Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
File:                     f2c885d6-4061-421b-99ff-f05202cdada5.roa (raw, json)
Hash identifier:          Jn9qbcgI/LuuHol9YRYKd0tyQ/yqOLKNilJ1xvmJDws=
Subject key identifier:   A8:A9:E6:68:B7:C3:4C:A2:E8:7D:7D:EA:5F:75:7C:E2:16:2C:EE:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E93350444EE63464C1A31AE9DC08377151BD098
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa
Signing time:             Fri 31 Oct 2025 00:20:50 +0000
ROA not before:           Fri 31 Oct 2025 00:20:50 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        44.223.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:35:04:44:ee:63:46:4c:1a:31:ae:9d:c0:83:77:15:1b:d0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 31 00:20:50 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=ea543c1a2124eba578f1642aebba063963d62e74593db4eb02a8784e2706ca09, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:cb:5e:78:cd:61:1a:05:a3:51:18:ef:6c:
                    af:8b:fb:97:a6:26:2f:c6:a8:07:82:4f:38:fe:b8:
                    d8:bd:b4:b0:0d:0d:c9:7d:25:59:cd:e7:f0:ed:87:
                    86:09:a3:c5:03:68:04:b4:11:19:0f:50:15:f5:f6:
                    f2:72:a0:f4:d0:cc:98:9b:b7:c7:86:5c:e3:b0:e5:
                    27:af:be:4a:c2:5d:ac:24:52:91:9e:c6:8c:d7:25:
                    3b:ae:07:64:6a:cb:d2:89:77:47:94:04:39:7a:e7:
                    88:51:70:25:33:a0:b4:fd:3b:d0:cc:d4:32:8f:ab:
                    98:b6:6e:b7:a1:5a:1b:6a:cc:a0:02:bb:9d:6e:5c:
                    48:a0:a0:bb:ba:31:22:cf:d4:07:6a:4e:13:b9:2b:
                    71:5f:a5:ec:b5:ed:d6:a4:2c:df:9c:a4:df:f5:f0:
                    f8:f5:5b:aa:e6:a3:b2:75:8d:90:46:ed:3b:57:c3:
                    e9:ad:4a:95:23:b4:c2:45:2f:bf:e7:83:df:71:98:
                    62:4b:03:0c:ed:9b:9d:5c:e9:70:f1:d9:6c:7f:37:
                    d1:42:10:f2:12:c4:39:e6:07:33:81:5d:6c:d1:5a:
                    a3:27:d8:a3:ff:03:c2:af:a4:07:42:0d:be:a2:85:
                    fa:d8:8f:45:5c:7b:db:07:b2:9f:a3:6a:4f:3c:39:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A9:E6:68:B7:C3:4C:A2:E8:7D:7D:EA:5F:75:7C:E2:16:2C:EE:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c885d6-4061-421b-99ff-f05202cdada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.223.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:3f:21:c9:f0:9f:2c:fc:3d:a1:38:31:76:31:b9:31:2c:
         9a:77:2c:67:82:81:b7:01:25:c6:1f:16:26:54:d9:fc:06:18:
         1a:cb:bc:39:37:e8:85:55:d4:fa:c2:a0:bd:6d:12:df:72:38:
         17:bb:3b:7f:02:f1:8f:aa:0e:63:d4:9c:8e:d2:25:b5:ef:49:
         29:23:8b:2e:08:bb:62:a2:5a:80:16:1a:dc:3f:33:e4:0f:26:
         c3:a5:c3:74:0b:ba:5b:b2:c8:42:d0:df:29:88:c9:f9:4c:f1:
         82:ad:b8:4b:b4:c0:9c:f9:0d:f8:ba:48:4a:4a:5a:13:33:ed:
         6d:e8:d7:14:ed:bb:91:aa:cd:d0:9f:94:28:29:97:6d:72:0f:
         2c:82:ec:9c:a5:15:84:36:38:e5:d8:c1:4a:13:94:49:58:f2:
         8f:51:30:a9:19:f6:b3:a4:b7:91:a0:76:96:99:37:f5:f1:0c:
         96:22:13:4c:76:fe:f1:7a:ed:8d:33:6d:88:a4:d2:b9:0e:66:
         61:a8:51:9a:2f:15:1c:db:25:72:48:f5:fe:5f:a8:b3:cd:eb:
         a5:68:47:cb:7f:40:4b:e9:2a:f7:6e:33:6d:4a:1a:03:40:75:
         f1:cc:28:d7:d0:29:47:cd:16:d8:c7:a2:1b:f9:d0:48:51:43:
         59:a8:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----