Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
File:                     259b0750-ae62-42f7-84c0-e7c8b6acca96.roa (raw, json)
Hash identifier:          pXPeVVV9o01Zm9UaNdr48vlK0oncQ+5KPz7xtocLrDE=
Subject key identifier:   D9:09:6E:77:C5:F8:58:BC:B0:8B:BF:4F:F9:B1:65:C8:95:7E:C7:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2664524729F9FFC9C6A317CCEA46421160E3AAA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa
Signing time:             Tue 11 Nov 2025 00:20:39 +0000
ROA not before:           Tue 11 Nov 2025 00:20:39 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        162.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:52:47:29:f9:ff:c9:c6:a3:17:cc:ea:46:42:11:60:e3:aa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:20:39 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=ea148c81f56c27e1b22dd513c26bb76d19f8e4fab04329b3af811d034fd72d0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:b9:e9:8c:68:da:f2:9c:d8:85:28:e5:b0:
                    9f:9b:2f:fc:47:cb:54:e8:5e:d9:78:44:52:a6:da:
                    eb:df:a1:52:bb:fe:e9:b7:b9:aa:18:b7:1b:d6:cf:
                    e4:0d:9d:53:56:b9:d6:e9:be:11:a4:6e:94:c5:75:
                    f6:33:55:7b:01:46:d5:84:a2:81:41:ac:73:6d:aa:
                    17:e9:2a:73:0e:fb:9c:fa:01:38:b6:cb:85:04:00:
                    6d:e5:bd:22:cf:d9:24:b3:1e:06:a8:ff:18:36:32:
                    c0:dc:72:13:ec:3d:5a:ad:50:96:3e:54:55:9e:0e:
                    ef:12:08:91:57:95:fd:22:e4:9e:d7:e6:7c:cc:56:
                    ae:ad:64:c3:59:9d:a3:4c:e1:ee:e7:dc:7e:2f:b9:
                    1d:38:7b:f3:06:50:25:1f:83:8f:3b:0e:d6:2b:7c:
                    f0:5c:70:1b:f6:74:5a:be:16:56:57:b8:c4:eb:d8:
                    09:ea:39:14:a6:5a:93:cc:8b:d2:b0:5b:8a:a2:db:
                    6d:2d:0c:3d:81:ef:f4:c6:0c:df:12:41:cf:ad:bc:
                    1c:0b:fe:6f:e2:2a:72:06:ff:b8:2f:01:dd:cd:fa:
                    8d:7a:44:62:73:2d:bc:d6:eb:67:99:00:bc:47:c0:
                    c0:ed:02:36:e7:b5:a4:7c:5e:8a:ef:dc:10:01:5d:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:6E:77:C5:F8:58:BC:B0:8B:BF:4F:F9:B1:65:C8:95:7E:C7:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259b0750-ae62-42f7-84c0-e7c8b6acca96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:96:05:8a:75:34:29:96:30:44:69:12:8c:77:a1:41:d7:
         5e:cc:ce:05:51:cb:41:a1:b2:29:8d:55:f2:f8:de:cf:fd:bd:
         fc:26:ef:30:20:2d:1f:2b:16:c2:94:e2:a7:3e:77:d7:41:04:
         5a:6e:68:63:b1:81:d4:95:ac:fe:40:9f:02:02:b0:24:33:7b:
         fc:0c:83:68:a7:75:e9:95:e0:a5:fe:79:3a:82:4e:0e:67:cd:
         1c:db:20:fb:f6:f7:d5:ff:37:0e:e8:59:f7:2b:63:da:97:0b:
         a7:b1:82:f3:14:a1:e1:52:b7:ee:20:4d:f1:6a:c4:9a:eb:d0:
         ff:ff:75:20:47:83:5f:c7:ab:74:94:64:9f:46:0b:8c:9f:0c:
         32:30:9c:c0:59:ca:68:80:36:a0:7e:c8:51:17:fb:29:84:fe:
         8d:ae:41:0c:a5:ca:0e:f3:d9:fc:fe:8c:3d:29:88:c5:dd:54:
         18:b5:d8:03:03:37:d6:5a:69:ff:a1:99:5d:98:c5:d0:02:47:
         1c:5c:a3:f8:58:53:de:56:23:b5:6c:a9:d5:4b:d3:b1:a6:f0:
         e7:03:0f:30:ec:40:2c:09:c7:85:d6:36:b8:0a:ca:f9:79:8e:
         67:22:66:78:dc:8d:c2:7f:37:83:e5:96:4f:e0:ae:6e:98:bd:
         fc:6e:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----