Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa
File:                     097ea704-a277-40bf-9b0b-37ca8c9c0263.roa (raw, json)
Hash identifier:          ush+IutrHiQNaRwGWmLCfSI/XNw1so7QNidKVjDMU38=
Subject key identifier:   52:FE:FA:6B:FB:28:D7:1F:A3:AF:B2:05:0D:04:9E:38:54:51:E6:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7C6D67FAE55EC08317BA00A7D081500AFE4684F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa
Signing time:             Thu 13 Nov 2025 01:00:58 +0000
ROA not before:           Thu 13 Nov 2025 01:00:58 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        168.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6d:67:fa:e5:5e:c0:83:17:ba:00:a7:d0:81:50:0a:fe:46:84:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 01:00:58 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=5f2a05ff5b03d4686875a8e6422f6c747785de8aa251fd294bd284a6efc4ac35, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:29:aa:ad:49:2b:02:27:38:eb:aa:cf:d5:
                    59:be:ff:3d:c5:5e:89:be:58:4f:52:67:38:7a:ac:
                    e0:86:20:fb:69:1e:33:43:1f:5d:89:51:6c:43:ff:
                    eb:97:08:ed:6d:22:7d:f9:5a:ab:16:e8:b5:ac:f3:
                    c7:51:a6:42:f0:8c:60:55:7f:12:b0:ac:12:25:bc:
                    ca:7a:fc:7d:8b:98:e1:25:36:e3:17:c1:3c:b3:b5:
                    ec:a7:f0:a8:09:54:39:79:09:87:a5:42:cc:ac:54:
                    d5:f2:12:9e:fb:3c:18:b2:7d:d9:a8:b6:e5:84:34:
                    5b:e6:17:3b:2a:73:3a:47:08:08:43:53:09:fd:fc:
                    3d:8c:23:9e:ba:06:32:d0:61:5d:c6:ff:76:57:bb:
                    6a:25:e6:0c:ae:78:27:93:b4:18:d9:8f:fe:d0:24:
                    38:8a:b3:ab:4e:75:26:2c:ce:6f:7b:f5:ab:e5:b6:
                    66:d5:65:9f:c3:9e:d7:11:ab:99:31:09:f1:59:7e:
                    40:ad:3c:30:9a:00:1e:9a:6d:5d:19:51:06:23:36:
                    7f:ad:ef:6d:52:f4:58:4c:bd:32:f7:98:ff:fc:64:
                    77:98:24:de:d6:66:80:3f:9f:0c:51:22:64:d5:be:
                    65:70:eb:21:17:57:38:3d:e9:8e:22:ea:86:e3:63:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:FA:6B:FB:28:D7:1F:A3:AF:B2:05:0D:04:9E:38:54:51:E6:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/097ea704-a277-40bf-9b0b-37ca8c9c0263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:ab:b8:33:86:70:1e:22:bf:4d:6b:3b:16:e6:21:0c:c0:
         8d:3f:d9:64:02:39:53:40:b5:70:14:d2:8b:a3:e5:a6:a9:30:
         8c:15:c0:2f:9a:b1:22:ac:91:65:60:10:1c:1e:a8:b9:f9:b2:
         c1:a5:97:5c:55:40:b5:94:64:aa:77:80:9c:20:14:93:11:17:
         d1:8f:a2:8c:4f:e6:16:4b:93:d6:4a:b3:62:07:ce:88:2b:4e:
         9e:e4:6d:c8:e9:66:37:16:99:d7:be:83:c0:86:e9:ce:30:38:
         11:5b:c8:7c:93:89:f1:56:fb:4d:41:c6:b5:22:a9:cd:d9:8a:
         06:da:cd:35:de:12:82:ef:e7:7a:bc:11:c3:f3:52:ab:a8:ff:
         9f:49:3c:9f:52:c3:a2:12:ec:c1:60:44:e7:7c:b4:8f:fe:e8:
         69:55:6e:4b:c8:37:65:26:44:b2:7f:c3:ad:88:98:04:a5:db:
         62:80:44:d3:ec:bc:1b:fb:e1:5e:31:07:50:97:7e:c5:32:5d:
         b3:c2:ef:5d:71:6e:a4:38:7d:4b:82:f3:7a:99:07:0d:4c:e2:
         80:b4:1e:07:ed:e3:d2:97:59:29:6c:c3:45:a0:20:07:b3:7d:
         c6:a6:d9:79:ef:0f:e0:df:9e:3a:31:73:73:94:31:b7:f6:7a:
         49:cb:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----