:b5:4f:d2:b9:64:35:dd:48:85:
                    3e:ae:9f:2d:10:30:6a:26:ea:63:c9:02:8f:2a:44:
                    ff:86:f2:a2:57:c6:73:37:e7:35:bb:2e:84:3f:09:
                    72:70:99:9c:11:34:63:25:20:a3:ba:3a:cf:15:e0:
                    ad:27:d2:63:5a:5c:92:8d:88:df:a0:26:9d:dc:9c:
                    b5:15:ed:1c:e3:66:a5:70:2e:57:04:64:2d:a2:0b:
                    8e:c4:0f:33:38:4f:72:83:25:4f:df:60:a2:fe:79:
                    47:af:16:13:78:7a:48:85:80:43:8c:c9:b0:ea:aa:
                    42:1e:47:92:93:f2:ea:08:d9:90:94:4f:33:73:7d:
                    2f:21:ae:92:7e:a9:e4:a9:b9:70:68:9f:28:f5:13:
                    50:9f:e3:c5:ed:f5:f5:04:d9:d7:0d:85:cf:19:0e:
                    67:81:6e:77:aa:60:8d:4f:69:af:aa:a2:7c:c3:83:
                    26:a8:3f:70:57:0b:bd:c7:a2:de:d4:97:0c:b1:4f:
                    4a:e2:b4:a1:72:ed:12:73:78:a9:43:29:ac:c7:56:
                    af:a8:5f:ef:c5:18:4b:2c:e5:30:bd:31:0d:91:bd:
                    1a:e2:99:f8:96:5a:4a:e2:52:d0:96:f7:3a:d3:0f:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C3:D6:61:EB:21:0C:8D:18:8B:FD:01:1A:5E:FB:E3:51:20:7C:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eeeb616d-4de8-494a-a143-0d71afae0495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:ff:e0:b7:13:fd:9b:06:f7:ae:9c:88:02:49:ef:7e:ef:
         f0:42:53:d1:92:81:5c:b6:26:67:80:e5:a5:70:9d:32:c4:f0:
         e6:86:a6:ce:4d:a7:5d:c3:c5:21:15:8c:1e:c5:71:0d:65:db:
         ef:5c:e6:86:fd:5b:32:d1:d2:e6:d2:8a:b5:19:1e:23:dc:c5:
         c9:a4:fe:cc:87:b4:1e:b1:97:e5:ca:70:d1:6a:6d:2e:39:ba:
         2b:b9:e5:c9:fc:42:bd:2c:63:d1:92:5c:f7:63:41:26:0e:82:
         c6:46:da:93:38:83:a3:31:dd:4c:11:1a:99:7d:d6:f7:51:38:
         6d:0d:5a:2d:17:23:14:f8:51:6b:de:51:3b:63:26:fc:f9:4c:
         82:b8:51:13:27:54:9f:4d:db:25:79:8a:bf:65:59:e8:30:f1:
         3a:d8:a4:02:cb:b4:07:2d:49:09:ac:0f:81:77:05:db:1e:ba:
         fe:51:97:b0:30:8d:98:f0:3d:28:ba:1d:d1:8c:54:a6:5f:55:
         e3:85:12:0e:de:ff:16:34:b4:a9:ee:e9:1a:f7:f4:da:db:fb:
         ca:ae:4f:18:29:40:a4:55:99:55:50:d5:33:c5:72:4e:9c:ff:
         03:17:c0:e4:b6:d2:34:42:80:5f:ce:78:68:c0:7d:b3:70:8d:
         d0:07:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----