Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa
File:                     0ed8810f-655f-4dea-8c42-0199abb2eec1.roa (raw, json)
Hash identifier:          d4MokaNPhD/IClGUOhPlkHBoqvJ0xhEnNX+JswkfOug=
Subject key identifier:   39:40:2C:8A:AE:10:1C:3B:3C:DA:CA:0E:58:CD:0E:5B:BC:06:26:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AEBDF89C9C9DD064F4122C0034D55AEC3EAC4A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa
Signing time:             Wed 12 Nov 2025 00:41:41 +0000
ROA not before:           Wed 12 Nov 2025 00:41:41 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        1.178.184.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:df:89:c9:c9:dd:06:4f:41:22:c0:03:4d:55:ae:c3:ea:c4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:41:41 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=42ae15b97d668a37f96775d14a775a4e8505c3362bbd6ef8a814de4ea47bd978, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:a5:86:d2:7f:34:71:5a:94:d6:fb:2a:c9:
                    1a:49:5d:92:4c:57:62:f9:45:0c:4c:5c:6b:51:31:
                    1d:57:0a:21:c4:f3:c8:7a:79:46:5d:0b:1c:dc:ad:
                    9d:6c:90:61:76:3b:d4:b5:a3:67:f0:49:07:21:17:
                    c1:f3:b5:35:cc:1d:2a:5f:5a:a0:57:18:11:ed:0f:
                    75:98:c3:65:19:1c:38:55:32:1e:bc:7d:46:5c:bb:
                    aa:99:e6:ec:a9:09:ac:fa:8e:f4:f6:b4:a5:3d:e5:
                    d7:68:cb:d5:c3:82:55:78:e8:13:3a:ed:e3:17:a5:
                    c6:80:28:28:93:75:d0:64:e6:18:40:60:24:36:2c:
                    4c:b5:b1:03:fc:74:8e:91:2a:3e:1d:51:3f:63:b5:
                    20:b8:e9:13:aa:c0:ad:b3:83:43:cb:4d:ab:c3:29:
                    b2:9f:48:3a:39:30:e7:37:69:23:7c:c7:bb:8c:5e:
                    f8:71:54:ef:ed:40:7d:e3:f3:43:70:b1:dc:b3:2d:
                    8f:76:a5:34:b8:e5:33:27:3b:90:35:1c:b6:c0:18:
                    c5:e1:1d:50:10:df:51:d9:f0:2c:ed:ea:13:89:44:
                    74:71:c1:df:07:45:0c:ee:fc:0e:ae:69:c3:7d:43:
                    0b:ba:87:35:2d:07:4f:14:57:d8:99:e8:c5:c9:2b:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:2C:8A:AE:10:1C:3B:3C:DA:CA:0E:58:CD:0E:5B:BC:06:26:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ed8810f-655f-4dea-8c42-0199abb2eec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:ea:ee:14:ef:08:43:ff:be:d7:91:b4:63:5d:d6:e4:a7:34:
         13:47:78:55:ba:e5:db:f8:b0:78:34:9b:6d:13:64:aa:6b:a3:
         04:c7:ef:b4:8e:c2:b8:b3:97:b9:9a:95:5c:1e:23:e0:bc:9a:
         1a:ae:fe:80:a6:77:72:22:c9:95:08:95:30:4d:89:71:1b:ba:
         bd:a1:22:81:ac:cd:8d:72:df:78:a6:46:cf:46:26:4d:f5:59:
         64:f8:19:7f:fc:9f:72:85:a2:5c:99:fd:23:c4:21:99:0b:5b:
         62:7e:32:c9:7c:c8:29:0f:96:ed:32:57:a0:11:eb:43:37:a1:
         08:fb:bc:c8:83:d4:ce:29:ee:6b:29:7f:93:b2:53:0e:87:70:
         8f:74:91:67:39:8a:fc:7a:92:22:dc:0c:db:d0:b5:28:33:a0:
         b3:03:19:fb:a6:04:28:ae:b6:b5:84:b0:81:49:1f:82:44:8b:
         07:3a:46:20:36:de:bf:38:0e:b4:2c:c7:d0:57:0d:33:e5:68:
         a0:af:2a:99:35:0c:22:84:d1:28:47:8d:bf:55:22:1d:fd:8c:
         2a:22:f1:0a:f0:49:e2:4a:a9:28:59:a1:ee:ea:c9:0f:71:6a:
         b3:2d:b8:2b:a4:cf:67:94:5b:88:2b:0d:d8:40:75:11:97:eb:
         6d:7e:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----