Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16893705-869d-4c19-8ff7-0157574750ba.roa
File:                     16893705-869d-4c19-8ff7-0157574750ba.roa (raw, json)
Hash identifier:          xa3W0kfpCIzz3QIUk4zmWdg4QzgZltA8WF9c6lRWtnU=
Subject key identifier:   84:08:43:C7:A8:7F:85:BE:CD:B3:08:C5:EF:44:78:CF:E5:A1:D1:C2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4073A0F3A55FA4EC0413F09854C69E7A82B00F9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16893705-869d-4c19-8ff7-0157574750ba.roa
Signing time:             Wed 12 Nov 2025 01:11:37 +0000
ROA not before:           Wed 12 Nov 2025 01:11:37 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        40.192.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:73:a0:f3:a5:5f:a4:ec:04:13:f0:98:54:c6:9e:7a:82:b0:0f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:11:37 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=ad5e5ac054d2a260bc9e62029a28087b77011fc30f91af4f74ce2c27d8670220, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a5:7c:95:0f:73:f5:26:fd:70:35:e1:41:f2:
                    60:ee:b1:ff:54:9f:3f:e6:07:d6:bd:58:b6:bb:c1:
                    fb:2d:ce:f3:61:37:20:a3:ef:32:9a:11:99:87:e3:
                    75:bd:6b:e3:11:c1:2b:15:05:f6:52:7a:52:07:86:
                    8f:f0:7f:82:51:dd:0d:34:07:bf:28:7c:94:16:42:
                    9e:8e:3e:0d:e3:f3:34:66:6b:34:1d:b1:f4:66:26:
                    a2:0a:1e:73:5a:68:0d:94:23:dc:80:20:ac:18:68:
                    4e:8e:8e:0e:98:5c:28:ee:b2:41:f4:9c:59:a6:12:
                    80:47:f4:4f:a9:9a:42:12:5a:c9:ac:c8:5a:03:db:
                    b4:c5:8c:44:43:51:36:65:3d:91:b1:3e:29:94:cf:
                    96:bc:c7:94:b1:76:fd:18:6d:01:9b:6a:28:5a:bb:
                    0f:07:c7:cf:77:40:0a:60:09:ab:0b:62:f3:ee:66:
                    08:53:10:01:f9:56:bd:f5:62:c8:02:1c:47:f3:62:
                    74:31:ea:b4:6e:30:13:17:0d:f0:15:a2:7d:57:41:
                    c0:0f:82:67:d8:79:28:82:82:86:fe:fd:54:f7:90:
                    bd:d2:5a:14:c0:97:3f:94:fb:db:cd:cf:76:ca:0e:
                    fd:77:bf:3c:0b:89:0a:2c:6d:bf:44:b4:f6:3d:75:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:08:43:C7:A8:7F:85:BE:CD:B3:08:C5:EF:44:78:CF:E5:A1:D1:C2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16893705-869d-4c19-8ff7-0157574750ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:bb:df:21:1a:0d:3a:d8:3a:68:bf:28:3f:42:b8:09:68:
         f5:e1:8c:05:03:ed:6f:20:a9:1c:14:af:73:5a:f3:61:db:4a:
         33:b8:52:80:ad:f1:3b:10:11:ec:7c:91:33:ab:7e:f1:31:1e:
         a2:d5:ea:9b:01:52:de:5e:ef:08:4d:27:db:8f:65:9a:ea:10:
         32:2b:93:17:1f:98:07:0d:da:84:6e:f0:7f:69:3d:55:d5:3e:
         45:03:a8:60:68:2d:92:d9:ef:d5:08:fc:0e:c4:44:c5:99:1e:
         d0:6b:10:c6:58:bb:ce:7e:75:8f:75:de:e9:92:92:12:61:a9:
         43:9a:0b:72:0a:40:3a:e8:9a:21:a4:88:d3:88:44:0f:e4:27:
         d2:e3:20:a5:f9:c0:bb:b6:88:82:cd:af:22:3e:b4:d0:0a:0f:
         d1:d6:64:0e:9f:80:ce:93:ad:95:a0:c8:95:96:cd:b1:72:02:
         44:01:07:f8:89:a9:cc:41:c2:7a:10:b0:0c:8b:9b:10:7c:ca:
         a2:db:65:e4:c0:dc:09:c5:b5:f2:cf:b8:11:ae:6c:1b:9c:b6:
         8f:12:d6:57:ac:d8:fb:70:f1:cd:63:ff:1b:d5:ac:d7:4a:dc:
         49:92:a7:dc:f8:ff:b1:c7:fb:5c:41:06:c9:ea:62:bb:d9:90:
         6c:65:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----